Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa
File:                     350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa (raw, json)
Hash identifier:          uvM3gYbj89SHfvb0gpyAr7yFt/QINeNSE+hG2OKw+OI=
Subject key identifier:   96:91:A6:37:73:30:F4:23:96:C6:90:C1:60:0E:B8:1C:38:B3:81:87
Certificate issuer:       /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial:       010D0C9F4328584F71ED895A40441E164380B600
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     6639
IP address blocks:        208.157.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:89:5a:40:44:1e:16:43:80:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=81b40b87-ecdc-4cbd-8e7e-79a3886908f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c4:c3:7f:c6:ba:42:2c:d5:bc:6f:b3:89:a5:
                    65:ff:4b:14:63:e4:71:d7:9b:f0:40:c6:b3:4b:69:
                    8e:5a:ea:b5:0f:4a:47:53:99:ce:97:ff:c3:bc:01:
                    74:8e:19:6a:da:a9:79:88:c3:5c:17:25:1c:6a:18:
                    7b:e3:8b:5c:76:21:0c:9a:57:e5:53:a4:f1:ee:81:
                    b4:58:97:68:f3:20:95:81:96:ee:b3:a6:db:ef:6e:
                    9e:77:08:1e:a7:70:fe:57:c8:83:6a:1b:7b:91:79:
                    5c:ff:81:c6:5e:5b:06:a0:df:bc:59:6c:11:72:8b:
                    50:bd:f3:34:a5:32:db:34:02:65:2b:cc:92:08:96:
                    cc:04:9d:94:e3:f8:a1:47:dd:19:3a:47:b5:76:d6:
                    15:4f:0b:eb:69:e3:ec:bb:c0:16:c7:32:99:66:2d:
                    82:31:84:3b:0d:ad:db:7f:17:9e:46:af:01:50:30:
                    a5:39:3c:4b:e7:d1:30:22:b6:eb:fc:16:86:da:75:
                    9c:28:cb:bd:e6:9c:75:41:e7:e1:69:6f:80:73:47:
                    a3:c3:8b:9a:63:a9:03:28:80:c5:07:c7:f5:1f:bb:
                    83:a5:c6:57:33:a6:f9:09:9f:26:9a:65:88:32:d8:
                    1f:d0:d0:49:64:ea:f4:25:b1:15:a7:89:f5:e7:1a:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:91:A6:37:73:30:F4:23:96:C6:90:C1:60:0E:B8:1C:38:B3:81:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl

            X509v3 Authority Key Identifier:
                keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.157.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ec:22:d4:e8:7c:08:b0:76:da:ea:f4:50:95:d1:76:1b:eb:
         65:6b:84:81:6f:0d:ed:84:6d:7f:6d:77:37:92:f5:e2:83:5a:
         31:3b:4a:e9:d6:1f:ab:72:f5:ed:2c:12:8f:66:b0:82:c6:57:
         b5:31:a1:0d:70:62:28:67:0d:c1:0d:43:51:ac:89:21:9a:eb:
         3f:fe:a3:15:38:ea:24:34:4f:1b:ba:da:0e:7c:64:36:3a:63:
         d1:2c:35:ea:b8:b2:24:c9:e1:5f:51:81:8b:a0:e3:0a:93:87:
         2c:f1:36:34:a6:0a:2a:82:6d:ad:26:95:62:ee:c6:e0:b6:96:
         24:a9:29:44:54:81:93:a9:3f:64:f6:e9:ef:7c:67:a3:e3:8a:
         2a:01:9d:88:d6:93:b2:58:2e:9d:32:8e:52:e7:33:bd:97:0e:
         49:33:fb:a7:7a:42:da:7e:5b:92:04:b9:f6:3c:c0:7c:5f:31:
         2c:6b:7f:64:6b:2d:5e:61:29:5a:9f:fb:1b:96:7a:11:7c:c1:
         5f:cf:58:1c:2f:a6:2a:8b:34:be:a7:57:39:85:00:a9:81:da:
         e2:6d:93:17:ed:56:45:90:7d:b6:88:4b:33:e9:0d:b3:ee:4f:
         3e:bd:a3:c0:d3:06:4f:16:89:ea:3c:4b:e9:c6:4d:a3:dd:3d:
         be:54:4b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:35:57 2026 by rpki-client