Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c3239c1-c644-4ac5-9686-bdd41f1afcd2/6cfaa042-1142-3c91-9372-da12c526fe67.roa
File:                     6cfaa042-1142-3c91-9372-da12c526fe67.roa (raw, json)
Hash identifier:          Lr3V0TrzumhgAsYsYjyrACasyRtyF5WdTxufONVFlgQ=
Subject key identifier:   89:2D:40:77:0F:52:2B:4A:D1:30:90:10:64:CF:6A:2E:4E:8D:28:0C
Certificate issuer:       /CN=2c3239c1-c644-4ac5-9686-bdd41f1afcd2
Certificate serial:       010D0C9F4328584EE4F5A7F7E0146E96182B2C80
Authority key identifier: B2:06:5E:7E:86:C1:2C:FF:CE:B4:0D:29:1E:1C:77:82:C7:6D:9F:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c3239c1-c644-4ac5-9686-bdd41f1afcd2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c3239c1-c644-4ac5-9686-bdd41f1afcd2/6cfaa042-1142-3c91-9372-da12c526fe67.roa
Signing time:             Thu 20 Aug 2026 01:07:47 +0000
ROA not before:           Thu 20 Aug 2026 01:07:47 +0000
ROA not after:            Wed 18 Nov 2026 02:07:47 +0000
asID:                     36433
IP address blocks:        156.47.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c3239c1-c644-4ac5-9686-bdd41f1afcd2/2c3239c1-c644-4ac5-9686-bdd41f1afcd2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c3239c1-c644-4ac5-9686-bdd41f1afcd2/2c3239c1-c644-4ac5-9686-bdd41f1afcd2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c3239c1-c644-4ac5-9686-bdd41f1afcd2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:f5:a7:f7:e0:14:6e:96:18:2b:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3239c1-c644-4ac5-9686-bdd41f1afcd2
        Validity
            Not Before: Aug 20 01:07:47 2026 GMT
            Not After : Nov 18 02:07:47 2026 GMT
        Subject: CN=07dee885-6c77-4143-a30f-6e09eba822db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:15:a6:ba:d0:34:f6:2e:ce:52:7e:91:c0:8c:
                    72:d8:51:f3:de:bb:a0:fc:a1:dc:a9:79:26:dc:9b:
                    7a:cf:3d:24:58:8b:7f:11:b4:ad:cc:6b:4e:a2:df:
                    d9:ef:d8:e4:39:94:18:f6:b9:62:ec:75:1f:43:d4:
                    90:01:7d:e6:be:ff:6e:94:e8:d7:d6:09:bf:8a:cc:
                    ba:0c:c4:06:f8:95:2b:8d:1d:75:79:ec:2c:e0:d8:
                    89:b3:c8:fa:33:d3:a5:4d:ed:39:80:f1:32:fd:8d:
                    98:1f:43:eb:7d:d2:86:3f:42:38:b9:45:dc:d9:a3:
                    15:5d:84:52:f0:a6:34:00:6f:25:0b:d6:d6:49:65:
                    ab:35:6d:37:4f:26:ae:48:ac:9e:b3:3e:7e:97:d9:
                    d9:26:5d:3b:31:89:9d:76:b2:d6:2c:49:5d:27:9d:
                    59:1b:9a:c6:2a:5d:03:dd:27:df:55:1a:43:3a:c3:
                    3d:16:f8:7d:65:19:12:f7:ba:ac:49:59:ec:3e:a2:
                    e6:b7:6f:a9:60:d3:f3:66:a7:a7:21:e2:a2:bc:15:
                    61:80:ff:00:a6:f4:58:ad:c4:ec:c4:5d:7f:fb:2e:
                    29:9b:f8:0e:ab:cf:fa:f1:82:83:f3:bf:62:b9:53:
                    34:5c:1e:68:ed:14:25:43:ad:41:2e:a9:08:36:c3:
                    d0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2D:40:77:0F:52:2B:4A:D1:30:90:10:64:CF:6A:2E:4E:8D:28:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c3239c1-c644-4ac5-9686-bdd41f1afcd2/6cfaa042-1142-3c91-9372-da12c526fe67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c3239c1-c644-4ac5-9686-bdd41f1afcd2/2c3239c1-c644-4ac5-9686-bdd41f1afcd2.crl

            X509v3 Authority Key Identifier:
                keyid:B2:06:5E:7E:86:C1:2C:FF:CE:B4:0D:29:1E:1C:77:82:C7:6D:9F:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/2c3239c1-c644-4ac5-9686-bdd41f1afcd2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.47.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:53:b7:b2:d0:05:41:45:97:0a:b9:04:13:bb:5b:b3:c3:2c:
         49:c0:aa:95:92:d5:f5:d7:a4:9a:f9:5b:1f:82:55:f0:4e:cf:
         e4:c0:83:b1:45:95:37:52:42:f4:9e:d5:e8:2b:21:d8:10:5d:
         35:1e:b0:f4:10:52:b2:8d:9e:59:a7:49:80:f4:a6:4c:7b:78:
         c1:e8:b4:bf:a2:1a:fe:4e:44:46:91:89:36:be:0c:33:97:e4:
         1d:60:a0:ef:70:c6:3e:c5:84:b8:e8:11:64:da:58:9f:9e:b9:
         47:29:39:a1:76:2c:af:58:86:d2:c5:e6:2c:87:d9:ab:7a:d9:
         07:65:fa:55:11:4d:38:71:ba:a8:28:66:73:24:4b:b4:d7:9b:
         8c:7e:4e:b7:e6:83:1e:30:73:e8:00:be:9a:26:0d:b3:4b:29:
         3e:28:08:7b:97:8c:2a:46:c0:3e:68:18:1e:67:4b:eb:08:1a:
         0c:3a:e8:1b:e3:2a:73:73:73:78:90:d5:35:c6:8e:fb:f5:30:
         cf:21:f1:24:e4:21:b5:d1:a8:f8:a6:c1:7d:5c:3b:d8:e7:1e:
         bb:d0:ac:d9:83:bc:f9:67:e3:11:6a:b3:19:df:f3:48:24:d1:
         c1:20:fb:72:d4:45:cb:ee:0c:65:36:34:c0:39:91:3d:fd:0b:
         21:df:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:58:34 2026 by rpki-client