Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/7067ee10-c09e-31e8-a8b3-837bbe6bc42d.roa
File:                     7067ee10-c09e-31e8-a8b3-837bbe6bc42d.roa (raw, json)
Hash identifier:          waqiOt1dXLS9KDStFjtw8+V65y0r7F+877PQRpOljog=
Subject key identifier:   3F:C2:38:CA:1F:F0:C5:B0:4F:1E:57:8F:D5:12:7A:28:49:4F:7A:25
Certificate issuer:       /CN=d6d708e8-5964-4587-8db1-e22545ec38a3
Certificate serial:       010D0C9F4328584F35E7CAB18C61A2E6B7855480
Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/7067ee10-c09e-31e8-a8b3-837bbe6bc42d.roa
Signing time:             Fri 18 Sep 2026 01:00:12 +0000
ROA not before:           Fri 18 Sep 2026 01:00:12 +0000
ROA not after:            Thu 17 Dec 2026 02:00:12 +0000
asID:                     21947
IP address blocks:        216.14.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:35:e7:ca:b1:8c:61:a2:e6:b7:85:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3
        Validity
            Not Before: Sep 18 01:00:12 2026 GMT
            Not After : Dec 17 02:00:12 2026 GMT
        Subject: CN=bd1c5648-5edc-48a2-93a2-03807f33b86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:73:54:82:49:69:b4:4e:9c:76:58:65:d8:
                    a7:64:82:f4:ae:cf:01:67:ae:82:0c:7d:f9:0a:96:
                    3d:12:fa:c8:a5:a0:98:41:6d:f9:7d:23:6d:c7:b7:
                    16:83:61:e0:c8:b6:5a:fb:2c:9b:43:5d:56:b8:95:
                    a4:84:17:96:b1:09:30:70:25:1a:1b:94:7a:60:ad:
                    72:65:ec:01:16:f9:18:94:87:47:53:78:9b:9d:7d:
                    f3:36:94:8d:f0:a0:10:be:6f:98:21:53:f5:72:dd:
                    ce:f8:9f:01:2d:91:05:0c:25:23:f8:1a:34:03:bd:
                    58:ee:fd:d8:6b:9b:ac:77:e6:95:29:0d:1a:c3:ad:
                    66:40:eb:9f:19:1b:37:c3:11:13:cd:6e:f6:60:f5:
                    27:3c:3e:51:9d:30:0e:32:be:b1:16:6a:2b:e0:4b:
                    0d:5a:04:5e:34:aa:67:e2:b5:e3:8e:84:de:80:dc:
                    e5:0f:3e:c4:0d:34:28:31:ee:53:46:1b:03:62:bb:
                    16:c0:a2:d8:c4:94:aa:80:16:22:7a:48:38:b8:bf:
                    f0:cf:20:b0:47:ae:82:bd:77:8d:5e:eb:7c:06:f8:
                    65:b1:1c:8e:51:38:58:7d:ec:a6:23:64:2b:18:eb:
                    a1:e8:f2:2a:f2:33:4e:16:29:f7:74:6d:16:b7:7e:
                    81:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C2:38:CA:1F:F0:C5:B0:4F:1E:57:8F:D5:12:7A:28:49:4F:7A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/7067ee10-c09e-31e8-a8b3-837bbe6bc42d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl

            X509v3 Authority Key Identifier:
                keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.14.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:3f:64:04:97:f8:b4:1d:c2:e3:c4:98:26:38:74:00:ee:4e:
         aa:63:08:b5:fa:45:f0:de:d2:70:dc:e3:8c:58:b6:ba:97:d4:
         20:e7:e4:ee:e9:34:aa:a6:a5:e6:94:2f:6c:39:60:1a:f1:9d:
         1e:6d:68:de:55:9a:31:07:0f:a8:25:22:9e:e9:6d:4d:ec:45:
         9c:3a:70:bf:31:e5:e2:ce:87:b3:ed:e3:19:09:f8:47:04:16:
         0a:8c:4f:18:5d:9c:e0:dd:d3:13:7a:38:e3:c4:2b:a2:45:8a:
         13:e7:2c:a6:f8:00:0d:25:fc:6b:42:3e:2c:68:d5:62:5c:6b:
         a0:da:92:74:18:c4:0f:f0:89:92:b2:0e:37:22:6e:97:7b:2b:
         50:31:59:49:4d:3f:37:f9:17:f1:9b:82:a8:04:f0:4d:0a:55:
         fd:8e:ec:bf:15:7d:31:b9:07:0c:75:d3:1d:5e:06:1c:1d:e1:
         74:58:4b:b5:20:af:a9:05:db:0f:8b:3b:a0:83:e3:0d:43:dd:
         01:d0:c9:60:dd:43:c7:71:d9:3c:b9:9f:bc:e4:fa:41:25:6a:
         03:d7:cf:d2:e2:62:ae:52:3e:9a:9f:72:b2:67:eb:f2:0b:1b:
         b6:f9:21:5e:e3:50:b4:e7:4c:ae:10:0c:b3:f8:74:d6:ad:35:
         3a:0b:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:53:13 2026 by rpki-client