Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/67b0afd3-cdd1-304f-967b-876cfe2419b6.roa
File:                     67b0afd3-cdd1-304f-967b-876cfe2419b6.roa (raw, json)
Hash identifier:          Adq7wjVf5KjJmk86dSqtmHuxtSfM+u2gNT5iW08wI4w=
Subject key identifier:   F6:58:04:46:5F:B2:98:6F:5D:08:8F:0C:F8:71:14:F2:B4:49:53:A6
Certificate issuer:       /CN=02df9026-5ea2-4718-a55c-d46da7505348
Certificate serial:       010D0C9F4328584F4988C82F8368480477D503C0
Authority key identifier: C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/67b0afd3-cdd1-304f-967b-876cfe2419b6.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     14291
IP address blocks:        167.94.216.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:88:c8:2f:83:68:48:04:77:d5:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02df9026-5ea2-4718-a55c-d46da7505348
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=02dc7113-514f-4798-a980-cf3788bc34e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:ed:6f:bd:2a:f0:87:d1:be:d5:c3:a1:9b:
                    d5:42:51:8f:86:af:0c:a5:81:34:dc:3b:78:5c:94:
                    48:03:5c:60:ef:53:36:94:9d:c8:0a:7e:e3:71:fc:
                    ca:83:66:ec:e7:42:51:67:e1:fc:15:0a:61:e5:67:
                    ef:f7:6e:2b:39:bc:ee:fc:86:2c:d8:db:2b:28:65:
                    5c:aa:be:01:94:26:cd:ee:a8:a6:46:75:07:df:77:
                    3a:34:39:9c:63:5c:67:db:ac:1e:60:f6:e9:92:94:
                    ef:ee:c0:a6:5f:ed:48:ad:2a:5b:5d:ab:d2:b9:f1:
                    29:8e:0f:70:2f:fb:10:56:10:c7:96:48:24:05:3f:
                    6d:1f:f3:e6:e6:f9:45:ff:37:f7:7c:11:8b:98:7c:
                    90:76:4e:40:a0:cf:f6:76:b3:a2:eb:ca:fe:1e:34:
                    59:e5:01:d4:75:17:dc:fa:e7:85:13:05:e3:4b:f8:
                    ff:b6:6f:f8:ae:8b:f4:32:fc:ce:a7:7a:65:a9:10:
                    49:35:7c:7f:27:c6:2c:2e:7f:79:4a:db:1b:9f:82:
                    c4:70:a4:fa:80:43:8c:32:68:6d:22:16:3b:96:c1:
                    97:ae:37:b8:fb:64:b4:81:b1:6d:e4:8d:f9:67:cc:
                    07:57:e9:ea:4f:bf:61:db:8a:da:87:14:68:fd:2d:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:58:04:46:5F:B2:98:6F:5D:08:8F:0C:F8:71:14:F2:B4:49:53:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/67b0afd3-cdd1-304f-967b-876cfe2419b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348/02df9026-5ea2-4718-a55c-d46da7505348.crl

            X509v3 Authority Key Identifier:
                keyid:C8:1B:76:3A:5E:A5:33:7E:00:1A:D8:D9:F9:90:DA:F6:CD:64:5E:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/02df9026-5ea2-4718-a55c-d46da7505348.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.94.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:d1:07:d5:04:e9:96:d5:fe:2a:83:09:87:e1:64:53:e1:4f:
         5e:d5:fc:3a:93:a4:f4:69:09:68:35:88:08:1f:7a:c3:bb:6b:
         21:16:2b:b8:d6:27:eb:69:e5:ce:fb:62:db:43:ad:67:da:e6:
         3b:85:79:03:57:76:4c:fd:8f:7b:64:68:d3:ab:d0:11:21:1b:
         89:a5:7a:41:cc:b5:f5:ee:c4:86:26:90:45:1f:4f:ab:e4:b8:
         dd:59:ac:96:aa:92:61:7c:2c:98:72:b2:2a:ef:d3:27:9b:fa:
         cb:a7:14:8d:b5:f8:05:97:51:51:a7:48:27:f2:78:30:d9:05:
         ba:05:a9:c4:ba:25:a6:95:e0:ae:8b:5e:53:b7:26:33:42:37:
         98:fd:2a:f9:c5:39:06:8d:37:c4:71:bf:83:4d:7b:34:53:bb:
         1d:31:a9:6a:19:93:7b:81:54:2b:63:1b:b2:26:b4:93:7b:0f:
         ac:ed:02:bd:5b:09:dc:ae:8f:2b:4b:51:83:13:b0:58:24:2f:
         05:06:1c:9b:e7:51:0a:f1:0f:81:57:df:17:9d:af:d7:17:ce:
         c4:4e:72:69:ac:4e:89:13:dd:99:29:20:9e:b5:0b:b2:4c:5e:
         b4:6a:62:28:45:79:ed:33:5d:1d:a6:db:63:17:8e:e5:44:5f:
         87:df:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:24:09 2026 by rpki-client