Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/8bee7079-8396-34ec-93b4-617af2023313.roa
File:                     8bee7079-8396-34ec-93b4-617af2023313.roa (raw, json)
Hash identifier:          sWw+FTYW6wacC3LWT12749GbT4OPX7AeMI95jyIk29U=
Subject key identifier:   8A:DB:EB:F1:66:34:B5:66:B6:34:91:D3:23:E4:B1:4F:EA:2D:74:B8
Certificate issuer:       /CN=bb9a6cc4-1d53-4f80-a2fb-d709923e5c82
Certificate serial:       010D0C9F4328584F225D23DC1CE63E72B4355D00
Authority key identifier: 9E:E1:E1:2F:3D:99:F8:3D:43:7E:9A:F4:BE:38:9B:EA:FB:08:42:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/8bee7079-8396-34ec-93b4-617af2023313.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     23387
IP address blocks:        158.222.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:23:dc:1c:e6:3e:72:b4:35:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9a6cc4-1d53-4f80-a2fb-d709923e5c82
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=89820dfd-65df-41b6-8bb9-100585b0c8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7d:c7:97:c1:c9:c2:12:34:91:a0:08:5e:09:
                    05:4e:b1:c1:a5:20:ad:27:2d:9e:5d:ca:58:03:8a:
                    22:9b:46:1c:0f:43:fb:96:e6:65:45:b2:b2:95:82:
                    83:3f:76:e2:b7:35:13:bc:6e:93:4e:de:f9:bc:47:
                    78:d0:7c:3e:4c:b6:a4:1d:d9:c8:66:e2:3c:b5:b0:
                    ce:17:9b:b9:a1:67:67:d3:fb:62:78:91:42:a6:1e:
                    30:2f:a1:1e:d1:62:bd:dc:bc:9b:fa:02:6a:ea:a2:
                    07:63:f2:27:f1:69:67:4e:2f:73:54:4b:57:08:6f:
                    7b:ae:d2:b5:e1:56:df:e8:8a:e6:ab:11:68:f8:bf:
                    8d:d6:2a:a5:43:e6:f8:2d:46:2a:d8:f9:b5:62:c6:
                    2a:e8:29:22:98:58:c9:25:93:c6:46:64:f7:06:1f:
                    94:b6:9b:d2:76:60:61:02:52:30:30:5b:b4:d6:81:
                    56:ff:f8:b4:c3:b3:75:c9:b1:c1:b1:d9:69:b0:71:
                    c3:98:d5:98:0d:2c:da:9f:32:7b:80:f8:17:ce:77:
                    66:c8:d5:98:d3:0e:28:0d:82:2e:ff:7d:e1:0d:21:
                    95:e4:1e:37:24:a8:0d:18:6a:2d:91:fc:9e:7a:1e:
                    27:01:bc:e9:10:9a:e2:55:fe:d6:f0:60:9e:9d:db:
                    d2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:DB:EB:F1:66:34:B5:66:B6:34:91:D3:23:E4:B1:4F:EA:2D:74:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/8bee7079-8396-34ec-93b4-617af2023313.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.crl

            X509v3 Authority Key Identifier:
                keyid:9E:E1:E1:2F:3D:99:F8:3D:43:7E:9A:F4:BE:38:9B:EA:FB:08:42:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/bb9a6cc4-1d53-4f80-a2fb-d709923e5c82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:c9:15:14:bd:64:7b:f5:5d:06:2c:5e:d0:f1:e2:9c:a9:93:
         0f:34:46:18:3b:68:3c:23:bb:95:39:2c:c2:bf:54:46:83:67:
         67:24:29:09:dd:f0:17:7f:15:bc:39:0e:6c:f6:18:e0:6f:f2:
         e0:99:3f:28:20:a1:6a:ca:98:5c:3c:5c:32:62:15:81:7f:b9:
         82:bd:85:ed:9b:11:b0:4d:fd:81:5d:ce:34:f4:02:a6:22:a5:
         78:b1:c1:2e:5f:60:3f:e6:23:31:42:e6:65:1c:68:ba:3c:c5:
         67:42:4f:d5:63:e0:e5:90:18:3d:5f:bc:91:51:be:bd:3f:e8:
         70:37:08:04:59:cf:30:de:96:0e:3d:bf:98:f0:62:13:0b:39:
         a6:1e:46:a3:35:58:40:25:1f:d7:9b:c9:b3:ad:8b:40:d4:e6:
         c5:7c:f5:1a:5a:b1:7d:ae:3b:3f:43:83:88:3f:c3:d0:38:20:
         4f:51:96:96:0c:49:61:3a:5f:9c:9d:58:f4:df:f9:a0:46:8b:
         b8:30:62:b2:c7:70:9a:05:fa:a4:92:f8:ef:60:7a:8c:ec:ef:
         62:e6:51:6a:00:d2:8f:6f:4b:54:4f:e8:36:da:3b:33:e7:74:
         2a:80:c8:5d:6f:cd:65:64:f3:c8:ae:a5:7b:04:12:51:df:6d:
         9f:8d:6a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:11:39 2026 by rpki-client