Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa
File:                     f00f9702-64da-301c-b2bf-95c79284f35e.roa (raw, json)
Hash identifier:          SR2uclLRgK0IV3lXqMkMb3xrV63AOTR6Z8cR4x8l0kU=
Subject key identifier:   D2:41:2E:90:6B:C5:29:2F:B4:7F:0F:BB:21:B3:E4:AE:C3:F9:0D:4D
Certificate issuer:       /CN=714cea24-cc07-46e3-abc3-b9e783b4180b
Certificate serial:       010D0C9F4328584E31CF156BB3985001A5A453C0
Authority key identifier: EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     198394
IP address blocks:        216.104.192.0/24 maxlen: 24
                          216.104.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:15:6b:b3:98:50:01:a5:a4:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=714cea24-cc07-46e3-abc3-b9e783b4180b
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=57c3c44b-4422-4a96-ac81-ca1384710e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:ae:6d:34:cf:58:84:c5:8e:7b:52:6c:1b:
                    9d:31:92:98:f4:fd:f2:16:c4:bb:95:3c:aa:86:8a:
                    c6:c9:eb:64:84:13:d7:45:0d:38:6e:a3:fa:32:a4:
                    cd:42:08:b3:16:24:18:12:43:1b:d9:84:a1:e4:5f:
                    1d:ec:4d:02:d6:94:aa:a8:5c:a3:bb:08:53:7b:ea:
                    62:f8:29:d9:e6:69:b3:75:2d:b9:88:db:9c:45:be:
                    a8:62:00:9e:62:a6:b5:1d:ef:53:37:ad:9a:48:af:
                    c3:91:3c:ea:0a:34:b1:00:67:0f:37:6a:8e:42:5b:
                    6e:6f:c2:fc:be:df:e9:74:ad:5b:32:1b:4e:2b:b2:
                    86:86:56:41:49:f4:25:d9:17:ee:ef:2f:f1:c3:37:
                    fa:99:93:16:35:32:66:37:04:4e:56:64:8c:4e:4a:
                    b2:76:b6:1c:82:85:48:7b:69:8d:a5:c2:f8:12:00:
                    95:5f:7e:58:f3:f7:73:09:69:9d:0a:a7:34:e7:05:
                    e1:c6:aa:b3:7e:ee:e5:6b:70:54:10:fb:90:c5:32:
                    bc:10:e1:98:ba:f7:cd:90:7b:b8:ac:f3:9b:eb:e0:
                    9c:dd:0d:f3:85:81:0a:39:eb:b1:4d:2e:73:5d:08:
                    ac:f5:ec:57:2d:cf:5c:bc:6c:29:8e:f4:76:c1:53:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:41:2E:90:6B:C5:29:2F:B4:7F:0F:BB:21:B3:E4:AE:C3:F9:0D:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.104.192.0/24
                  216.104.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fb:c2:c1:ca:a1:6d:13:c8:6d:b3:e0:1f:1d:30:85:c9:7f:
         66:3f:28:f3:ae:18:84:32:97:39:b8:3b:a1:35:e4:56:a1:ca:
         d6:ad:e2:46:e9:af:44:e6:07:93:ec:40:13:f8:0e:1a:97:65:
         75:8c:2f:09:93:cd:63:4f:ce:bf:ea:19:60:40:78:42:21:90:
         93:1e:04:31:d4:6f:36:5a:8c:87:42:22:05:ab:ac:c6:e3:e1:
         77:35:02:65:28:00:80:75:22:d9:ba:19:ce:d6:8a:3b:f1:bb:
         03:bf:15:32:f0:6c:c5:cb:e7:39:ac:ca:95:e3:35:fe:e4:1b:
         f8:29:78:3e:88:f1:9b:cb:38:5e:48:24:0f:1d:fc:7e:54:cd:
         70:3b:6b:b2:45:95:39:37:d9:5d:86:3d:03:df:47:e5:64:11:
         0e:06:8b:f3:14:f9:3c:f1:b7:9d:d2:bb:89:bc:a9:33:13:e4:
         6d:12:97:8d:09:23:10:f1:f2:20:37:5b:10:4c:bf:30:49:16:
         d7:aa:9a:34:c2:b2:4b:d5:fd:22:c1:83:f9:71:6d:5d:9a:d6:
         71:7f:44:a9:e0:75:52:61:82:03:ab:dc:28:4d:84:62:24:fe:
         e0:1d:29:3d:61:03:96:6e:b6:1f:01:aa:e0:fd:08:14:3d:47:
         48:99:fc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:42:09 2026 by rpki-client