Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/95a26c6a-55c9-3c2c-b26e-81969bddcadc.roa
File:                     95a26c6a-55c9-3c2c-b26e-81969bddcadc.roa (raw, json)
Hash identifier:          lzw59wAe9rmGMQkakhYxmiWX6NZJlsCIymWZmEP16DU=
Subject key identifier:   61:70:B4:E2:D1:CB:83:B7:51:F0:9D:3F:41:BB:8E:3E:76:02:56:9D
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F4328584ED861D24BE0479879FC8437C0
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/95a26c6a-55c9-3c2c-b26e-81969bddcadc.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     293
IP address blocks:        192.74.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:d2:4b:e0:47:98:79:fc:84:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=8d1de539-2e54-4499-b607-82a13b6b0ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:35:22:55:52:a2:1a:43:9f:fc:80:10:ff:
                    5e:1e:27:25:b9:36:4e:a9:67:a2:8c:aa:86:36:6f:
                    b6:c8:f8:6c:a3:0a:d6:ae:12:4a:6d:96:48:0e:6a:
                    19:cf:69:6b:6b:5f:ec:d0:8b:09:fc:87:e4:dc:2d:
                    a8:3f:53:9b:29:32:c8:15:d7:69:64:28:77:48:96:
                    2b:c8:6f:57:fa:4d:54:ef:21:40:4b:a4:50:cc:d5:
                    b5:6a:98:dc:06:c2:28:1e:c1:f9:45:37:b9:d1:b3:
                    47:eb:dc:84:5a:8c:86:9f:60:a4:1f:63:38:1e:87:
                    74:ed:82:13:49:d8:42:1f:a2:18:fa:9e:55:12:1e:
                    50:f1:17:3e:91:91:7d:3c:a6:de:e5:70:01:e5:43:
                    c2:ae:68:8f:44:00:70:dc:e7:5f:52:71:0d:d6:a2:
                    5c:29:d6:54:82:a7:8c:09:67:51:08:73:d6:e4:2b:
                    35:96:eb:da:b2:b5:a8:8d:bf:74:89:19:7c:06:5b:
                    77:06:2b:66:bb:8a:c2:2e:8c:20:ef:f8:82:9f:a1:
                    50:11:78:f2:32:db:c6:4a:57:0c:5f:63:62:1d:3e:
                    5a:22:4d:e8:16:ff:ce:e8:84:f0:af:72:84:23:e1:
                    ae:61:8e:08:0c:31:c7:e1:b5:1b:96:30:3a:5d:77:
                    af:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:70:B4:E2:D1:CB:83:B7:51:F0:9D:3F:41:BB:8E:3E:76:02:56:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/95a26c6a-55c9-3c2c-b26e-81969bddcadc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:e0:b0:6a:66:11:82:7d:78:8e:c2:69:2d:34:64:2d:5d:fe:
         38:83:9f:86:e8:df:ea:3d:13:06:ff:4a:ae:d2:11:a3:fc:6f:
         04:6a:9e:45:56:6a:4d:c4:4c:31:f0:33:17:57:80:6f:eb:5c:
         2a:3e:ac:3e:dd:86:a6:c8:a4:fd:2a:d8:fc:e3:f2:e0:16:88:
         82:fb:99:87:3b:5c:bb:a9:43:9f:30:4e:d0:26:a4:15:2a:16:
         86:7c:9f:84:03:70:4a:74:a5:1b:0c:66:db:99:e9:6e:9d:23:
         1b:35:07:2e:4a:ea:85:c4:41:61:8e:2a:3c:f8:dc:2b:9f:9a:
         85:04:ee:c7:49:19:e2:2e:ab:40:69:c4:86:e0:f1:28:d7:5e:
         a2:1b:16:40:d3:ee:cb:a5:31:42:da:64:08:9b:cf:76:93:63:
         35:30:3b:c9:d1:dd:96:65:bf:74:93:d4:57:f6:0c:ea:6a:85:
         a1:8a:1c:18:41:2c:20:9b:59:22:f4:c1:71:ad:bf:73:a3:d6:
         a5:e6:20:77:cb:38:eb:d2:ec:5e:3a:a7:68:b8:39:b0:b5:59:
         6c:a9:6a:95:78:0e:d4:1c:16:23:e6:e6:c0:b7:d3:0d:fe:f8:
         84:01:13:99:e3:0f:c2:5a:ee:04:79:b8:3c:7a:08:84:00:22:
         69:25:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:15:57 2026 by rpki-client