Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2cc7b1b0-5d06-30e8-8d57-83aaa398c515.roa
File:                     2cc7b1b0-5d06-30e8-8d57-83aaa398c515.roa (raw, json)
Hash identifier:          uK356F09yH3ssvDvBysvemNSie1Bdc++wVIsQFySUiQ=
Subject key identifier:   1C:45:87:C9:BE:4A:5F:0B:5D:02:75:8E:31:BF:A5:26:13:6B:93:44
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584F6C5836783B72AE7F26FEC200
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2cc7b1b0-5d06-30e8-8d57-83aaa398c515.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     9304
IP address blocks:        64.93.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:36:78:3b:72:ae:7f:26:fe:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=aa133b3f-2726-419d-8dcb-8f576998cfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6a:10:c2:21:66:5c:83:b6:f7:34:a2:37:26:
                    ea:0b:45:7c:68:a3:ca:3e:69:a2:e6:e8:e6:eb:17:
                    29:8b:a2:1f:f5:2f:aa:39:04:e7:4a:eb:b6:68:2c:
                    78:3f:e3:c3:f9:61:56:b0:9f:df:04:58:bb:73:82:
                    21:4a:01:07:94:b0:22:42:a0:ee:0c:5e:14:82:62:
                    75:13:ad:9f:a2:88:d0:14:f0:2f:4d:45:65:02:90:
                    b2:02:62:52:fc:69:7a:82:b4:c8:2d:56:19:2f:f2:
                    de:b2:1b:09:c2:09:68:b6:8f:83:75:4f:12:01:54:
                    70:25:10:10:53:21:25:5c:f0:5a:1f:97:15:f9:80:
                    8d:69:13:7c:1a:c7:fe:9f:3e:5f:45:5f:8f:78:fd:
                    c8:f1:e8:2c:2b:3a:30:0a:f9:cf:83:e8:c9:79:a6:
                    47:d7:63:56:b3:8e:b2:c2:7c:ce:3f:0c:70:d0:21:
                    29:39:c0:19:f0:48:b0:f7:07:9e:b5:fc:0f:e1:04:
                    68:89:8f:61:48:41:9a:bf:7f:f0:58:b9:3f:3d:84:
                    77:54:f4:ab:21:cb:5f:c1:d6:bd:35:18:26:38:33:
                    92:75:8f:f5:a5:95:87:c1:2f:fe:56:01:87:43:cc:
                    c8:9a:3c:d7:5b:8a:b8:14:75:34:e4:e0:a2:89:9a:
                    ef:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:45:87:C9:BE:4A:5F:0B:5D:02:75:8E:31:BF:A5:26:13:6B:93:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/2cc7b1b0-5d06-30e8-8d57-83aaa398c515.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.93.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ae:a7:00:f0:e9:e9:29:f5:ee:73:c1:58:80:52:f3:5c:11:
         7b:92:b6:2a:74:db:c2:48:21:5c:c2:e4:57:86:1d:4a:83:40:
         c8:f4:aa:5e:75:fe:d9:bd:63:b0:4d:e0:46:36:a0:97:0d:64:
         49:e8:5d:0a:62:72:61:de:50:69:a9:24:73:46:a4:74:07:2b:
         1d:6a:65:ae:bc:38:b9:ed:22:9f:6f:69:0e:5c:5d:56:e7:a7:
         b6:ac:12:61:62:9a:b7:a9:00:a2:77:63:7d:0a:01:bd:ce:18:
         05:52:48:d8:19:25:02:38:ce:af:85:90:47:9f:df:f4:fe:15:
         66:97:fb:bf:72:00:bd:92:e3:af:b5:bd:6a:69:33:09:d7:9e:
         8d:d6:df:c1:db:e6:7a:76:3e:0d:6d:2b:80:04:2b:f2:2f:d6:
         67:c8:a7:ab:56:2a:be:1e:f6:35:f4:8e:9d:fb:b7:3a:00:bc:
         3c:c9:c4:b4:c7:24:7c:52:86:2b:1b:6c:8b:47:fd:c7:12:04:
         45:44:cd:aa:5d:39:36:70:f1:a4:12:48:b8:72:4e:1b:6b:d6:
         43:8b:71:a2:02:c5:73:29:af:dd:cd:ef:5b:d6:82:36:a0:32:
         12:78:22:0a:e4:4c:b6:93:72:bc:0b:28:6f:bc:50:02:4d:9d:
         24:9b:a9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:23:25 2026 by rpki-client