Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0eaabc44-9d97-35ce-9f53-f44a2784b1ea.roa
File:                     0eaabc44-9d97-35ce-9f53-f44a2784b1ea.roa (raw, json)
Hash identifier:          U2zK+xP4ueYOpH6xJLBS7qlCXeDI+fNPNyAzrddZQLU=
Subject key identifier:   25:34:D7:A8:37:09:11:83:9C:FF:1F:86:80:77:82:30:7B:4E:A2:EA
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F4328584F03A79501D7A4AFDFA1CE46C0
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0eaabc44-9d97-35ce-9f53-f44a2784b1ea.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     63296
IP address blocks:        142.214.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:95:01:d7:a4:af:df:a1:ce:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=0561fead-8d54-44cd-95a1-181606033a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:68:d6:69:09:32:c3:3b:7d:e2:0c:01:44:88:
                    4e:b9:61:44:c3:63:e6:f9:fb:c7:0d:6f:92:47:b8:
                    0a:51:39:e4:90:dd:83:95:76:7e:76:d7:87:0d:07:
                    72:aa:40:c7:56:b0:9e:de:14:f2:76:13:83:0d:7d:
                    9e:53:07:39:02:d4:0c:49:f6:bf:59:ff:ee:5f:fa:
                    ef:8b:64:e3:52:c9:0c:2c:e6:4f:68:c1:6d:4f:49:
                    62:fb:ee:37:08:e3:33:60:53:7f:88:80:77:90:39:
                    dc:7d:61:ba:54:b7:91:33:ee:65:36:34:de:54:73:
                    7f:7e:ba:36:2f:07:24:e7:db:1a:9a:ac:62:e9:45:
                    8d:2c:32:2b:f7:5e:1f:b3:4c:40:b3:d3:1c:ad:07:
                    57:14:1e:8a:4b:b8:77:56:5b:ad:c2:14:87:04:2b:
                    5e:92:98:17:45:4c:b5:69:74:65:6f:c5:c6:cf:b7:
                    46:e7:3b:90:1f:bc:67:69:b3:b8:f0:69:04:f2:88:
                    77:52:13:aa:90:2d:59:88:a3:6e:bb:6c:cf:ae:63:
                    eb:32:94:53:de:9b:b6:60:db:10:23:ec:64:09:ae:
                    24:87:d9:ff:44:40:10:68:2b:2e:e7:f3:3d:c9:50:
                    56:91:98:4f:28:b6:e9:a6:66:af:2f:29:b2:62:7d:
                    9f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:34:D7:A8:37:09:11:83:9C:FF:1F:86:80:77:82:30:7B:4E:A2:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0eaabc44-9d97-35ce-9f53-f44a2784b1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:16:51:50:55:ff:19:3f:b3:70:1d:4d:e5:e1:cf:f7:b6:
         07:da:76:79:97:7f:68:fd:48:62:05:51:b2:9a:85:1e:9b:01:
         38:b8:5c:b6:c8:65:1b:65:49:c9:5d:37:86:9e:c0:0f:c6:e1:
         44:8d:67:0f:41:4d:8e:a3:f7:5e:2e:1c:e4:e1:ea:f5:0c:1c:
         c9:20:05:fe:59:bb:e5:e5:d9:2b:6d:54:1a:06:53:97:f9:34:
         44:89:72:fc:84:73:33:1c:3c:ff:38:4a:ec:14:d9:d1:7b:04:
         35:a9:da:d5:39:ed:e2:1f:4c:2b:d2:d1:25:bb:8e:24:f1:8a:
         b4:25:80:96:2a:a7:78:96:d1:37:c6:31:25:b3:7a:0f:5b:d1:
         fa:78:79:6b:5c:72:a6:e0:00:36:25:46:74:9d:35:a5:ae:60:
         4f:cf:5c:6d:dc:93:08:96:d1:02:6f:b3:21:97:76:9a:25:b8:
         e9:66:e4:bf:dc:c3:3d:ed:26:d8:0d:b8:d9:99:2a:76:0b:6d:
         a4:3a:60:37:63:45:de:01:1b:e1:a9:34:a2:7c:28:dc:fd:cd:
         67:b0:aa:86:a0:68:3e:59:59:1c:73:23:08:3c:09:bd:38:1a:
         1c:84:9d:5a:f0:9b:11:38:8b:96:f1:d9:10:b4:14:0f:42:86:
         ad:0e:49:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:18:17 2026 by rpki-client