Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21da80a6-2269-3326-872a-ef9d784f319e.roa
File:                     21da80a6-2269-3326-872a-ef9d784f319e.roa (raw, json)
Hash identifier:          joSEWAqIqL0lw5EhJRSzDY5ctpt2rO1BhZ4S6nXIbXA=
Subject key identifier:   43:6D:24:30:86:5A:0F:CD:29:8C:6B:D7:7D:8D:8B:3D:42:19:24:23
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3E48033C5CF6D6E0099F1580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21da80a6-2269-3326-872a-ef9d784f319e.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     64267
IP address blocks:        206.198.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:03:3c:5c:f6:d6:e0:09:9f:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=37945385-53e9-4f3d-8584-550914547cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:fc:18:e1:19:94:ae:ab:e5:52:a9:27:99:
                    dd:75:84:a9:09:c2:2c:13:64:c1:09:ef:d6:c1:1f:
                    8d:78:30:4b:8f:b9:f5:56:c2:fe:84:99:ff:95:2c:
                    e5:5a:f9:ca:32:66:3b:62:33:b8:9f:c7:d6:cb:b8:
                    9f:0a:70:eb:85:8b:a7:56:e0:c2:b9:2c:cb:c1:d5:
                    0e:23:4a:5f:f7:5e:f2:4c:0e:05:7e:e0:b4:b4:b9:
                    7e:9a:71:0f:ef:b2:e0:c1:07:b5:31:a5:24:c6:be:
                    75:85:30:e6:f9:2b:6b:bd:1d:92:f5:2d:71:5d:8e:
                    9d:20:2b:23:9a:d6:c5:64:30:83:4c:67:d6:9f:f5:
                    bf:45:61:ed:d0:90:f0:b9:a7:40:c4:03:1c:8a:06:
                    6e:bf:b4:f8:d4:e0:61:ae:95:94:ac:2f:40:c5:bb:
                    73:00:aa:72:16:26:a0:40:ba:39:24:3c:50:5f:65:
                    18:dc:96:bb:a9:8c:7a:8f:15:2b:30:fb:1c:6d:6f:
                    41:2c:6b:b9:8d:c0:df:7a:48:c1:6d:b9:76:19:f9:
                    58:2a:7b:5d:1d:ba:4f:6a:38:b0:8d:10:2c:f2:a3:
                    fd:bb:a8:ee:60:52:a2:4d:88:0b:cd:0c:0b:6f:eb:
                    fa:93:e8:5a:5b:e7:2a:26:c5:88:5d:91:01:1a:ea:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6D:24:30:86:5A:0F:CD:29:8C:6B:D7:7D:8D:8B:3D:42:19:24:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21da80a6-2269-3326-872a-ef9d784f319e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:7b:f7:ae:1c:3e:92:0b:b1:50:e5:c1:ef:42:6e:32:ca:70:
         39:3b:bc:a5:2c:5b:13:61:c4:3b:3c:35:08:41:b7:c9:33:5a:
         f5:96:5b:27:bc:9f:8a:c3:b8:95:d4:57:c7:22:53:22:66:c2:
         ba:d5:28:10:bc:a0:8a:0c:22:2b:a8:71:9b:4a:18:4a:f3:0e:
         a4:92:64:eb:13:9e:09:24:e8:9b:ef:bf:e0:af:a4:58:89:93:
         ef:7c:8d:44:3a:74:58:93:dd:71:03:48:6e:c9:c0:1e:86:73:
         24:85:f3:ee:a9:26:95:02:37:90:21:86:b8:30:82:0b:d2:0f:
         50:84:f4:09:3d:c5:e9:5b:b3:b2:63:69:1c:a6:1d:50:33:b5:
         c7:bc:39:ca:dd:91:e4:74:3a:1e:fc:32:46:06:d0:8e:ec:42:
         e9:57:9b:e7:82:65:31:87:1e:6d:2f:7a:3c:e5:a0:c5:14:5d:
         c9:a8:e9:fc:9e:21:fe:27:4a:6b:be:06:bf:80:76:3d:be:05:
         87:bb:3f:15:55:79:47:d7:b9:fe:02:5a:6d:40:8c:c0:ca:c0:
         c0:cf:83:24:d8:21:84:88:a5:f7:3c:82:53:0b:78:b9:64:24:
         71:1b:41:e5:62:ed:34:ac:74:4a:68:26:88:e3:5a:7c:0b:ce:
         59:b9:4d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:18:28 2026 by rpki-client