Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa
File:                     f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa (raw, json)
Hash identifier:          DC2xH2h+yB8CAIJrTlUuptovtx45+VsSNzhLmxHGdgs=
Subject key identifier:   8F:D1:BB:68:F2:E6:C5:6B:02:7E:81:D3:79:32:E9:0F:1F:45:E7:55
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584E2D9F406C1B4A984CF8712E80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        208.214.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:40:6c:1b:4a:98:4c:f8:71:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=0e133561-63d1-411e-b658-3f24a3768b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2f:d8:52:8c:82:ba:aa:2d:cb:48:c4:b6:2f:
                    2f:bb:7b:5a:f2:66:67:5c:16:22:6a:17:d2:c8:fa:
                    c6:a9:15:ed:49:8b:1f:f9:db:72:86:7f:a4:ef:dc:
                    53:07:97:07:43:6a:20:79:23:23:9d:95:80:32:5f:
                    e2:7a:c2:c7:54:76:0b:db:36:85:08:02:06:08:26:
                    d9:a4:60:04:b7:d2:bb:65:d3:28:13:21:6c:30:78:
                    96:b0:26:09:f8:84:1b:9c:8c:35:f6:37:4c:7c:dc:
                    c1:36:51:c1:d8:b0:93:81:3d:f7:48:8d:e0:24:5a:
                    19:1f:c1:0c:2a:70:f1:b4:f2:07:ca:70:67:a2:01:
                    1e:5c:bd:b8:8a:56:95:56:21:dd:cd:50:ec:d0:4c:
                    a5:26:da:0a:1c:ad:6c:26:6d:06:0b:e7:37:0c:78:
                    97:3f:32:35:d5:2b:d1:5e:11:f3:6e:23:e6:a6:7f:
                    ce:44:51:c1:e2:ad:18:bd:5c:68:b2:18:96:f2:92:
                    18:2d:e5:9b:cb:37:30:ee:70:f2:b4:62:0b:af:fd:
                    cb:2c:5a:25:bd:1e:45:87:b3:68:40:c7:a1:04:c8:
                    80:07:fe:3a:cf:3d:e4:f1:29:57:28:6d:9f:7d:85:
                    00:6e:6e:0e:2b:5c:95:ea:75:d9:a5:b7:9c:89:ad:
                    ad:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D1:BB:68:F2:E6:C5:6B:02:7E:81:D3:79:32:E9:0F:1F:45:E7:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f51d672a-0d0f-30b9-a846-d80dda8d3b25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.214.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fc:e7:64:68:44:ca:dd:2b:33:10:ea:ea:ec:b1:b3:46:46:
         0e:47:e3:47:06:d2:18:8d:3c:d7:0f:52:c4:cd:f2:f9:88:63:
         81:0b:51:83:93:7e:a4:0b:2f:b2:c9:7a:4d:91:88:f0:06:2e:
         fc:e1:a3:59:22:5b:16:9d:e9:f9:91:ab:d6:b3:42:a1:2c:ba:
         96:af:a2:50:d4:a2:12:50:39:55:c0:5f:8c:fc:da:65:10:dd:
         13:71:c3:fd:1f:fa:a0:58:c1:0f:5f:51:ae:3f:0a:fb:93:3c:
         f1:2c:83:fe:d7:39:16:7e:d0:40:33:d4:c5:28:2b:69:49:96:
         18:3b:a0:8a:f9:11:19:f9:ae:3b:8f:b5:1c:cf:7e:87:6c:ec:
         b3:13:63:44:3b:49:2c:ea:82:eb:2a:a2:df:f1:38:3c:b6:9a:
         2a:77:fb:97:3f:ad:23:bb:71:f6:7e:a5:fd:a5:de:90:3f:35:
         49:78:ab:8a:eb:22:43:46:ef:b5:1b:d7:2b:b0:64:92:6d:07:
         4d:9c:b2:4e:1b:bd:a1:41:29:7e:35:5b:c0:c0:db:c1:ea:34:
         d3:17:e1:25:a3:99:5a:c3:f4:bb:4d:f4:f0:0b:1b:16:46:41:
         3e:a6:05:e1:9d:1f:8e:ad:40:f9:5d:5a:41:96:4e:4f:70:2c:
         5d:8d:72:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:20:53 2026 by rpki-client