Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa
File:                     09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa (raw, json)
Hash identifier:          2BW7tBGJfeajN/2TkaZB8gH87p7nyhmNRgpIue4Ysgs=
Subject key identifier:   DA:41:B0:B6:5A:AF:0D:68:08:32:C9:A2:10:10:B1:B4:F7:F8:33:99
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584F2D87B72CDE3440F6A0CE0080
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     803
IP address blocks:        142.165.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:b7:2c:de:34:40:f6:a0:ce:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=e16ab6a0-2cdc-476a-975b-bd5d73c66f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:64:cb:7d:44:7e:d8:26:42:b3:84:13:1f:
                    a1:ce:c4:06:25:3e:79:26:30:ac:97:f2:4c:dd:2d:
                    9a:b8:cd:cd:3a:17:26:0e:a4:74:1c:02:19:24:6b:
                    08:97:3e:3f:fa:47:08:4d:ef:cb:0e:59:cd:e5:44:
                    b1:15:4d:94:df:3d:ca:4a:e0:8c:76:d2:81:b6:6a:
                    6b:37:dc:ee:71:e0:61:cd:37:d1:b5:df:19:d1:3d:
                    6b:ae:2a:33:aa:d9:ce:46:cd:bc:25:bf:cb:e1:06:
                    86:99:c9:d3:d5:32:ec:7f:d9:ed:a4:e4:5d:2c:3c:
                    af:41:75:9c:1d:dd:a1:14:75:d6:63:ff:46:c5:2c:
                    fa:32:37:8d:d5:91:d7:07:e9:44:b4:7f:ad:ce:93:
                    d1:bb:06:aa:be:7a:8d:30:d5:4a:af:e3:9c:ad:11:
                    50:0b:ef:f6:64:68:ec:9d:2b:e2:40:4f:e0:13:88:
                    e4:b4:e7:fd:c0:62:66:ac:00:e9:86:b4:65:90:f4:
                    2e:17:73:a4:c0:7f:01:4c:2d:ea:fb:d3:75:1c:34:
                    41:c0:3d:10:00:4e:fe:8e:94:8a:fa:76:b7:4c:19:
                    a8:9a:81:60:d9:19:58:99:35:56:cd:56:31:e5:87:
                    b1:ea:0b:6c:e6:5e:c8:62:f4:c6:1b:a9:85:bf:13:
                    7a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:41:B0:B6:5A:AF:0D:68:08:32:C9:A2:10:10:B1:B4:F7:F8:33:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/09f4b084-fd34-3c92-9dfc-ecbc8641144b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.165.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:5d:e1:48:d9:91:ac:96:23:14:6c:35:31:8c:74:ec:02:59:
         2c:9d:25:9a:96:a6:71:5d:10:24:80:8d:7d:bc:71:81:b2:93:
         2f:e2:da:4e:0b:4a:a9:ab:66:c0:4b:3c:4a:da:c2:25:26:13:
         5c:47:a8:33:d6:ef:c8:54:fa:b8:34:c6:f9:72:fc:2e:7e:10:
         6f:72:03:f5:45:9f:cd:01:ec:4f:2f:3f:10:a1:78:55:7d:7e:
         29:99:ac:64:ca:fc:ab:e2:38:30:51:14:57:a6:6d:9f:e4:7b:
         e1:13:7a:4c:b4:27:0e:d5:14:92:80:4f:8d:73:80:fb:70:c7:
         51:36:38:fe:7b:a6:a3:ef:50:91:c3:5f:e5:7d:06:93:48:6a:
         96:1c:3c:30:6f:8c:d9:69:8a:f1:71:dd:e7:f9:bb:de:37:c4:
         29:60:6e:47:b0:31:ca:0c:50:f0:56:f0:24:2c:8e:b8:46:c3:
         8e:0c:bc:1d:0e:0b:4b:79:e0:a9:c8:e7:d5:b6:19:fa:7b:0f:
         6d:29:47:d8:ff:6d:e1:25:25:f0:f1:21:25:d7:95:b5:b3:f0:
         bc:a6:7f:c3:98:d0:fb:db:7f:74:97:d3:ed:44:62:eb:46:91:
         45:7d:67:17:c7:65:de:f9:23:38:ee:4a:58:7b:1c:a6:06:1c:
         70:3e:02:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:05:53 2026 by rpki-client