Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/a475cb48-33a4-3db1-a4b2-107d2c630165.roa
File:                     a475cb48-33a4-3db1-a4b2-107d2c630165.roa (raw, json)
Hash identifier:          33RmBKZWPV2KNwMO+/GKD5uw8qt6D+9Sqjclp7SjnHc=
Subject key identifier:   D8:B8:4F:72:5C:5D:B9:2E:AA:E8:DF:4D:30:78:0C:78:FF:9B:FA:9E
Certificate issuer:       /CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
Certificate serial:       010D0C9F4328584EA799CEDF047F320B0C19C544
Authority key identifier: CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/a475cb48-33a4-3db1-a4b2-107d2c630165.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21713
IP address blocks:        216.14.64.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:ce:df:04:7f:32:0b:0c:19:c5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4931e717-c1d1-4dd8-863d-5c06fb76f47b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=afe7ec86-314d-41cf-90d6-f89db322a0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a4:ae:8f:67:e9:2f:c5:25:7d:73:5a:ef:8e:
                    7f:c6:5b:d2:ea:45:ec:6e:fc:e0:7e:36:69:20:2a:
                    41:78:d3:e8:21:f7:ae:df:1f:c7:06:17:e1:53:70:
                    e7:c1:aa:48:c5:9a:ce:35:00:23:9a:28:c0:36:b9:
                    e2:d7:ce:9a:ce:a6:2b:6c:03:f5:22:94:3e:1e:c2:
                    f5:a0:91:02:3b:c8:cc:49:5e:0a:33:1d:1a:f9:88:
                    c1:5f:43:7e:5c:5d:84:06:ae:17:02:24:ce:4b:34:
                    4c:bc:9d:1c:be:42:af:c4:3a:b8:2f:9d:ff:f4:6f:
                    1b:61:1f:4a:4c:e3:b3:3f:ab:91:cc:6b:e2:81:e5:
                    d1:16:0e:b3:ce:55:85:69:02:33:4b:94:57:2f:61:
                    f3:4f:56:e2:9e:5a:96:cb:b8:5f:c8:6d:26:38:ca:
                    a1:98:2f:04:62:92:46:46:ad:07:6c:05:fd:43:fc:
                    af:20:d1:45:ff:af:c3:2b:d5:d3:56:f1:c0:de:e4:
                    96:cb:33:34:c8:b4:71:99:e9:d8:a5:8c:90:90:02:
                    1f:cd:95:e6:86:5f:40:e8:a2:ff:79:18:4b:8f:a8:
                    00:08:18:8c:f8:8d:fd:88:e6:30:d6:d5:89:fb:40:
                    93:87:10:f2:c0:fc:e3:c9:05:1f:f2:c4:31:56:2d:
                    18:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B8:4F:72:5C:5D:B9:2E:AA:E8:DF:4D:30:78:0C:78:FF:9B:FA:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/a475cb48-33a4-3db1-a4b2-107d2c630165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.crl

            X509v3 Authority Key Identifier:
                keyid:CE:42:FE:71:11:71:C3:49:1B:8D:B6:7B:74:E4:1F:4F:E2:91:DE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4931e717-c1d1-4dd8-863d-5c06fb76f47b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.14.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9c:89:b1:c7:7a:82:27:d9:d4:1b:26:1e:4f:76:73:20:40:
         7f:0b:87:27:c3:69:9c:23:91:6f:e8:28:1b:18:61:8e:96:16:
         6e:95:0f:6c:fe:b3:ba:9e:3a:43:4e:b2:5b:d3:29:f5:c2:54:
         51:ef:f0:98:8f:47:6a:31:d3:48:e1:fa:17:46:04:21:63:a8:
         13:8e:cc:64:e2:58:71:ea:f7:3d:98:00:f1:9e:4c:af:e7:63:
         3f:6f:3a:a7:0f:0f:4b:43:78:07:6e:74:35:dd:90:40:97:f1:
         47:6b:93:db:eb:91:e0:3c:0b:09:75:4e:64:de:8b:1a:64:c4:
         0c:92:92:da:b2:b8:84:f5:9e:5a:2d:36:83:a3:c2:fb:6e:1c:
         fa:f6:b3:3b:0b:72:b7:9f:26:25:39:97:ad:92:a5:e9:d3:36:
         5d:44:1c:ce:ac:e0:6d:d7:87:1d:6e:53:f3:ca:96:61:12:19:
         5a:4e:e4:34:2e:f4:8f:9a:b3:cd:7c:e1:31:ab:65:ff:fd:56:
         2e:fa:b5:3d:50:3d:e0:f9:e4:f5:18:20:5c:aa:40:71:da:dd:
         ff:5f:fe:f2:a1:e7:01:53:6d:92:33:f7:74:2c:3f:e9:c8:1a:
         75:9a:94:43:66:b6:80:57:bc:16:69:da:28:c6:3a:ee:05:51:
         99:e5:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:56:31 2026 by rpki-client