Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8dc19ef-7d7f-3763-a858-7967943a0c28.roa
File:                     a8dc19ef-7d7f-3763-a858-7967943a0c28.roa (raw, json)
Hash identifier:          Xrt3HFbBlt3PmOJrngQr935/It31Uk2RYg8PzCdEHvU=
Subject key identifier:   C9:BA:FF:6B:4C:ED:11:A9:6D:67:D9:72:2A:2D:44:1E:BF:DE:9D:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F06725926369D860583717920
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8dc19ef-7d7f-3763-a858-7967943a0c28.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     22394
IP address blocks:        141.207.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:59:26:36:9d:86:05:83:71:79:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=52987bda-9181-4053-b67f-d67ce7c5c5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:13:8c:fc:d6:e5:2c:47:d9:ba:45:42:61:
                    c1:28:41:a4:67:64:18:94:60:d5:1c:f7:b3:fe:7d:
                    dc:27:73:27:bb:1c:de:05:81:3b:4d:84:e1:d1:4a:
                    5b:75:12:5c:48:14:b0:6a:7a:20:6e:df:e6:c1:4f:
                    7f:95:2a:07:af:8e:4f:3a:d8:a0:c9:89:34:be:c8:
                    cb:73:9c:20:a4:33:ab:a3:5d:03:a0:5c:f4:5a:9c:
                    a8:f4:0f:10:2a:21:5f:dd:d4:91:05:82:04:31:14:
                    0a:fa:59:ff:30:f5:b6:90:06:58:28:62:df:4d:55:
                    fd:89:3a:4d:27:d4:0a:52:ea:48:cf:af:85:ae:e4:
                    dd:fb:bc:e8:4b:fd:1a:a5:fe:ac:3b:3d:b5:3e:fb:
                    b2:77:db:4e:8f:7c:ed:17:27:d2:7b:7f:24:37:e0:
                    a6:40:30:63:24:79:c1:77:d9:dc:0f:47:e1:b0:fd:
                    16:2f:44:7a:04:c3:6c:18:d8:aa:1f:a0:85:a5:c3:
                    f8:fb:c0:37:4d:b1:20:74:91:b2:e2:ec:af:8b:96:
                    15:a5:06:a3:e8:38:fd:84:ac:63:6d:f9:e8:2b:11:
                    dc:f4:b1:d8:d5:36:1f:fb:30:ed:22:be:8b:06:44:
                    3f:e6:3d:67:51:ff:b9:15:bc:a5:b4:45:e8:44:62:
                    3e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BA:FF:6B:4C:ED:11:A9:6D:67:D9:72:2A:2D:44:1E:BF:DE:9D:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8dc19ef-7d7f-3763-a858-7967943a0c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:fa:23:83:1e:91:f4:b0:84:6d:ab:57:d6:0e:b8:1b:b1:
         e3:4d:73:dc:cd:f0:a6:7a:51:43:74:8c:90:f8:d0:18:59:45:
         5f:71:c3:00:41:43:27:31:a0:cf:82:45:90:d4:58:7c:6a:3b:
         25:cd:40:9b:ab:28:63:19:73:e4:76:c1:48:c6:96:2c:f1:85:
         0f:4f:da:9d:16:22:6e:32:e1:01:24:91:1d:65:1f:a7:7e:13:
         dc:39:1d:e5:41:fb:a8:77:9c:22:a5:94:40:26:cd:1a:93:78:
         a4:7f:30:30:0d:df:40:9c:4f:75:81:ad:f6:80:f7:eb:b3:12:
         61:d4:4b:24:5f:0a:63:a4:0f:71:9f:35:d7:32:e4:57:84:7d:
         b1:29:43:45:d8:0b:58:59:80:29:ac:48:4b:60:a8:aa:95:da:
         d4:58:57:22:c0:f9:74:db:97:31:a8:f9:d0:57:d6:c1:b6:42:
         84:b8:5d:9c:93:54:20:59:25:c0:8b:4f:da:04:6d:b7:73:62:
         aa:58:d9:11:3c:4e:cd:0d:a3:57:d2:95:c1:0c:a3:c1:54:c6:
         34:d5:e4:15:16:df:18:a3:cb:28:67:10:fe:cf:8a:e3:e1:c6:
         bc:17:5e:08:dc:7b:40:f1:4f:07:9e:a0:e2:b6:99:f3:4e:58:
         9a:0e:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:59:26 2026 by rpki-client