Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/17e83550-8e12-3729-bd61-45b159b8fec6.roa
File:                     17e83550-8e12-3729-bd61-45b159b8fec6.roa (raw, json)
Hash identifier:          afVcqpKOfGkkIBwid3o1M84vdIpO/Z+cCfICd/rMox8=
Subject key identifier:   B8:55:DE:78:14:0C:D2:1C:7E:92:E6:02:07:7F:85:B0:A4:D3:53:0B
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F103792826DE22B1C833D2980
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/17e83550-8e12-3729-bd61-45b159b8fec6.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     64267
IP address blocks:        198.1.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:92:82:6d:e2:2b:1c:83:3d:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=3c807d66-dd99-4aa4-a635-1ef311d3bfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b1:e1:6f:33:80:43:93:65:87:e8:22:34:27:
                    da:55:48:12:47:76:e0:8c:0b:ba:ec:e1:85:d9:cf:
                    e8:6b:3e:51:24:ed:08:41:95:82:33:47:da:a0:51:
                    67:f5:ac:4e:a7:67:77:8c:04:cc:f1:25:6a:12:d3:
                    55:16:b1:a0:b0:b9:4f:b3:1e:39:14:e9:67:1d:fa:
                    6c:a4:df:65:27:b3:60:f8:3f:a9:75:9b:66:73:34:
                    e9:6b:85:a7:9c:99:2f:ab:fe:4c:2e:c3:19:99:9f:
                    2e:c6:0d:9e:ae:50:62:aa:1d:85:5c:00:69:d4:ad:
                    33:96:61:48:85:af:d4:09:c3:47:cf:be:25:34:7d:
                    f3:38:07:49:4f:7e:eb:d6:c0:59:c2:3d:fb:1f:88:
                    f7:46:e6:48:55:c2:e6:38:76:30:19:dd:8c:77:3a:
                    e6:9c:7a:34:b8:a6:8f:28:a5:4e:28:38:ec:12:8a:
                    2a:d7:f3:2a:77:3f:52:a2:c5:17:af:1e:80:f8:4d:
                    ba:4d:25:28:87:46:ca:64:95:65:fd:8e:5b:59:f7:
                    8f:0b:70:eb:67:d1:40:30:9b:c0:7f:5d:60:9b:5b:
                    15:09:3d:33:f3:08:42:35:c3:80:dc:a1:bd:f4:34:
                    ae:bc:ce:ff:3b:25:65:40:f0:a0:d9:ea:b9:b1:97:
                    0a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:55:DE:78:14:0C:D2:1C:7E:92:E6:02:07:7F:85:B0:A4:D3:53:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/17e83550-8e12-3729-bd61-45b159b8fec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e8:c2:51:b1:02:14:f4:21:28:2f:3c:da:61:8c:6e:14:b1:
         0b:f5:34:b0:8d:5d:94:75:c3:c8:c6:e7:a0:d9:25:c1:e9:06:
         31:cb:eb:37:1f:d4:45:1c:fe:46:28:b3:fc:f8:17:41:dc:a6:
         7d:81:01:76:96:d1:9b:33:d1:21:b2:fa:dd:90:b4:41:bf:ac:
         3b:cd:e2:b4:9a:e4:e7:00:71:d0:49:af:4b:0d:65:94:d9:0c:
         a6:ef:68:12:2a:4c:ec:06:05:13:1c:06:f4:01:d0:db:ef:3e:
         cc:ee:b8:38:b7:8d:8b:01:f3:cd:98:f8:85:5a:88:9b:73:43:
         54:a8:7c:a8:12:19:4d:ac:7e:d6:f0:b9:22:45:a0:0c:0f:b9:
         cb:8a:b4:9f:16:68:ed:98:8b:4e:5b:42:cf:0c:73:e1:07:79:
         c0:62:79:61:04:48:5b:79:6d:d5:71:38:0f:88:08:8c:28:b7:
         2b:a5:43:7b:52:e1:02:ef:e6:ca:06:67:1a:61:cc:d2:cd:f8:
         66:08:a6:a1:bc:a7:03:f7:5c:7c:42:c0:50:66:ab:da:5e:7d:
         05:89:fa:40:a8:7d:78:b9:db:7a:73:90:d8:76:50:2a:01:d4:
         47:9a:b7:42:80:dc:ed:5e:8d:56:91:13:e9:65:b5:9b:fa:de:
         b9:16:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:38:10 2026 by rpki-client