Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa
File:                     8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa (raw, json)
Hash identifier:          W7whHp2z4P6CjPgOARcYfEjKYhdEQoVaGtT5ojsvGv8=
Subject key identifier:   11:65:61:EE:09:23:1D:29:CB:35:72:D0:E3:81:1C:56:77:37:DB:AF
Certificate issuer:       /CN=b8a0e292-3e8f-447b-81c6-cedef4747341
Certificate serial:       010D0C9F4328584F067244710B1DA3CCD69D7F80
Authority key identifier: 83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     54511
IP address blocks:        64.202.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:44:71:0b:1d:a3:cc:d6:9d:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8a0e292-3e8f-447b-81c6-cedef4747341
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f84c6c83-8778-4d26-8750-e8ee6a046ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:c5:4e:0e:3d:c9:c6:6b:ee:48:3f:e9:b1:
                    48:43:1b:80:fa:23:23:47:d6:6f:2d:c5:ae:1a:b7:
                    a9:fc:e1:57:f2:76:07:bf:23:37:66:15:ff:32:4e:
                    77:74:0e:ed:cf:61:68:70:69:2a:12:89:dd:f8:00:
                    08:70:9b:53:08:aa:32:8c:da:35:9a:47:6b:7e:fc:
                    55:cd:9e:d6:ee:03:54:16:e7:a1:01:97:54:fd:36:
                    5d:06:a9:86:cb:f9:cf:e8:18:57:33:34:22:10:8a:
                    e1:2c:f5:be:63:21:e2:fc:36:a0:49:ad:26:fb:82:
                    89:69:66:4a:28:a0:3f:dc:0b:6c:4f:16:40:1f:f3:
                    84:fe:9c:8b:eb:f0:85:39:36:c7:79:1b:d0:fd:bc:
                    d2:b5:79:04:62:73:34:a9:93:a0:42:7b:2f:b2:ea:
                    e1:25:84:0a:dc:88:27:3c:08:00:73:1c:54:6b:45:
                    0f:5d:2d:60:f7:d5:23:c7:ac:27:62:87:fc:3d:c5:
                    08:07:3b:96:d7:5b:e1:58:71:b7:d4:c9:00:f2:04:
                    42:1f:f4:94:b9:6e:89:0e:5d:f2:83:28:ac:3b:d3:
                    a3:4d:69:26:ef:17:d6:e0:cb:9a:c7:02:da:0f:09:
                    47:ec:f8:dc:07:c3:11:13:36:30:a5:f5:ec:14:db:
                    60:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:65:61:EE:09:23:1D:29:CB:35:72:D0:E3:81:1C:56:77:37:DB:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/8883f6a0-cd35-3a1a-a3cf-dfd8f7e87101.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341/b8a0e292-3e8f-447b-81c6-cedef4747341.crl

            X509v3 Authority Key Identifier:
                keyid:83:A3:6C:9B:30:E5:DE:80:EC:B3:A4:FC:42:E5:52:72:23:88:DA:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b8a0e292-3e8f-447b-81c6-cedef4747341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:11:bd:fe:7d:a8:c8:ed:81:ae:14:d9:1c:5b:8f:b2:1c:
         77:55:2b:da:0f:86:a4:78:5d:4d:13:48:c3:88:35:ff:4b:2b:
         c0:a6:83:3b:92:6c:10:d2:68:ae:67:cb:18:ec:5e:ef:38:d4:
         78:3b:4e:d6:76:a0:6f:7e:c5:b9:c8:b9:a6:19:46:52:5e:29:
         d7:8f:33:00:9f:cb:f8:e3:41:0a:e6:85:70:d2:67:4b:e7:b1:
         17:9a:0b:61:8b:66:df:f0:2d:d9:75:22:1a:5c:0e:f9:d0:b5:
         dc:03:92:e0:18:12:ac:3f:9f:ad:ea:ac:71:9e:fd:5b:e8:22:
         c1:87:92:15:f9:de:d4:c1:70:8e:86:0c:0b:b5:c9:b8:fd:60:
         45:6c:29:a5:5d:e7:f5:ae:32:4b:8b:35:a2:77:31:d1:9d:9d:
         95:84:2f:9a:f3:d3:6f:65:c8:e6:94:f9:dd:14:da:70:6a:5f:
         8b:97:86:30:fe:b8:cf:5b:8d:c2:01:bb:9e:9b:1a:ae:0c:c1:
         d8:70:58:81:84:35:87:4b:83:61:c7:59:82:80:0d:89:d9:9a:
         ec:91:4e:cd:c5:1f:84:dc:c4:6c:21:37:79:df:53:bc:bc:28:
         7e:04:57:92:e9:37:b9:61:3e:8b:6d:6f:8a:cf:e4:be:cc:2f:
         c3:3d:19:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 20:50:23 2026 by rpki-client