Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa
File:                     c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa (raw, json)
Hash identifier:          p/eRZuK1qz2PX04VG79Rz2m3UeN9eDuVmqGbW5yoeXY=
Subject key identifier:   E0:27:32:14:EA:74:42:25:04:83:A8:96:A1:63:1A:DA:17:72:F4:48
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ED0020CA441D163B5B03DE900
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        208.214.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:02:0c:a4:41:d1:63:b5:b0:3d:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=30931906-d4b3-4b64-bed2-aea32fb734f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bd:d7:54:81:56:e8:2c:c0:9e:9d:79:ae:b3:
                    49:00:64:07:8f:2b:12:f4:5a:a5:6f:ee:2c:d5:a6:
                    8c:c8:c7:96:5b:0f:0a:fd:36:d1:d6:bd:01:ca:f2:
                    34:8b:72:7c:13:bf:d6:d9:8b:a6:fe:38:02:03:b7:
                    85:40:c7:26:0c:e8:63:61:53:cc:c8:51:da:20:bd:
                    3d:c5:15:e0:e5:67:46:24:1d:41:7f:0b:ed:69:5b:
                    95:f1:b2:09:15:21:4e:19:de:57:0a:e8:47:9f:cf:
                    de:b6:53:9a:02:ff:2d:5c:04:f5:0f:bc:99:9c:e7:
                    e2:d8:57:79:39:a7:35:a9:8e:d6:11:1a:94:4b:ba:
                    c9:29:ab:25:66:33:cd:d4:a5:58:ee:5d:3c:34:fa:
                    15:92:03:01:65:b0:f0:6e:55:ea:a5:68:9c:f5:a0:
                    07:cd:70:73:8a:de:16:3d:7b:9c:81:18:89:09:c4:
                    f8:69:9b:56:04:04:ab:3e:f1:2f:8d:cb:a1:fb:62:
                    69:74:fb:8b:1d:8f:12:ac:9c:bc:5f:4e:11:38:c8:
                    1b:fa:e4:a1:b3:8f:ce:d8:9a:93:45:95:9e:01:36:
                    aa:0e:db:ed:fa:28:b6:4d:aa:9a:38:0e:d7:7f:80:
                    5d:13:a4:61:82:48:d5:50:da:7a:c6:07:45:06:fb:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:27:32:14:EA:74:42:25:04:83:A8:96:A1:63:1A:DA:17:72:F4:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c3dec2bd-6e0f-3bc9-901d-0cf8ec36a814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:53:7c:78:17:f6:22:97:a0:f1:a6:10:4f:ea:18:fd:cd:6d:
         ab:52:50:4d:f4:dd:60:64:39:99:c6:71:ab:65:17:09:4f:f1:
         e8:df:4e:9c:28:00:a7:b5:fd:be:42:3a:ba:d0:fc:e1:76:da:
         0b:1a:40:be:b9:45:3f:d4:84:5b:05:2a:4a:6a:68:2d:0a:2e:
         c4:53:a6:48:fc:b6:7f:16:b8:de:c0:36:f4:a4:6c:f1:c2:62:
         ff:c0:28:00:11:39:d7:96:a9:48:ec:84:05:d9:ae:07:ac:bc:
         5d:83:04:56:f1:90:58:80:e2:b2:03:93:8a:52:88:8a:46:59:
         0c:46:97:76:81:46:71:c6:de:fb:3f:a4:67:99:fa:37:83:a9:
         1f:0d:f9:c9:1c:16:95:8c:35:b0:f3:07:fe:6e:c0:27:b6:88:
         ff:6d:54:6e:f1:ed:4a:d2:be:02:ee:18:09:1f:8d:b3:03:60:
         57:c4:b7:fc:59:6d:79:6d:ed:28:f1:b5:98:40:cf:c8:7a:6d:
         34:b6:ee:2f:2d:ff:14:67:ac:26:36:73:75:52:07:ce:d5:7d:
         f5:03:6a:04:fd:72:29:ba:02:a3:fb:79:0b:4e:65:54:e7:c1:
         aa:64:74:c2:8c:1f:c5:75:d1:63:fb:9d:2d:6c:e7:bb:c1:77:
         f6:63:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:57:39 2026 by rpki-client