Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e2e3392f-9d71-38df-9eb1-f19989392098.roa
File:                     e2e3392f-9d71-38df-9eb1-f19989392098.roa (raw, json)
Hash identifier:          L4Ke622DBZV8d8uuVFUmY0A6zU32vU5Bs1m34Ga6H6Y=
Subject key identifier:   CB:12:3A:EE:E0:45:5D:16:FA:AE:49:00:5C:DC:DC:EC:D7:DD:79:F8
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F58CD4DEB32A02959F02A6AC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e2e3392f-9d71-38df-9eb1-f19989392098.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     834
IP address blocks:        209.101.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:4d:eb:32:a0:29:59:f0:2a:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=6c0b8fb1-000f-4c6a-9b17-eb9e9f6d55fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:c4:35:16:ba:af:7f:2e:00:0f:b0:0a:26:
                    c9:a1:a3:7b:02:5d:4f:7a:1c:79:f0:a5:92:10:3b:
                    5e:27:ea:71:d5:2a:be:cb:f9:47:fc:54:ef:13:59:
                    73:58:90:63:14:f1:68:e0:d3:ab:52:27:5c:c3:c1:
                    ce:11:24:85:86:f8:e5:ee:30:19:6d:c5:68:a2:6a:
                    51:ba:95:07:73:f7:87:8e:d0:be:e1:47:a8:8a:7d:
                    78:7a:bf:36:82:bc:96:f4:7b:46:34:c0:1d:b5:af:
                    ff:d2:4c:03:66:3c:80:5d:3a:fb:85:2f:5f:ba:62:
                    a7:27:f6:ef:d4:f6:18:c8:4b:9a:d9:6b:69:9a:c8:
                    57:7c:c8:d6:51:7c:ed:79:03:0a:af:41:f4:d6:cd:
                    70:5e:71:11:e5:34:1a:f2:85:e7:14:af:c9:cf:52:
                    a7:f2:00:90:63:d5:71:02:9c:f7:f1:af:21:a4:57:
                    0c:2a:bd:0e:3c:d2:fd:77:eb:fd:38:14:02:0c:37:
                    67:2c:46:4c:92:93:7c:ed:15:45:e7:0d:05:ce:7c:
                    00:72:22:02:7f:91:78:69:7b:fa:30:06:f2:73:7f:
                    19:5e:ad:9a:c0:47:d3:7a:5f:92:5c:46:41:b3:16:
                    fd:87:e0:21:e5:c0:d7:97:a2:b3:ce:b2:38:a5:18:
                    df:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:12:3A:EE:E0:45:5D:16:FA:AE:49:00:5C:DC:DC:EC:D7:DD:79:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e2e3392f-9d71-38df-9eb1-f19989392098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.101.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ee:e1:26:ae:9f:30:ee:39:a3:eb:27:0a:05:74:3e:0c:76:
         4a:12:fa:5b:83:cb:f8:26:94:da:d8:2f:a6:c4:f6:38:8d:84:
         d7:87:06:bc:b7:fc:0d:88:a4:8e:25:7e:bf:3d:2c:21:1b:0e:
         d5:bc:6e:d2:0b:3e:ce:91:66:53:6d:97:50:27:79:3e:16:50:
         fe:f5:a0:82:7a:6c:73:a4:9b:10:31:9b:d7:86:47:70:ef:53:
         31:a5:16:ec:5b:4d:9b:b6:61:ea:6f:9c:8d:ac:ac:bb:36:eb:
         79:7c:97:10:99:f2:54:8a:3d:30:e5:22:4f:d6:16:0b:1d:d6:
         f6:4c:18:9d:0b:6c:7b:8d:50:02:0d:a7:e2:30:38:fe:6d:ae:
         ad:e0:3e:e9:3b:90:ee:9f:fe:47:ad:b3:8a:2f:72:96:d9:53:
         08:32:8d:47:00:bf:bc:6e:dc:ee:c9:b1:11:5f:d2:28:9c:d2:
         34:bc:3f:b5:e2:78:0d:f8:79:f3:e2:4f:5b:5e:c1:c0:b6:44:
         89:b4:9d:ec:1d:f0:0c:36:0d:7d:4e:5b:36:d7:da:c1:72:dd:
         38:1d:31:35:69:5d:ba:5b:5c:c7:e3:26:d6:6a:9f:17:91:e7:
         01:42:b0:cc:2b:7c:8d:9c:d5:d9:07:9f:8c:c2:d3:c3:66:22:
         46:98:0e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:36:20 2026 by rpki-client