Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/69b5f482-1b69-3052-b93c-cd1900fe1402.roa
File:                     69b5f482-1b69-3052-b93c-cd1900fe1402.roa (raw, json)
Hash identifier:          UUiZqQqSmYESYboH0EhLv4ygUosidrGF15r2Q64710k=
Subject key identifier:   8A:2D:D4:BA:32:92:C9:10:8F:B5:20:46:70:31:1D:B5:D0:35:5A:67
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584D1172570A5936E492A423AE00
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/69b5f482-1b69-3052-b93c-cd1900fe1402.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     214054
IP address blocks:        198.89.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:57:0a:59:36:e4:92:a4:23:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=f0ca5d8f-8186-4ece-81c8-4e26f39e82bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:05:b7:0c:6b:01:a8:48:11:dd:cd:3f:9f:
                    5d:37:74:47:76:a5:e1:89:99:89:64:d5:46:79:12:
                    e0:71:58:c0:2d:56:74:19:5a:40:6a:f8:c8:c9:f1:
                    fe:fc:d9:26:f5:21:b7:cc:84:e1:fc:f3:44:58:ea:
                    cd:80:83:eb:d4:03:94:29:48:1e:6b:25:99:43:8f:
                    0a:fb:ed:4f:e1:58:12:6f:39:5e:da:0e:08:d3:16:
                    65:2d:a5:1a:ce:4b:44:d8:20:8f:2e:3f:c8:ea:70:
                    77:76:91:0b:5a:38:30:da:af:e3:5d:4e:1f:a0:30:
                    7c:7f:c3:5e:e7:1a:60:17:c5:b0:9e:a0:b6:fa:ca:
                    8d:5e:16:91:f9:86:2d:8c:02:ce:57:d0:d8:23:4e:
                    21:b8:e7:86:bc:bc:64:95:64:a3:b1:76:4c:fe:70:
                    c2:9e:09:e7:6e:c6:e0:4a:2a:c3:7c:27:36:19:71:
                    39:5d:d9:4c:c8:12:a6:4a:f9:9e:3b:ef:87:33:e2:
                    90:c0:32:98:25:ae:98:bd:08:a3:08:05:4b:60:c0:
                    6c:57:0a:14:a6:78:ee:a8:fc:20:ad:07:cf:f6:84:
                    b7:82:31:65:b3:29:07:b4:bf:0a:c0:d3:1f:bc:5c:
                    5e:5f:6d:fc:c9:a2:d4:01:f6:07:5a:9a:5f:d4:83:
                    1a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:D4:BA:32:92:C9:10:8F:B5:20:46:70:31:1D:B5:D0:35:5A:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/69b5f482-1b69-3052-b93c-cd1900fe1402.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.89.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:57:4b:6d:c3:d0:04:64:5b:ea:be:dd:8a:fe:3a:28:6b:f5:
         51:6b:78:81:59:39:87:f4:d8:9c:9a:82:2a:55:ce:0e:ba:38:
         5c:ea:f4:25:80:8a:0a:1a:56:0d:b0:98:5a:15:cd:66:25:22:
         7a:03:c6:2e:c6:6a:2d:3b:fb:4f:b4:df:a7:9c:ac:ec:c5:6d:
         13:88:de:5a:37:d2:5d:9e:c3:a4:3e:79:f9:d1:5e:0e:ab:94:
         14:ea:d8:32:6f:6d:8a:86:d2:db:8e:05:a2:fe:29:a2:24:dc:
         10:a7:cc:44:83:21:77:f1:73:cb:1f:63:f6:d4:11:79:14:fa:
         80:0e:f3:23:85:96:be:35:34:f0:b5:38:03:21:c1:fa:6e:e7:
         2b:45:6f:05:14:5f:c6:58:0d:eb:b7:e5:51:6d:ea:19:7d:b7:
         16:b4:07:da:54:76:b5:98:7a:18:94:30:23:18:c9:f9:9c:32:
         fe:70:54:98:ed:ab:6a:d5:42:f7:06:74:ca:73:35:d8:e3:66:
         e1:8b:f0:99:f3:79:d0:18:9c:d8:b4:e0:d7:b0:ac:18:7d:e5:
         de:08:c0:a8:49:4e:60:da:7a:78:fd:dd:f0:cc:e2:23:2f:7f:
         6a:4e:47:45:12:19:c4:2d:36:bb:b4:bd:1f:0c:d0:13:f1:7f:
         71:bc:33:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:08:48 2026 by rpki-client