Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/cdc566af-fa03-3610-8993-e1fd7b05d64c.roa
File:                     cdc566af-fa03-3610-8993-e1fd7b05d64c.roa (raw, json)
Hash identifier:          HWYvWp6VLbqqBj+4Rtfy7iOaZ4LLS0w0H/5ZS8nStxQ=
Subject key identifier:   0E:56:F7:38:FA:95:F6:4D:29:7A:DE:A1:D2:C5:8E:FB:9C:EB:37:04
Certificate issuer:       /CN=27856758-5ea9-463e-969e-eb2a87a469d5
Certificate serial:       010D0C9F4328584D492A5ED647D901F6E17B6900
Authority key identifier: B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/cdc566af-fa03-3610-8993-e1fd7b05d64c.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     64233
IP address blocks:        199.255.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:5e:d6:47:d9:01:f6:e1:7b:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27856758-5ea9-463e-969e-eb2a87a469d5
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=5173caab-c959-45fa-b563-b8b84f62bfe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:58:7e:af:ce:05:66:4d:c4:8e:5c:77:1e:
                    3b:b1:ad:8f:08:9d:fd:40:86:9a:97:a6:ec:ff:93:
                    b2:66:5f:a9:52:a2:68:63:17:e7:2d:66:bf:b7:7e:
                    f7:bd:aa:47:9d:87:4e:b6:af:de:3b:b3:e6:89:e2:
                    b4:06:da:20:32:6f:2a:49:e6:e4:21:6b:ad:98:fb:
                    4f:4b:e3:48:6f:2a:e5:2b:94:9f:7e:ab:50:bb:bd:
                    bc:18:2f:1f:ca:ff:4e:99:00:0f:f3:02:bc:e2:98:
                    fe:24:c7:aa:e5:f1:16:8b:06:b9:b3:de:c3:f8:4c:
                    ed:a4:2f:73:58:bd:b0:f4:71:35:ca:f4:30:fd:4e:
                    dc:7a:6f:10:15:50:b9:5e:1d:a1:97:09:44:ba:93:
                    35:04:c6:6e:d4:7d:53:83:e8:06:66:4d:8c:be:4e:
                    ef:c5:42:ee:33:25:f0:f0:19:af:87:5c:d3:e4:3d:
                    d4:e5:0f:30:d5:f0:71:83:6f:ea:5e:48:a2:49:79:
                    8a:67:46:24:74:b9:cb:f9:dd:dd:53:15:5d:d2:03:
                    d6:be:ad:c5:89:e8:7a:0b:80:f1:40:53:fc:dd:d6:
                    f5:6f:f3:a3:4d:f3:a6:2a:0c:a5:28:3c:dd:c1:29:
                    d7:f7:88:16:db:91:df:60:d1:5c:fa:4c:81:ce:cd:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:56:F7:38:FA:95:F6:4D:29:7A:DE:A1:D2:C5:8E:FB:9C:EB:37:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/cdc566af-fa03-3610-8993-e1fd7b05d64c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5/27856758-5ea9-463e-969e-eb2a87a469d5.crl

            X509v3 Authority Key Identifier:
                keyid:B8:A2:69:32:69:0D:FC:91:91:F9:CD:33:17:29:43:47:25:02:A2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/27856758-5ea9-463e-969e-eb2a87a469d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:32:c4:01:31:08:7e:e6:67:fb:54:43:06:e4:3d:d0:ee:9a:
         2a:3a:df:0c:23:39:19:a9:25:1d:78:53:82:29:9e:a4:0f:c3:
         c4:25:b4:f7:68:38:86:e7:9d:6c:47:29:76:ff:97:c0:c9:16:
         89:6e:40:2f:ca:75:de:a6:b2:e7:ac:fd:1c:8b:1f:62:16:af:
         8b:65:53:15:33:5f:e8:8c:19:bb:2b:d0:a6:47:2e:fe:3b:01:
         98:6e:4c:fd:c8:f0:13:fd:41:f3:8c:96:6f:28:7f:13:aa:8e:
         20:ec:a7:c1:ce:6f:1b:fd:b1:74:00:b6:74:41:3b:e3:88:cd:
         ea:15:db:1b:12:eb:e7:70:e3:5e:f7:28:f4:ed:93:75:fd:a7:
         b8:03:b4:4f:e9:88:06:a5:31:10:d8:74:37:4c:0a:39:cf:74:
         e1:a9:d5:81:14:89:70:09:39:1c:3c:f0:72:ea:89:42:b0:ef:
         08:b1:f4:ac:8c:a7:8c:8f:6f:1b:7a:79:82:70:24:ff:48:0b:
         f2:2d:21:b6:ec:28:00:26:a2:43:0d:e8:6c:77:ca:09:bd:bd:
         f7:ec:36:bf:ea:cb:7a:14:62:35:b6:d0:a8:8e:96:d9:4b:27:
         14:cc:8e:9b:b7:1b:0b:ce:78:9e:f7:48:55:43:9d:42:ee:c1:
         6f:b0:30:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:48 2026 by rpki-client