Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/14af0796-ef17-391f-92eb-40f7159af2bd.roa
File:                     14af0796-ef17-391f-92eb-40f7159af2bd.roa (raw, json)
Hash identifier:          y60lCx9zOwO33DNBHNzUsu+Tt8YqSJ4nf+rF/Fe2Qv0=
Subject key identifier:   D8:D0:56:3F:D9:2B:26:01:69:2C:A6:C8:94:E9:0C:6E:B1:92:2B:61
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F58CD52228A36FCE17EF44980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/14af0796-ef17-391f-92eb-40f7159af2bd.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     31898
IP address blocks:        147.5.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:52:22:8a:36:fc:e1:7e:f4:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=d5e2c7b1-db53-4d4f-b3a2-e15483512a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:64:40:ad:e7:e2:a1:46:f3:b7:b6:d4:c8:9e:
                    45:91:6b:65:69:69:36:85:72:7d:28:29:61:e0:ee:
                    d8:1c:0f:1e:f3:b2:cd:e9:aa:9f:fa:f1:f0:64:9c:
                    5b:de:15:70:b9:c6:f9:a1:6a:94:7a:c9:05:b2:cb:
                    f6:7f:12:f4:b6:a2:cb:c4:49:78:0c:7a:32:87:78:
                    61:35:e5:d8:ec:6b:47:68:18:6e:92:8b:7c:f1:85:
                    29:61:75:fd:f1:7b:c7:97:3f:1e:f4:cc:be:d3:8c:
                    6c:aa:ad:45:e3:6b:f2:06:3d:7b:a6:d5:c2:11:cf:
                    8e:e2:6c:1c:f2:86:bc:cb:30:f2:ea:f3:57:7f:bd:
                    c6:b8:9e:5f:f2:7e:3e:4c:33:f1:19:12:20:94:02:
                    f7:f9:fd:b3:86:22:48:ac:eb:9a:c1:91:69:ad:20:
                    58:61:f3:d6:25:f7:c2:01:6b:fd:32:63:b7:d6:84:
                    30:ab:57:97:23:de:cf:c6:07:69:62:d9:95:db:18:
                    18:24:b1:9f:d5:ba:03:a2:d7:36:a4:de:85:79:7e:
                    15:2a:2b:a1:cb:0f:aa:b2:60:c5:22:62:27:d0:54:
                    79:f5:7b:86:f8:93:92:20:36:0c:01:b6:d0:e0:37:
                    fe:43:5e:38:65:0a:12:7d:58:0b:4f:f7:bc:aa:e7:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D0:56:3F:D9:2B:26:01:69:2C:A6:C8:94:E9:0C:6E:B1:92:2B:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/14af0796-ef17-391f-92eb-40f7159af2bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.5.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:8e:a3:90:a6:70:81:05:47:fa:9c:8c:ea:70:fb:ff:9b:
         cf:cf:da:0b:81:05:ab:7d:70:2c:6d:a6:b4:34:97:ef:c6:15:
         d6:53:4c:93:bf:fe:8c:3b:4f:bc:0d:70:0a:91:f8:0b:de:14:
         0d:e2:9d:82:9a:42:cc:50:85:71:e1:7f:55:0d:60:2f:e0:ee:
         56:46:fc:d1:13:0b:bb:c5:fa:f2:8d:79:e9:8c:ca:8c:e2:dc:
         92:a9:6a:85:04:7d:1e:17:05:f8:46:de:7a:9f:34:3c:09:c3:
         b9:32:2f:e3:56:b3:70:e1:f7:94:d2:de:dc:f8:ad:24:2a:3a:
         12:33:6e:4c:07:e8:c5:28:66:c0:5d:a2:fb:4a:81:60:14:69:
         1f:76:f9:00:08:54:e4:fe:33:e1:7e:76:6d:89:92:ca:0b:1b:
         1b:f2:d5:8d:5a:cf:8a:cf:36:dd:28:83:e3:1e:3b:a0:eb:c8:
         e8:65:33:df:8a:4f:c4:e3:7b:ae:1d:bb:8a:17:73:41:59:1a:
         a8:0c:da:ee:e0:4a:62:f8:27:95:ec:54:cb:87:91:52:56:17:
         22:28:4d:f8:4b:37:dc:e5:d8:7c:c4:07:1e:92:39:03:78:f1:
         7a:7b:cf:31:d3:38:0e:03:55:8b:f2:20:8b:5a:95:c8:de:a1:
         8d:5d:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:29:00 2026 by rpki-client