Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72a2eafc-a254-438f-affb-688171548af4/0fa2e4ba-ec4c-32fc-9f4c-68c7ca67a7f4.roa
File:                     0fa2e4ba-ec4c-32fc-9f4c-68c7ca67a7f4.roa (raw, json)
Hash identifier:          7lBmd8saJK7Kg1Ne0lABeDlaNbsg6oadlLVEW7okx1Y=
Subject key identifier:   E9:C4:27:B8:07:1D:A9:27:37:E9:16:48:50:2C:BF:09:5F:30:27:B5
Certificate issuer:       /CN=72a2eafc-a254-438f-affb-688171548af4
Certificate serial:       010D0C9F4328584F331D14F514DC7992223F46E0
Authority key identifier: 2C:E0:7A:80:8B:B0:0E:C4:DC:87:8C:FE:39:75:40:F0:E7:A9:6C:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72a2eafc-a254-438f-affb-688171548af4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72a2eafc-a254-438f-affb-688171548af4/0fa2e4ba-ec4c-32fc-9f4c-68c7ca67a7f4.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     21784
IP address blocks:        216.150.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72a2eafc-a254-438f-affb-688171548af4/72a2eafc-a254-438f-affb-688171548af4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72a2eafc-a254-438f-affb-688171548af4/72a2eafc-a254-438f-affb-688171548af4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72a2eafc-a254-438f-affb-688171548af4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:14:f5:14:dc:79:92:22:3f:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72a2eafc-a254-438f-affb-688171548af4
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=247f01a6-9bc0-4e27-b6e7-25cc22823d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f3:33:73:67:8a:b1:3a:44:c6:1b:00:81:13:
                    c2:19:d7:e9:32:c0:ca:66:67:93:61:a1:8a:8b:44:
                    a2:d4:7c:60:54:48:8e:6c:d3:70:15:f2:ba:68:00:
                    eb:bd:30:c3:a1:8d:9b:80:2c:0e:57:79:d0:48:41:
                    8e:95:ad:6e:5b:23:64:4b:2c:01:2e:2c:81:48:f0:
                    6c:ad:43:74:08:d4:8e:1b:39:a2:2d:66:ec:ab:16:
                    77:40:14:ff:ed:f6:70:82:c5:fe:8f:db:0b:d5:ae:
                    d4:fc:68:b0:05:06:23:21:d3:17:04:5e:57:9d:e7:
                    b4:15:6b:4b:7d:74:7d:0b:c4:33:a7:4c:7b:c1:27:
                    51:80:40:dc:16:c8:c7:2d:68:38:19:b8:6b:35:f2:
                    2a:a0:c4:12:52:ac:8f:35:10:12:99:25:fb:9d:19:
                    62:4b:f2:6f:da:f9:3f:2f:ae:22:f5:53:07:36:d0:
                    e2:08:05:44:68:6e:7b:a3:87:c8:d8:f5:ea:07:ab:
                    19:46:2e:4f:85:0d:13:60:e9:56:9f:2c:4a:d1:6c:
                    b8:24:b7:ad:91:ef:15:0e:75:ef:47:73:76:e7:f0:
                    69:51:91:bb:15:9e:99:2a:95:b5:48:05:1e:64:75:
                    cd:96:0a:f4:24:cc:95:56:fc:78:09:a1:08:62:3c:
                    a3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C4:27:B8:07:1D:A9:27:37:E9:16:48:50:2C:BF:09:5F:30:27:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72a2eafc-a254-438f-affb-688171548af4/0fa2e4ba-ec4c-32fc-9f4c-68c7ca67a7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72a2eafc-a254-438f-affb-688171548af4/72a2eafc-a254-438f-affb-688171548af4.crl

            X509v3 Authority Key Identifier:
                keyid:2C:E0:7A:80:8B:B0:0E:C4:DC:87:8C:FE:39:75:40:F0:E7:A9:6C:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/72a2eafc-a254-438f-affb-688171548af4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:81:bc:ce:5e:06:19:50:94:00:e0:54:ea:9d:5b:a3:51:8e:
         61:a8:f7:ec:31:ca:14:cc:b3:3b:af:fd:fd:30:1c:76:17:03:
         66:09:70:27:25:cf:b8:d3:6d:4a:69:23:54:54:7b:22:1d:cd:
         4b:af:ec:8b:11:66:3c:05:2e:e7:d2:b1:d0:94:d7:f9:d2:30:
         5b:8e:50:8f:7d:30:b6:d5:cd:9d:83:ee:ce:a5:95:39:b0:ee:
         ad:9a:dd:f3:1b:1e:bf:10:f3:eb:fa:52:a4:52:b0:e7:c6:67:
         0c:f8:19:3d:46:8d:e1:dd:55:05:f5:39:42:fd:41:c6:ed:35:
         99:20:31:90:e9:5b:6d:f7:2f:67:5c:f3:f2:36:b5:5a:f8:78:
         db:ab:44:42:97:69:49:8d:0d:b9:c1:7b:96:c1:c4:b5:2d:43:
         a0:09:d9:89:5b:15:cc:39:db:23:a7:db:5c:19:63:02:12:5b:
         16:b4:a4:53:f8:32:2e:ec:f5:37:26:0f:18:5c:37:e7:c1:a1:
         32:1a:3c:6f:a1:06:05:75:d5:bf:e4:d5:dc:4b:da:ba:7e:4c:
         c8:15:52:a9:51:28:3d:64:ca:16:f6:ff:c8:aa:5d:6b:a7:1b:
         fc:87:d2:a3:01:99:54:9e:46:9f:61:48:5b:f9:ec:1c:8e:90:
         8f:2c:43:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 20:03:54 2026 by rpki-client