Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/2fef4d7f-bee4-37bb-a868-4315ebb4a6b5.roa
File:                     2fef4d7f-bee4-37bb-a868-4315ebb4a6b5.roa (raw, json)
Hash identifier:          BSBPCRMZVz+wW/mAQeHkVjOctTsKU/TAWZ45+/RyWQ4=
Subject key identifier:   AE:AC:8B:59:09:72:7E:86:99:9F:6D:D6:D3:8E:4D:A6:E1:A3:52:9B
Certificate issuer:       /CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
Certificate serial:       010D0C9F4328584F4974DB9EBAF1622E82F97B80
Authority key identifier: B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/2fef4d7f-bee4-37bb-a868-4315ebb4a6b5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     33292
IP address blocks:        206.15.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:db:9e:ba:f1:62:2e:82:f9:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8741ed4f-28ba-4cbf-a4a6-384057567d05
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8a2d6be8-c3b8-4bb9-9ab4-e3acbcd60286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9a:7e:da:05:4e:1d:6a:a0:55:0f:e6:d1:0d:
                    90:96:8c:c3:57:84:f4:a1:55:6f:61:43:22:99:ff:
                    06:83:4e:df:cc:af:19:78:6e:53:7f:ed:a4:bf:d3:
                    bc:dd:f1:ab:e1:05:43:6f:f7:29:89:42:fe:5d:14:
                    89:83:55:50:24:f1:06:23:26:3a:e2:bb:f6:31:23:
                    26:7e:bd:5a:11:fa:5b:c8:21:69:35:94:3f:6d:1a:
                    ea:59:13:ff:25:1b:1c:9e:f4:89:70:92:bf:88:b8:
                    9b:fb:1c:2c:64:55:63:19:1a:5f:93:44:3d:ad:8e:
                    87:da:a7:98:56:1a:16:c4:49:db:0e:76:c2:19:3c:
                    b9:cf:09:6f:74:dc:3a:14:ae:a8:18:76:d3:13:72:
                    85:8f:90:99:14:44:9c:23:4e:58:0d:97:b2:0f:e0:
                    c6:66:bd:7b:4f:30:ab:c1:b9:44:2e:0d:d4:6c:8c:
                    bf:c4:30:83:37:02:8d:93:c0:a8:57:42:c9:e7:97:
                    81:f0:9b:46:55:8d:82:75:d0:e2:fd:c4:6f:46:69:
                    28:f7:15:2b:5a:98:00:55:eb:ac:0b:9b:ac:26:d2:
                    84:7a:e6:36:30:b7:59:d8:11:c5:58:d2:2c:79:4b:
                    6e:2e:c0:2e:f5:88:d9:25:b5:c8:21:36:fb:1d:16:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AC:8B:59:09:72:7E:86:99:9F:6D:D6:D3:8E:4D:A6:E1:A3:52:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/2fef4d7f-bee4-37bb-a868-4315ebb4a6b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05/8741ed4f-28ba-4cbf-a4a6-384057567d05.crl

            X509v3 Authority Key Identifier:
                keyid:B0:4F:D2:1C:43:38:06:D0:27:8E:BD:98:13:F5:43:C3:B3:48:89:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8741ed4f-28ba-4cbf-a4a6-384057567d05.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.15.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:94:0f:33:e9:64:4e:0c:95:a5:9a:8f:a1:bb:58:58:9f:9f:
         c3:d5:87:da:8a:ad:58:2a:49:c7:7b:81:eb:e7:42:ce:8c:0c:
         00:a1:1a:90:c6:f0:dc:33:35:58:d1:1f:bf:3e:f1:e6:fb:f3:
         a2:12:47:1b:cd:94:13:77:ce:c8:3a:da:4a:24:65:bf:ce:ac:
         c2:77:f2:a2:0e:3e:e3:57:68:24:80:03:a0:d8:95:a1:e5:ea:
         e7:d0:06:f1:e1:ac:4c:96:e2:e0:8e:b9:56:5d:f8:d9:b9:d3:
         e3:d2:6f:02:4b:e5:ca:f7:56:20:e2:d2:06:fc:39:fe:5b:37:
         ca:9a:3e:9d:d4:d6:d6:82:47:d3:2b:00:2f:87:7d:c0:0a:6e:
         cb:7c:6e:93:78:1c:f3:27:50:f3:9a:31:11:ea:eb:74:96:34:
         51:1d:96:0b:82:35:af:9f:fb:0f:ce:e0:80:c3:ba:63:d6:be:
         66:0a:26:2b:3b:73:c9:ea:1c:ad:22:7a:95:35:75:9c:59:f6:
         d2:00:8b:3d:fc:54:59:e4:85:1f:a4:d2:cd:bc:38:90:08:e5:
         08:4b:af:62:6e:4a:21:33:fb:19:68:d6:9b:21:eb:62:42:5d:
         f1:d8:8f:19:30:9b:fa:ac:9f:29:4c:91:3a:38:48:c0:df:62:
         25:c6:79:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:01:41 2026 by rpki-client