Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/2e7cd925-5574-3280-adf0-5dadc1a600b6.roa
File:                     2e7cd925-5574-3280-adf0-5dadc1a600b6.roa (raw, json)
Hash identifier:          aetA+KrYBSN9AMeBfkXHVHKxxhxvaJ02+IWpZWeSjqo=
Subject key identifier:   20:C6:80:49:82:9A:3F:B8:4F:7B:6C:75:95:43:E4:12:87:5C:2C:0A
Certificate issuer:       /CN=67881dcf-e50e-4f7b-a534-a0d6ea187a62
Certificate serial:       010D0C9F4328584EFCACD0D7FC1A1D319BE17940
Authority key identifier: D9:64:6A:AC:8B:24:5D:0F:C4:15:8B:7A:D9:34:F6:5F:8E:5B:95:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/2e7cd925-5574-3280-adf0-5dadc1a600b6.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     62618
IP address blocks:        141.219.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/67881dcf-e50e-4f7b-a534-a0d6ea187a62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/67881dcf-e50e-4f7b-a534-a0d6ea187a62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:d0:d7:fc:1a:1d:31:9b:e1:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67881dcf-e50e-4f7b-a534-a0d6ea187a62
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=b1855273-8a81-471f-bd58-cf7d0abcc0fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:29:56:c7:6d:dc:ae:e6:dd:32:38:02:0c:8d:
                    d4:04:7e:f6:60:8b:19:81:83:7b:96:f3:ba:68:e5:
                    26:ac:49:77:21:73:8f:93:65:b6:63:e1:bf:e8:a3:
                    72:20:27:7b:6a:5d:38:aa:24:19:cd:e5:bf:a1:24:
                    b9:ff:4a:06:3f:31:0e:d1:a0:e2:81:d5:00:c9:d4:
                    a7:b7:88:c1:6e:80:92:3e:f5:32:e0:cf:2d:2a:f2:
                    5d:cb:06:dc:2e:fe:7d:8e:4a:6c:00:44:c6:79:10:
                    77:b3:3a:c3:0f:26:5f:b9:17:13:2b:02:97:5a:e7:
                    c4:f4:cf:1a:69:2f:2f:43:25:46:09:51:c1:e7:47:
                    57:8b:47:7c:b5:f7:ca:1e:98:e2:7d:50:5a:ca:49:
                    9b:bd:61:8f:28:3b:99:51:c2:a8:0d:95:c5:7f:9f:
                    8e:b0:42:c0:0f:3c:cd:e4:31:d9:d8:2e:f8:ce:d3:
                    d8:06:19:0f:9e:de:a4:a1:0e:2f:be:e2:f6:b1:9f:
                    d1:35:cd:57:97:d2:61:85:48:9a:8e:30:a6:3d:0b:
                    df:ef:f8:ba:a1:cb:0a:2c:3d:9c:3c:97:49:c2:d5:
                    fe:91:e7:65:6f:0f:2f:61:8f:35:d7:45:61:cf:e2:
                    5f:3b:19:c0:fb:c0:3c:c7:27:59:92:5e:b4:f7:f6:
                    61:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C6:80:49:82:9A:3F:B8:4F:7B:6C:75:95:43:E4:12:87:5C:2C:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/2e7cd925-5574-3280-adf0-5dadc1a600b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62/67881dcf-e50e-4f7b-a534-a0d6ea187a62.crl

            X509v3 Authority Key Identifier:
                keyid:D9:64:6A:AC:8B:24:5D:0F:C4:15:8B:7A:D9:34:F6:5F:8E:5B:95:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/67881dcf-e50e-4f7b-a534-a0d6ea187a62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.219.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:4d:2b:50:28:2c:78:73:cb:66:9a:d8:21:29:66:12:ad:df:
         ba:b8:5b:de:56:ac:76:14:a7:8a:79:70:17:33:eb:65:00:39:
         37:b0:c5:82:4f:d1:ec:0c:41:b4:39:67:48:76:e7:1c:55:b8:
         ae:28:5a:35:7f:33:2a:43:8c:99:61:47:28:00:17:14:17:c1:
         08:68:b4:17:63:af:e9:90:c5:cf:0e:ea:af:0d:ab:33:6e:ee:
         13:08:1d:3c:d6:19:92:72:b8:2a:b8:92:27:df:54:eb:f2:e5:
         45:c4:ce:0a:94:93:bb:e9:bd:45:32:01:1c:f9:3b:ab:df:14:
         74:ba:ec:44:68:92:a8:4c:f7:e2:83:30:bf:16:13:55:48:b5:
         a7:51:e8:2a:60:ff:d6:e4:d6:67:da:c6:a2:6d:67:4b:3d:9c:
         83:95:0e:26:d6:cd:d3:56:d5:72:cd:6b:e5:67:ca:8c:3f:43:
         f5:ef:df:74:2a:41:e7:72:8f:be:4b:27:ad:84:65:47:49:c2:
         78:8f:55:02:21:c9:d0:7d:3e:40:4d:ab:16:7e:a5:62:af:f4:
         a3:ce:a8:a7:6b:90:fe:0e:3a:ee:9d:1b:83:1e:e4:36:69:bc:
         dd:0e:d2:78:ab:f3:a2:e0:cb:7c:ed:a3:6f:28:42:47:a1:02:
         af:ec:8c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 09:35:11 2026 by rpki-client