Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e2be13c-f18a-3482-ab2d-eaa345097bf8.roa
File:                     3e2be13c-f18a-3482-ab2d-eaa345097bf8.roa (raw, json)
Hash identifier:          khxBcmSMpbdFt206c2hmG/qItign34Ahhvinq5bcI5c=
Subject key identifier:   82:A9:1D:9B:F6:BA:9E:9D:CA:16:B7:81:99:BC:CE:88:62:A2:F7:87
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584F5E62EBC31AC9C7E80E926580
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e2be13c-f18a-3482-ab2d-eaa345097bf8.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     0
IP address blocks:        63.215.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:eb:c3:1a:c9:c7:e8:0e:92:65:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=d021a42f-aebd-40c3-9f53-3f903b1074ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:00:c2:ab:87:c5:63:8f:a5:b9:38:78:41:8c:
                    bf:54:76:ca:7d:40:11:31:c8:b9:bb:8c:cb:00:eb:
                    5d:b6:94:04:d5:18:a0:5e:90:5e:74:c7:8f:ec:66:
                    2b:2b:37:2e:c7:2a:b2:0e:d4:84:d9:ac:1b:c7:81:
                    b7:ee:1b:29:9e:e3:f9:58:e5:bd:ff:93:3b:68:60:
                    af:53:74:02:b8:2d:4e:70:94:89:cd:4e:84:1d:07:
                    95:55:44:ce:90:57:d6:d6:3a:dc:15:52:f9:39:74:
                    2d:81:3b:2f:5c:0d:e9:70:f3:a5:de:05:12:b5:0c:
                    85:f1:d0:18:1d:fb:49:35:dd:9c:93:6c:49:ec:d7:
                    51:06:27:6b:60:30:3d:44:20:73:d9:c8:be:e5:ff:
                    60:76:d9:5e:f5:e8:cd:62:8c:7b:4b:74:7f:24:0b:
                    ac:ee:67:c6:fe:8b:95:b4:5e:09:0a:ae:b7:e0:f5:
                    53:18:f8:c0:79:4f:87:bb:5b:ca:d6:a2:c7:ce:70:
                    0c:a9:25:f9:18:a8:76:df:db:82:da:12:c5:a3:b4:
                    1f:8a:d6:fc:5d:7c:ac:35:86:96:c6:20:0c:a4:d8:
                    45:24:82:d1:65:8f:b4:e4:7f:f8:06:ee:db:55:8d:
                    b2:1d:3f:3f:1f:5c:f9:a6:f1:a6:b1:a5:56:f9:4f:
                    e6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:1D:9B:F6:BA:9E:9D:CA:16:B7:81:99:BC:CE:88:62:A2:F7:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3e2be13c-f18a-3482-ab2d-eaa345097bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.215.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:cc:e4:0e:2a:16:ff:d3:f8:fd:a3:f2:74:92:c8:2c:ed:b0:
         b2:04:33:fe:38:94:c3:05:4e:3c:78:47:8a:f0:2d:f3:d3:2e:
         51:2b:a9:78:64:02:ba:97:16:d0:13:4f:f5:f6:21:c9:3c:ff:
         c6:6c:79:58:0a:e8:60:e4:6a:a1:37:05:7f:8b:d6:26:9c:18:
         7d:1f:7b:7e:00:eb:21:c3:db:5f:c2:ae:f0:29:93:c2:b4:c2:
         b1:21:f1:30:9c:23:86:91:31:95:e4:db:c5:42:e8:f0:e6:e7:
         32:3b:6e:1b:ef:a5:c3:dc:77:18:10:e2:b0:d1:5f:11:1e:08:
         49:53:98:ca:38:f6:10:ea:0d:ba:24:9c:06:86:f3:ae:cf:bf:
         a8:2d:f7:af:99:78:e3:b4:77:28:8f:58:e0:b8:6a:e6:fc:66:
         90:40:98:40:b8:3c:dc:bd:d8:a1:71:25:46:a9:0b:63:ef:e2:
         99:96:da:06:c4:d4:12:aa:e6:6b:aa:b9:89:6c:2e:a6:ce:00:
         52:18:07:de:90:f8:09:fc:d7:d7:4f:89:14:57:21:45:ab:74:
         03:dc:cb:a4:0d:96:1e:bc:79:d0:c6:76:4a:7e:a6:3e:06:a1:
         9e:11:bc:8a:19:3e:a4:ca:17:66:d4:ce:98:0f:cc:84:be:6f:
         dc:d0:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:44:46 2026 by rpki-client