Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/c8f7a454-6474-3e76-9fe1-0ae508a770a0.roa
File:                     c8f7a454-6474-3e76-9fe1-0ae508a770a0.roa (raw, json)
Hash identifier:          jzkzg0TgO6kLRKE0qZnMlK1LVN0BScqOY5LJ6BtfFe8=
Subject key identifier:   BA:11:7E:70:44:DC:89:37:A0:8B:BA:AA:48:54:A1:4A:38:12:84:69
Certificate issuer:       /CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
Certificate serial:       010D0C9F4328584F119D0BC2B7EE2DFA694AC800
Authority key identifier: ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/c8f7a454-6474-3e76-9fe1-0ae508a770a0.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     14618
IP address blocks:        204.16.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:0b:c2:b7:ee:2d:fa:69:4a:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=1bb20269-2fbf-418f-83d3-fbae8901abc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:95:9b:03:dc:27:20:25:a2:8b:f4:19:4c:ff:
                    b3:f0:85:ba:cb:e3:d1:37:98:1c:96:59:40:e7:80:
                    d6:d2:c3:be:03:f2:87:c1:8e:67:31:48:c8:ee:48:
                    9e:5b:39:e3:25:ed:04:f4:4d:24:e8:cd:b3:89:2c:
                    c8:48:7e:99:9d:ab:bb:b8:e7:ae:a5:e0:d0:84:43:
                    1f:da:21:91:8c:63:d7:b5:41:5b:90:76:e3:8a:c1:
                    a3:78:37:b8:17:29:b5:fb:af:62:0a:23:c4:0b:fc:
                    f6:29:0c:cb:f9:fe:b9:cf:79:b6:1a:52:1c:a5:d1:
                    0c:d3:d3:4d:8b:cb:b5:e3:bb:ad:ee:d1:f6:d0:18:
                    ac:2d:7b:5c:52:d9:12:3e:05:5a:49:8a:a5:51:4e:
                    d2:40:27:4f:5f:10:1d:aa:e7:79:3a:30:7f:d7:77:
                    19:08:b7:ad:4b:c3:50:fc:fe:57:1a:0c:7b:c9:d4:
                    52:2d:03:94:dc:fd:17:6e:8d:13:e3:ce:46:e1:46:
                    96:67:8f:42:4c:78:b8:07:cf:4b:23:ba:9e:55:27:
                    09:dc:c5:a7:6f:eb:c4:d6:7c:5d:4d:6f:3f:45:17:
                    dd:c3:df:f3:82:0a:e4:14:26:bf:95:8b:e4:95:1d:
                    cf:42:02:47:28:5a:00:79:04:f8:89:8e:1e:f5:9f:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:11:7E:70:44:DC:89:37:A0:8B:BA:AA:48:54:A1:4A:38:12:84:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/c8f7a454-6474-3e76-9fe1-0ae508a770a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.crl

            X509v3 Authority Key Identifier:
                keyid:ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:68:9f:bd:d6:61:17:59:2f:cf:a5:35:6b:03:cb:b9:7f:81:
         f8:4b:e7:42:af:c3:8e:35:a1:82:86:f5:62:9d:67:53:c2:e6:
         e7:60:ac:02:e7:1f:a8:b6:b2:0a:fa:7a:e5:44:36:d2:e3:4a:
         24:83:16:a3:1a:1f:cf:f4:a6:d9:a3:4c:f2:4e:79:a9:e0:6f:
         d4:1d:eb:48:ca:39:77:8d:15:40:0f:51:03:63:49:2b:8b:e2:
         ac:59:dc:26:45:ec:f1:8f:18:21:46:84:e9:16:d7:16:6f:7b:
         0c:3b:b3:91:ac:ad:9b:32:f8:8f:30:93:8c:9b:30:94:bc:1c:
         04:aa:d9:cf:b1:42:a3:d4:aa:f7:ce:25:87:dc:d9:f0:b8:42:
         69:92:b7:ad:44:82:99:54:b0:d5:eb:f9:c5:78:ad:9f:09:fe:
         2f:05:43:a0:7f:1e:49:85:24:c8:b0:3d:9b:65:75:95:d3:e9:
         52:62:7d:88:9c:4e:a3:da:03:17:d8:1d:6e:a5:23:53:f8:f1:
         cb:db:77:3f:95:9d:af:e1:45:f2:b0:f2:91:2c:ee:c6:df:1f:
         71:c4:02:d4:19:aa:a6:d2:89:ff:43:8f:4f:9f:cc:10:20:fa:
         9f:d8:03:a3:21:be:ed:cf:a8:fc:94:82:fa:8b:64:32:56:4e:
         a0:8f:ab:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:34:32 2026 by rpki-client