Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b12816f6-6546-36fb-9436-288140187dbd.roa
File:                     b12816f6-6546-36fb-9436-288140187dbd.roa (raw, json)
Hash identifier:          Z0ifpoRenaLprErrIDEU2r3mU/1+ZjzsxAB3cSSsAIw=
Subject key identifier:   0C:0A:C0:20:69:57:C3:ED:52:18:4A:6E:E8:72:FD:9B:E7:48:6C:BE
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584EFCACC58CFB6882DD8A0B6780
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b12816f6-6546-36fb-9436-288140187dbd.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     14524
IP address blocks:        208.156.64.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c5:8c:fb:68:82:dd:8a:0b:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=a7f34ba3-e2a2-4246-8282-a87c5eaa849b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8d:88:93:51:b1:3d:e0:fd:a4:b6:01:c8:53:
                    3d:e6:3c:62:40:c1:9a:23:e2:7f:5f:da:7f:44:27:
                    35:e3:34:46:b0:6c:f9:5c:c5:50:e6:77:f9:e1:11:
                    e8:16:9f:aa:d3:ac:91:58:14:60:79:4e:f2:57:35:
                    dc:30:07:0d:98:3d:6d:32:83:2e:ee:85:58:5e:f2:
                    ae:f2:9f:75:92:73:e4:ba:b9:05:7c:2e:c0:1f:b3:
                    c4:84:a7:ba:57:1c:c1:43:4d:28:64:95:10:dd:9f:
                    12:2b:07:f8:45:8e:7b:4b:ba:ba:d0:41:c9:34:d8:
                    94:74:7c:a5:e1:ce:d3:b9:0a:19:b3:b2:14:dd:22:
                    17:47:44:af:5b:28:1d:aa:5e:16:dc:d1:3d:0b:ad:
                    1d:d7:0c:90:da:2b:4a:ec:c3:f3:ac:f7:3d:a7:0f:
                    22:dd:0d:05:77:2e:e1:df:05:2a:ca:b2:09:9c:07:
                    49:61:b6:43:e0:42:ad:76:63:6f:66:1d:5c:f0:be:
                    df:76:c3:79:a4:d0:96:38:7c:42:b1:56:02:a1:39:
                    d9:ad:24:4b:36:78:c5:79:8c:d0:8a:64:1c:7f:26:
                    b4:21:19:71:d0:c2:59:b2:eb:6e:83:9f:69:59:37:
                    d1:1d:7e:f3:5f:87:1d:7a:2e:f6:9a:b3:56:a4:12:
                    6f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0A:C0:20:69:57:C3:ED:52:18:4A:6E:E8:72:FD:9B:E7:48:6C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/b12816f6-6546-36fb-9436-288140187dbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.156.64.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:00:2d:7f:17:99:ff:c4:a5:f8:31:b8:52:c3:c7:af:5c:27:
         ed:b8:dc:eb:30:94:a1:1f:8b:de:72:57:59:23:a7:64:47:1f:
         c3:dd:6e:6f:6e:a6:c0:ef:ab:10:21:52:d5:47:83:c0:c5:23:
         d3:2e:d8:39:c4:6b:a1:ad:33:5a:f9:1a:20:a1:8e:aa:3c:4a:
         2b:ea:48:ac:40:07:40:16:8e:55:69:b6:0f:9d:af:cc:33:6d:
         00:1b:00:76:9a:1d:66:3a:75:6b:67:70:ef:f7:43:80:45:bf:
         bd:46:69:40:a1:71:b2:55:18:b0:01:58:55:77:4a:a0:8e:6f:
         da:0e:82:27:d2:a9:1c:37:2b:90:9e:f8:03:40:3c:bf:85:71:
         9f:87:25:a3:d5:ec:6d:44:a3:60:77:b6:43:83:d9:1b:05:ab:
         e8:b6:5a:31:c6:15:14:b9:46:b4:09:ce:cd:42:8c:b9:32:7d:
         d2:ff:a9:24:be:32:c3:4c:a4:0c:77:e7:3a:03:ea:e7:26:98:
         f4:e8:5e:c7:b6:81:ef:e0:96:9f:3b:9e:65:de:44:b8:56:cb:
         c5:f8:21:97:c7:b2:5f:d0:3a:25:75:e1:b0:01:c4:e9:b5:a4:
         56:b7:25:da:73:c8:00:31:63:fd:b4:69:03:c3:15:24:a5:48:
         0b:44:3d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:14:15 2026 by rpki-client