Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa
File:                     d1e734e2-ce89-3dd5-9697-dab100cd0408.roa (raw, json)
Hash identifier:          MbJlREsae4Fd+tZzuzOY3EIps3cZ9yzatU83Y5alnEo=
Subject key identifier:   98:09:72:8F:2E:38:76:63:58:95:4D:D1:F3:10:96:32:97:6C:D2:FC
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F4328584EEA874E9185633785A6FE5980
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        199.47.128.0/24 maxlen: 24
                          199.47.129.0/24 maxlen: 24
                          199.47.130.0/24 maxlen: 24
                          199.47.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:4e:91:85:63:37:85:a6:fe:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=bc397cd2-341f-46ad-9f08-870980a1e7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:1f:f1:49:27:10:de:03:4d:f9:0b:35:aa:
                    90:bb:e7:9d:41:2e:b1:d4:43:ae:c0:06:e1:cd:68:
                    07:4e:80:b2:30:48:46:25:00:67:5a:ff:f3:11:63:
                    1a:f4:31:e1:99:e0:3a:cb:08:59:0c:09:41:16:12:
                    0c:4d:d3:75:63:62:2a:4e:a9:00:d0:5d:16:75:72:
                    7a:db:77:7a:9b:5a:1b:bd:ec:93:a2:d6:89:0e:a2:
                    6c:ed:02:bf:b9:9a:45:16:70:7d:77:69:06:21:04:
                    71:7f:5f:67:8b:e5:ee:20:f2:95:2f:72:ac:31:56:
                    8b:c2:25:cc:77:7a:30:63:20:5e:77:7e:72:4a:75:
                    f1:73:7d:3b:d0:64:2b:3c:14:92:a7:e9:a3:e2:37:
                    50:48:cb:77:2f:cb:b3:22:d0:a7:97:e2:ed:93:cc:
                    8a:ff:d4:f8:4c:32:86:96:b5:cb:1b:7c:18:5e:f7:
                    84:13:83:84:1b:a4:a7:d0:3a:3d:46:fc:88:9a:57:
                    14:38:a2:50:6b:c2:62:be:cd:59:31:37:18:7d:9e:
                    31:5c:55:5b:6f:61:64:77:cb:0c:cb:3a:0c:a7:27:
                    59:87:fb:c4:00:c5:68:bd:40:dc:7a:07:ab:fa:79:
                    90:c0:0b:5b:23:e5:f3:74:0c:30:73:db:e5:b2:42:
                    5b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:09:72:8F:2E:38:76:63:58:95:4D:D1:F3:10:96:32:97:6C:D2:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/d1e734e2-ce89-3dd5-9697-dab100cd0408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:58:dc:d8:f5:ff:4c:15:c3:8d:ed:5c:fc:c1:ba:b3:99:fc:
         c6:9f:6a:f7:91:6e:1e:80:da:ae:a7:3c:09:f3:4d:2b:3c:5f:
         24:41:fc:80:9f:3b:a7:16:50:5d:47:d3:54:c3:08:3c:68:ab:
         39:1d:a5:60:b0:46:4b:34:ac:21:86:01:85:92:88:fa:a2:31:
         ec:70:19:12:6c:21:17:a2:46:13:fe:d5:5a:96:6a:aa:90:03:
         9f:72:3b:9e:50:0a:64:95:ad:bb:8b:42:a4:37:51:35:85:33:
         19:4a:eb:bb:36:c2:0d:ce:fb:c1:bd:6a:aa:bf:88:8c:a7:d1:
         c6:0f:c7:9d:38:24:65:b0:d4:60:69:79:fd:cb:1c:88:2b:b7:
         13:fb:21:9d:82:41:4b:c7:41:01:c4:ce:1b:d5:2f:41:5b:a9:
         65:58:69:6d:3a:7c:1d:85:f2:13:80:c1:9d:0b:f2:f8:36:d2:
         50:0a:81:89:cd:73:b9:07:f4:05:31:46:a4:d1:d1:b7:32:75:
         56:5e:66:6a:16:7b:0d:2a:24:72:93:bd:73:04:b0:c7:ce:ca:
         5e:f1:9d:64:90:e2:35:04:13:31:75:45:62:3d:5e:8d:48:da:
         06:51:f3:b7:68:f9:07:da:91:4b:14:76:65:77:b9:8c:94:2e:
         ae:c5:13:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 07:04:47 2026 by rpki-client