Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f18159d9-33d3-3974-a9cb-ac9bf93d91fb.roa
File:                     f18159d9-33d3-3974-a9cb-ac9bf93d91fb.roa (raw, json)
Hash identifier:          2YyFuJPaSE4chHE/KW+rrhtVa74GhEZAL4njjSQY3r8=
Subject key identifier:   14:4F:9B:AD:CD:19:FE:B0:95:DE:B8:88:2C:C2:1C:9F:1C:A2:93:39
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA8EC4214C2DBB7D375B88E00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f18159d9-33d3-3974-a9cb-ac9bf93d91fb.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     3257
IP address blocks:        208.81.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:42:14:c2:db:b7:d3:75:b8:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=81ed8e88-757b-4750-a821-a73d2c4011ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:86:13:c3:f0:03:6e:ba:2c:aa:f1:96:a7:
                    89:46:47:1b:ef:ba:2c:3e:14:bd:e0:96:ff:89:9e:
                    52:1a:47:91:fd:ca:33:76:d8:a0:33:69:90:86:b2:
                    cd:60:64:af:1a:19:0f:55:45:e4:ea:4c:5b:38:37:
                    47:a1:96:e8:ca:c3:4d:63:bc:f6:09:72:12:83:2a:
                    04:69:4b:35:89:b6:78:31:a9:d0:39:15:dd:57:c7:
                    e4:3a:c7:5f:33:a5:a7:4c:94:87:3f:33:25:5c:37:
                    08:ef:e4:47:83:d2:4f:95:f7:5c:7c:01:d5:b0:f5:
                    3b:52:25:b2:39:2a:5c:a7:b2:42:60:1a:5d:df:6b:
                    e9:a9:73:b6:6c:f3:2e:42:d8:7d:bf:b0:9f:1a:d9:
                    d5:9a:84:54:21:05:15:00:b0:50:6b:50:a5:28:a5:
                    49:68:08:d4:2f:d4:14:ed:93:df:a2:58:45:1e:1d:
                    23:02:04:f2:00:f4:de:76:fb:16:62:23:ea:9e:0a:
                    cd:5e:9e:cf:42:c1:3f:8d:72:c6:35:69:c7:13:d8:
                    15:d4:17:81:92:f1:09:74:d2:d9:ee:55:22:3c:cc:
                    60:2f:64:35:fb:47:73:cb:9a:ad:bc:d7:00:03:62:
                    29:5d:3c:b8:f7:7f:7e:ee:10:23:d0:3d:b2:a6:24:
                    b5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4F:9B:AD:CD:19:FE:B0:95:DE:B8:88:2C:C2:1C:9F:1C:A2:93:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f18159d9-33d3-3974-a9cb-ac9bf93d91fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:8f:9d:df:08:df:36:66:08:f8:f3:81:da:41:29:f9:b2:38:
         4f:cd:06:f1:ea:52:64:56:a6:72:a7:1f:97:bb:cc:fe:fe:14:
         a7:55:cd:22:f7:0e:0d:d4:41:62:0e:ed:34:25:9c:54:3d:ec:
         0f:17:81:9c:0c:e9:af:7d:93:17:2c:f7:85:00:77:d2:75:dc:
         60:14:84:3d:ba:86:a9:58:37:01:4c:24:a9:31:49:15:2a:e3:
         85:f6:d6:db:86:3a:50:1d:be:33:9a:92:17:39:ab:29:5e:66:
         3b:1a:eb:10:b5:01:e8:22:d1:2f:a7:68:c7:4a:50:53:11:d2:
         29:62:db:e1:31:fc:8a:eb:6f:f5:fb:81:b3:5b:8d:ea:69:07:
         89:69:c0:44:67:28:45:ce:33:f0:b1:fc:20:b3:b2:34:dc:cf:
         2d:a6:a1:6a:4a:f4:b9:c1:13:6f:be:57:22:8b:34:8a:e8:e1:
         b6:5a:85:e2:96:8c:0d:76:00:7f:2c:4a:80:8b:40:11:e4:83:
         2c:d9:5a:af:98:ac:64:f6:d0:ec:35:18:5e:e3:5f:c6:0c:7c:
         ef:4e:51:e1:cf:14:09:a9:de:f1:dc:30:0b:c0:b4:2b:4a:4f:
         f4:e1:c3:9b:e1:46:aa:fc:00:35:4a:97:b2:05:8c:bb:cf:5b:
         a6:02:ce:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 19:42:05 2026 by rpki-client