Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c898a9d8-b2f2-3d4b-b2c0-1f00dca244b4.roa
File:                     c898a9d8-b2f2-3d4b-b2c0-1f00dca244b4.roa (raw, json)
Hash identifier:          6jfJpVcFKGV/vZk9AApoTFi7f1rHphIjd3mqg45sHkc=
Subject key identifier:   BA:FB:13:A9:05:13:78:E6:65:F5:CA:7B:6F:A4:8F:B5:28:5E:23:0B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F1F4F5F85D786CB8AEB9A3240
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c898a9d8-b2f2-3d4b-b2c0-1f00dca244b4.roa
Signing time:             Wed 09 Sep 2026 22:45:26 +0000
ROA not before:           Wed 09 Sep 2026 22:45:26 +0000
ROA not after:            Tue 08 Dec 2026 23:45:26 +0000
asID:                     214054
IP address blocks:        76.9.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:4f:5f:85:d7:86:cb:8a:eb:9a:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep  9 22:45:26 2026 GMT
            Not After : Dec  8 23:45:26 2026 GMT
        Subject: CN=ad88f9e0-0ce0-47a2-a608-4ad06f53bddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a2:46:6e:f3:71:0c:ed:76:3e:b9:a3:3c:8e:
                    a7:33:6f:3f:cf:33:a9:da:51:17:8b:e3:bd:54:a2:
                    e4:ca:aa:ed:b9:47:64:3b:ea:90:f7:f8:d7:bf:29:
                    b9:e0:6a:b6:40:85:c3:96:10:56:23:0c:98:87:f1:
                    f0:d3:12:10:f6:bd:75:c9:e7:38:89:6a:fa:2d:0a:
                    f0:21:f5:f5:39:8c:c2:c0:67:86:48:99:49:b2:84:
                    7d:e5:2f:27:20:66:e6:fd:49:b5:04:e2:71:12:38:
                    57:26:c1:f9:1c:74:a2:87:17:47:c3:71:20:8e:bd:
                    3a:d8:bb:cc:ba:aa:10:ff:d3:69:a3:b3:30:2b:42:
                    ea:cb:40:3b:4f:54:f7:0c:7e:75:81:7f:a8:1e:44:
                    b8:34:3a:ba:ee:af:66:63:d6:b5:b8:08:38:9a:49:
                    cb:9b:99:e5:75:0a:4f:03:f4:05:95:ca:0b:bd:12:
                    7e:83:da:2d:83:0d:dc:a0:3d:a4:dd:3e:90:cd:4d:
                    11:58:dc:b7:f4:9a:57:40:f3:d3:4a:47:c0:e2:46:
                    bc:42:7d:be:3e:d5:ee:b1:d9:41:f7:fe:b0:34:8f:
                    bc:56:df:c9:3b:4d:8f:17:37:64:3a:87:6e:44:54:
                    9c:6f:8c:4b:f2:a8:f0:bb:a2:4f:0f:64:c4:c9:50:
                    dd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FB:13:A9:05:13:78:E6:65:F5:CA:7B:6F:A4:8F:B5:28:5E:23:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/c898a9d8-b2f2-3d4b-b2c0-1f00dca244b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.9.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:b9:a2:bf:5f:a5:80:3b:9c:1b:73:06:80:b9:b7:4f:fe:df:
         80:28:30:11:6c:52:e8:97:a2:a8:fc:71:44:f0:e5:4d:e2:78:
         f6:b4:9c:b5:6b:78:a8:ac:be:09:b0:73:6a:97:6b:50:a6:ef:
         7c:74:28:cb:30:f0:b6:9b:11:3d:69:3a:be:3c:27:53:26:4f:
         72:5a:99:ae:23:de:6d:f9:76:d8:c9:fa:92:6f:02:55:4b:52:
         27:49:93:aa:c4:0a:e1:20:21:f3:5d:7b:f6:bd:b2:a1:12:f8:
         1c:a9:9f:94:4f:a4:09:8a:33:28:bd:cc:40:1e:11:62:a5:b6:
         3e:67:71:66:cd:2e:ea:f2:19:36:66:8a:0e:27:1e:f5:37:69:
         1c:04:bd:d9:91:28:4e:d3:53:3e:82:1b:3a:4e:d3:4e:92:ba:
         43:9c:98:d4:ef:f2:68:b0:ec:be:0f:24:89:7d:13:3e:5e:05:
         48:6d:ce:d6:54:c8:41:2d:0b:75:33:71:97:bc:a7:38:5f:58:
         bb:c8:0d:ba:4b:28:93:a0:25:31:c9:ff:c8:ef:ea:8d:78:5a:
         9f:62:0b:3b:82:33:7f:0a:40:1f:39:82:c3:7e:a2:7f:bb:bf:
         d2:5c:f4:af:36:89:fd:61:26:51:cb:51:ef:40:e4:78:18:0a:
         86:b6:5b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:49:38 2026 by rpki-client