Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ea93007e-0d9e-3e9a-9423-f4260d200e39.roa
File:                     ea93007e-0d9e-3e9a-9423-f4260d200e39.roa (raw, json)
Hash identifier:          NWrP7mMXpvf7FMU5TegHPIv6fp1vgCfmgYyA0zCOP94=
Subject key identifier:   8C:FD:9F:FB:5F:75:8B:62:93:A7:7E:9E:DE:EF:1D:EC:AC:6E:22:85
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584EAC87844A8AB39C1D6CBB1A80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ea93007e-0d9e-3e9a-9423-f4260d200e39.roa
Signing time:             Thu 30 Jul 2026 20:00:36 +0000
ROA not before:           Thu 30 Jul 2026 20:00:36 +0000
ROA not after:            Wed 28 Oct 2026 20:00:36 +0000
asID:                     0
IP address blocks:        204.160.0.0/14 maxlen: 14
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ac:87:84:4a:8a:b3:9c:1d:6c:bb:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul 30 20:00:36 2026 GMT
            Not After : Oct 28 20:00:36 2026 GMT
        Subject: CN=121e8f30-d460-4b72-b399-2e3ff59ccd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:99:1f:a8:91:e1:39:37:d3:6b:cc:b8:36:89:
                    c6:b9:17:40:d5:3d:0e:15:fe:23:b6:1a:91:2f:22:
                    a7:e4:e5:0d:1a:cd:a9:62:62:43:b5:6e:62:9e:a4:
                    62:eb:ad:33:db:e4:d7:2b:c4:06:3e:27:ce:59:c2:
                    08:7c:0b:a9:8d:53:96:74:de:5d:9b:47:f1:10:52:
                    4e:b1:67:b4:41:0e:89:b5:84:56:0f:e3:49:8b:1b:
                    3c:e7:81:ea:63:0f:d5:4c:54:a9:57:5b:10:3a:4a:
                    67:55:42:a2:66:48:66:52:7b:cf:ed:1b:22:c8:11:
                    8d:79:1a:bc:e8:5d:cc:1a:77:cd:bc:d8:a6:02:b7:
                    39:3d:55:88:b9:7a:2b:06:3c:75:11:8f:7c:73:9d:
                    36:26:6c:4c:d0:0d:be:1b:d6:3a:da:d6:32:48:20:
                    5c:28:c8:49:b7:60:aa:67:f6:74:50:00:02:8f:dc:
                    f7:e5:07:25:d0:0e:7b:8a:7f:06:9a:c5:c9:d1:ee:
                    48:81:92:c6:d4:d8:12:1c:14:d6:e0:98:cc:7a:82:
                    33:38:f2:5b:84:7f:b3:fe:e6:cf:de:c2:7a:90:8d:
                    11:fa:ac:c9:8f:3c:0a:b0:b9:2d:64:4e:a6:41:12:
                    90:37:9d:a2:9f:1b:3a:09:88:70:c4:d9:90:62:53:
                    f0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FD:9F:FB:5F:75:8B:62:93:A7:7E:9E:DE:EF:1D:EC:AC:6E:22:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/ea93007e-0d9e-3e9a-9423-f4260d200e39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.160.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:0d:e1:4d:40:4f:ee:5f:8f:7b:51:69:3c:79:99:c5:43:3f:
         fa:04:d4:bd:77:bb:bc:c7:de:30:6a:6d:f9:25:36:10:c5:ca:
         54:b1:b7:ae:dd:f9:50:26:86:77:0a:fc:2e:33:67:88:d9:bc:
         9d:1b:e5:cc:a7:08:89:34:98:4d:de:65:ab:82:56:dc:d4:f9:
         f8:a8:51:60:57:85:56:b5:a6:15:ec:2a:38:0d:d7:37:17:30:
         60:72:de:56:7c:e9:ef:4b:c5:24:f3:ce:d5:89:67:b2:4e:57:
         6f:dd:44:f2:58:29:99:a5:98:7c:bb:ea:54:17:5b:60:57:87:
         72:37:61:ab:a3:f4:a2:55:1e:44:d7:20:41:51:0c:9e:48:0f:
         e1:2b:68:1b:15:49:9c:6e:fc:03:fa:e8:57:e4:89:e0:f6:73:
         d8:10:6a:d3:d6:a8:d2:52:8e:a4:4b:47:75:7a:e7:4d:18:63:
         75:1b:e8:5c:9d:84:48:74:3a:ba:23:1c:ce:da:a8:e4:89:73:
         21:c0:7e:63:2c:51:62:18:43:87:29:da:a4:79:68:78:0c:13:
         4d:81:2b:7b:f1:09:5e:f4:33:83:96:3a:49:93:b4:9f:e8:05:
         9b:fd:5e:27:5d:c3:fb:aa:c0:69:a7:de:94:f0:1b:ba:25:46:
         5d:fb:1a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:28:40 2026 by rpki-client