Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7fa7c1d-8ad6-3c4e-8a7e-3115c11d6a85.roa
File:                     a7fa7c1d-8ad6-3c4e-8a7e-3115c11d6a85.roa (raw, json)
Hash identifier:          zmbJC5RTyBmlaPONWW0VkWuuJgHgpJtM20FRL14bPpw=
Subject key identifier:   70:F0:8F:6D:F2:B4:39:AA:6C:F8:CA:4D:BE:C2:95:8E:FC:9C:A7:8B
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584E7204D9885ECDD74D6EF62E80
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7fa7c1d-8ad6-3c4e-8a7e-3115c11d6a85.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     40362
IP address blocks:        216.80.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:d9:88:5e:cd:d7:4d:6e:f6:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=75992b0c-ecea-40f4-a7cf-0a9ba0e06ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d4:69:50:2c:33:e5:84:67:9c:f4:dc:39:b8:
                    40:ea:bc:ce:6e:9e:98:25:01:1f:ee:c4:9e:c6:62:
                    23:3f:b1:86:8a:9a:d5:cf:cb:f0:13:28:cf:94:75:
                    8d:17:97:c4:12:fa:f6:7a:8e:13:c3:b5:29:76:9e:
                    e6:cb:41:1c:50:1c:fa:64:38:01:65:8c:40:d6:46:
                    7f:13:df:35:97:cc:ae:cd:a3:08:6c:49:9d:af:67:
                    d6:55:d2:ac:68:e4:95:90:3f:70:53:80:42:79:43:
                    4f:99:65:12:33:c5:69:22:17:0b:84:5d:f6:e5:28:
                    f9:87:89:b6:2c:1f:45:ef:74:15:c6:58:9e:4e:c7:
                    d9:cd:3d:f7:75:12:2f:c5:84:91:0d:b6:6f:89:ad:
                    f2:38:59:6e:19:95:08:e3:30:36:55:9d:5e:6b:b8:
                    9b:71:2c:27:30:93:59:50:c4:14:8f:99:e1:21:4c:
                    d0:19:66:2e:c2:56:b4:5c:c9:e7:10:6a:eb:e0:5c:
                    6d:0b:0c:53:af:90:90:a0:1d:8d:79:ba:8d:4c:18:
                    23:f7:09:13:31:d6:73:1a:67:2b:61:11:4f:c6:16:
                    6d:a9:41:b0:69:39:6d:49:90:bb:78:1a:e8:34:4f:
                    b0:b8:3f:21:fa:f3:59:37:8c:af:83:62:f1:86:a6:
                    74:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F0:8F:6D:F2:B4:39:AA:6C:F8:CA:4D:BE:C2:95:8E:FC:9C:A7:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7fa7c1d-8ad6-3c4e-8a7e-3115c11d6a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.80.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f0:b8:d2:4a:de:20:5f:0b:37:7a:4c:66:63:03:97:d2:29:
         7f:71:76:3a:a1:cc:b2:21:15:16:ea:d9:d1:9c:24:48:19:ea:
         27:7d:47:7d:52:4c:19:f9:79:e0:ab:7f:a2:9b:4a:20:94:16:
         2e:f8:dc:e0:fa:f3:c0:40:69:ab:54:60:61:c5:5f:e2:06:ed:
         db:74:1b:a5:ce:f1:63:cf:63:68:c2:ec:81:20:f5:29:0d:44:
         0d:81:8e:e0:2b:75:98:44:90:6b:bc:3b:f4:87:c7:bd:63:e8:
         5f:54:a5:5d:07:b9:b6:13:07:38:3d:c3:15:0b:96:4e:7d:00:
         79:9b:f3:13:a5:ee:5f:0f:80:82:7a:a6:cc:b7:bc:01:3b:f4:
         02:1d:06:02:cc:b6:e3:0f:3b:62:96:dc:4e:6b:09:f2:7a:38:
         22:14:55:ea:7b:39:cc:6d:a2:6a:39:45:bc:b5:b8:86:9b:95:
         89:e3:64:15:a7:35:6c:0b:cd:f2:59:e2:4e:b2:eb:d0:09:7e:
         bc:39:0e:26:3d:74:52:f7:8f:e5:94:90:53:da:00:3a:bd:b2:
         98:9b:b6:e3:b6:63:c1:01:62:9f:25:57:f3:33:97:18:2b:02:
         07:ea:65:12:9f:24:17:98:f7:03:89:0e:5d:c2:8f:07:60:40:
         4a:40:d5:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:57 2026 by rpki-client