Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa
File:                     9e385ca2-c418-3d2f-acb5-00a220501733.roa (raw, json)
Hash identifier:          w4AMuOtnvhnakz+UwE4vfe3oACAMrpZrJn0qsnV4WJQ=
Subject key identifier:   E3:A0:11:49:60:1B:81:C1:1F:D5:6D:D5:72:0C:54:1B:05:FA:3C:B3
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584F3CE28CB30C58BEC7301BED80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     19795
IP address blocks:        208.85.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8c:b3:0c:58:be:c7:30:1b:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=1f67ed5a-078f-48fb-a5df-0ff740eaf02d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a7:1f:90:df:fe:fc:e3:b9:51:a2:f3:c8:fc:
                    45:4f:af:60:bb:21:05:34:50:f3:01:92:db:6a:95:
                    9f:c9:ad:89:a9:5f:4a:80:0f:e4:59:9e:91:03:fc:
                    55:62:e4:0e:04:0f:1b:cc:49:3c:28:82:a0:7e:b7:
                    ec:d6:7f:f7:e4:6d:b0:13:15:8d:4d:6b:eb:dd:71:
                    97:32:cd:ea:36:cf:43:f3:2b:27:0f:12:5a:a3:c5:
                    48:bb:a5:4b:19:22:40:35:cc:8f:5b:67:f5:ee:34:
                    53:22:68:51:68:ee:d6:69:af:4a:d6:c7:98:58:47:
                    f8:83:9d:fa:c4:47:95:87:8c:fc:a9:c8:a8:d0:cf:
                    12:36:81:98:80:99:67:85:fc:72:5f:5c:4b:7b:41:
                    37:fe:0c:f9:d1:3b:bd:a4:4c:c9:dc:8f:88:a4:bb:
                    40:ec:14:10:76:92:73:d6:19:4c:f5:2b:8b:16:ef:
                    b0:56:3b:f0:58:04:9d:46:74:0f:89:22:d9:53:32:
                    33:d8:5f:49:19:32:eb:9c:a5:09:b2:68:08:34:78:
                    3c:a6:75:84:c9:62:b8:ca:b0:8b:af:83:35:a7:68:
                    38:ea:a6:c1:da:a9:b3:54:cf:2e:52:7b:65:ff:b3:
                    34:48:43:c3:aa:4c:63:39:ea:96:5d:b5:43:82:bb:
                    08:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A0:11:49:60:1B:81:C1:1F:D5:6D:D5:72:0C:54:1B:05:FA:3C:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9e385ca2-c418-3d2f-acb5-00a220501733.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:bb:cb:e9:df:5e:ba:f8:72:b5:22:0d:d1:75:2c:5c:b2:8b:
         6d:6e:87:fa:69:57:46:2e:03:3f:47:33:0b:89:08:0d:11:8a:
         a6:f2:e5:ef:e2:30:3e:a8:cc:0c:27:b1:3e:66:24:7c:0f:1f:
         8a:58:66:e8:39:70:60:3e:b4:b0:5d:6f:94:e8:9b:5b:ec:06:
         b5:b6:f0:0b:24:20:d3:78:a8:7c:6b:bf:7d:ae:35:0c:bb:19:
         40:2f:a6:3d:60:80:d2:99:e6:9f:c7:01:dc:e6:99:c3:32:dc:
         2d:43:e8:79:55:a4:8d:ac:06:d6:96:21:4f:dd:2c:2e:61:54:
         89:84:bb:3a:48:d7:fa:04:05:ca:3c:a0:ee:4e:a9:d0:5f:5e:
         8b:af:d6:22:29:1c:41:97:89:cb:17:bb:f4:69:dc:34:f1:30:
         80:43:a4:62:32:9a:f8:64:3c:ca:e1:db:a9:b2:d5:d7:a2:e5:
         fd:05:da:91:dd:1b:59:c4:84:1d:23:ed:86:ba:64:a3:ff:38:
         c8:52:37:06:49:cc:60:96:fd:f6:b2:d9:79:5f:32:11:73:8e:
         e5:5b:98:74:2a:1e:b9:56:e5:5b:51:86:93:03:5e:b0:70:f7:
         cd:24:f6:98:fc:ef:18:e2:9d:e4:c5:1f:b1:74:dc:a4:fd:df:
         28:84:ec:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:02:51 2026 by rpki-client