Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1010c84f-adf2-31bb-bbe8-302c398fc0f2.roa
File:                     1010c84f-adf2-31bb-bbe8-302c398fc0f2.roa (raw, json)
Hash identifier:          4Jyp8ESjiNOOxccGeNvZ1oQ70Ymd3ZsVBivWksPE0H8=
Subject key identifier:   BB:0E:A2:AE:89:62:0E:E9:9A:5C:45:46:38:F2:4F:8D:ED:D1:36:D8
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5A32B42A2463A2312A5CFC80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1010c84f-adf2-31bb-bbe8-302c398fc0f2.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     3593
IP address blocks:        216.37.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:32:b4:2a:24:63:a2:31:2a:5c:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=2d31abb2-4d69-4cb0-a88c-34a4f0a7ec71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0d:cf:ce:93:47:da:2a:5f:63:34:85:57:a7:
                    d4:50:e3:e7:6b:fa:e7:af:03:61:f9:73:2f:df:80:
                    fd:d3:92:f9:8d:39:02:05:37:87:66:32:a0:9d:88:
                    b0:8c:a6:d3:02:48:da:92:04:c6:8e:54:39:a2:d2:
                    aa:78:88:71:4f:af:9c:58:6b:55:26:bf:9e:0e:54:
                    36:4d:f8:d8:c4:c9:6a:62:3c:ee:71:22:7a:a9:34:
                    a5:84:e4:fa:a1:66:8e:83:5e:cb:8f:f9:67:fd:06:
                    a2:dd:e9:14:8a:bb:ff:2d:2f:99:1e:c8:a0:ee:81:
                    80:9c:d4:c2:3b:34:8d:aa:16:f2:24:38:99:3a:8e:
                    b0:43:47:32:ba:08:bb:71:51:67:85:5c:ff:79:a7:
                    9c:ab:85:cc:26:27:a5:16:67:3a:58:76:ea:f9:c1:
                    68:9c:08:e4:f6:c3:a0:73:d0:32:f2:cb:de:0d:f1:
                    73:d6:cc:80:6a:9c:11:2b:1b:3a:a6:99:01:b3:8a:
                    e2:23:f2:c9:fb:83:67:46:8d:86:55:ad:91:45:9b:
                    ca:3f:e5:d5:b6:a8:95:aa:23:77:c0:96:40:ca:b4:
                    5a:e1:94:3a:3f:fe:8b:72:12:da:7d:d4:33:c2:f5:
                    73:a8:88:2b:f4:82:b3:70:27:f0:eb:ac:b8:22:35:
                    c7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0E:A2:AE:89:62:0E:E9:9A:5C:45:46:38:F2:4F:8D:ED:D1:36:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/1010c84f-adf2-31bb-bbe8-302c398fc0f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.37.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:b7:84:de:5e:bc:4c:c9:ec:2e:38:f0:96:dd:6d:2d:1e:4a:
         4d:21:36:e7:c6:31:93:f0:66:ee:dd:5c:b1:50:cf:e0:32:42:
         1f:4d:cb:8b:1e:cb:e9:63:21:7c:c9:82:f3:ca:ef:20:64:06:
         1a:31:6f:6f:4e:0c:6a:58:45:e9:18:4d:83:be:49:f7:6f:6f:
         fc:97:46:e3:7a:62:62:72:de:5a:a2:e1:43:89:b0:cb:97:5f:
         4e:62:d1:b4:97:a2:22:b5:10:6a:45:a2:8d:7c:34:c1:7d:70:
         5c:da:a7:a2:e5:16:20:19:a3:7e:9a:c5:fd:d0:ef:e6:26:a8:
         4c:16:7c:80:7d:d8:32:2f:ff:4f:fd:ff:a0:8b:6f:d6:9c:6f:
         9f:02:22:04:ff:1e:28:f6:1a:1b:07:01:6e:9f:8f:29:b7:5f:
         c6:bf:ef:8a:07:79:1a:67:0d:c7:8c:f5:10:97:7c:57:59:c5:
         35:ee:bb:27:60:7e:33:95:bb:cd:1f:fe:4e:13:cd:0d:0d:dc:
         a1:e5:98:e0:f8:61:ef:e8:ba:49:c0:bf:8b:a2:51:70:57:1f:
         c5:b5:f8:cd:e3:5e:3c:7e:6a:6a:6e:87:d4:b2:39:48:f9:ed:
         d9:f3:77:6f:01:9d:1f:7f:29:4d:46:bd:01:1d:36:5a:85:f0:
         33:b4:cf:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:39:03 2026 by rpki-client