Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b8be8a49-76b1-301a-a7e1-7762197d6f8f.roa
File:                     b8be8a49-76b1-301a-a7e1-7762197d6f8f.roa (raw, json)
Hash identifier:          bZOBgaGpFZJdVgYnwEWBbhKUPKpbSTPxDIamieyzYtc=
Subject key identifier:   85:69:A1:8B:F2:C6:CE:1E:27:F2:91:25:4F:E3:2A:5A:76:11:12:8B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D80FFDBB5FA588BDB064D21D0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b8be8a49-76b1-301a-a7e1-7762197d6f8f.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     6220
IP address blocks:        205.179.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:db:b5:fa:58:8b:db:06:4d:21:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=0e974ef8-1c25-4096-a713-148407b5241d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:0d:2f:51:be:e9:17:b2:32:ce:ff:52:af:
                    a3:21:d7:d3:f6:4a:cd:f7:f5:28:5c:e2:10:3f:bf:
                    eb:d6:41:8c:f5:19:9a:45:46:bb:84:d8:85:f3:34:
                    31:3a:95:d1:07:95:fd:38:5b:f0:47:81:5f:0a:ce:
                    10:7d:e0:db:22:fc:c7:c5:4f:9e:dd:ea:5c:94:40:
                    9b:bd:21:04:78:47:f3:7a:13:38:23:bf:74:fe:71:
                    6b:6b:fd:99:45:4c:c7:5d:0a:c6:65:fa:7f:fd:4e:
                    32:3f:75:5d:72:d6:f7:0a:1b:e6:9a:dd:da:4b:c3:
                    aa:16:cc:a2:30:68:a5:4c:dd:a5:26:31:7b:65:68:
                    f8:0f:77:29:9c:53:8b:45:81:39:38:47:bf:ac:cc:
                    ee:d3:22:d2:6a:a9:cb:92:54:96:27:a4:d6:35:5b:
                    d5:34:7d:c0:67:ec:9a:0e:e2:e3:28:b4:0d:81:da:
                    24:2d:dd:9d:e5:76:ef:f9:e3:bb:9d:1b:4f:4f:e4:
                    39:ea:52:a7:b0:2c:d8:99:48:a6:13:83:0e:ef:dd:
                    83:59:88:30:d0:67:5b:02:c2:ce:ac:a9:a1:96:54:
                    05:99:22:09:90:8e:9e:9d:9a:12:8d:40:85:cc:a5:
                    e0:7b:c1:a9:da:c0:43:f7:29:5b:d7:80:fb:e3:c8:
                    24:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:69:A1:8B:F2:C6:CE:1E:27:F2:91:25:4F:E3:2A:5A:76:11:12:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b8be8a49-76b1-301a-a7e1-7762197d6f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.179.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:a0:83:c1:fa:0f:a9:11:b0:23:0a:71:32:19:3e:64:5a:
         3e:ab:ac:4e:47:1c:c0:b9:db:92:8f:a2:7a:11:59:6e:54:b5:
         53:62:18:18:26:7f:36:a7:68:f7:00:5e:2f:c5:3f:0d:f7:08:
         3b:41:a8:10:96:d8:2c:b0:15:04:c5:cb:03:e8:18:8a:c5:e0:
         cc:be:0a:34:12:22:a2:cd:ea:ba:d3:86:ac:86:27:e8:88:eb:
         50:13:53:39:5d:ec:72:7a:0d:56:95:09:8c:5f:01:02:ff:4d:
         9d:d8:22:4b:a2:cf:d3:da:14:93:ba:a0:7f:f6:e3:03:c9:e6:
         ab:3f:15:5b:d4:93:c9:13:43:79:bf:fa:02:b2:e6:41:37:02:
         ea:10:3f:f8:4f:76:88:54:ee:e1:b2:2b:63:36:4a:4e:6d:a6:
         3a:8c:a7:fb:ba:b6:1b:14:81:87:6c:3a:11:d1:5d:c1:0c:0f:
         fb:48:6c:5f:19:7c:49:fa:15:46:91:c7:a1:c3:33:a8:08:de:
         56:09:16:00:7d:dc:60:13:40:e7:e5:38:79:0d:1b:93:b4:a1:
         e4:c5:76:8d:01:d3:0a:5c:77:52:75:ba:dd:d1:c4:ed:10:2e:
         cf:ee:d2:cb:96:32:55:31:63:0e:6d:30:ea:1b:df:10:8d:c9:
         28:4c:e8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:22 2026 by rpki-client