Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/982afe77-fc9c-3f87-a4df-328bd01590ad.roa
File:                     982afe77-fc9c-3f87-a4df-328bd01590ad.roa (raw, json)
Hash identifier:          f908aftsrvv5PqUBL5fos/bwkkJH+WXnpG9L4CMZxIY=
Subject key identifier:   68:8A:DB:3E:EF:63:8D:85:4C:7C:6F:6E:92:D6:71:55:92:6D:95:17
Certificate issuer:       /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial:       010D0C9F4328584E4559EFAA4CDFB5F86513AF80
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/982afe77-fc9c-3f87-a4df-328bd01590ad.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        198.252.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:ef:aa:4c:df:b5:f8:65:13:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=4e7ca2fa-b17e-4c5d-ad8e-e33b8c3ac844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:3c:1a:7f:40:3f:4b:05:de:7a:8a:78:00:
                    2f:a2:73:a1:15:ac:36:bb:25:45:0c:2a:b3:ca:67:
                    83:68:38:15:f4:f6:58:4c:a2:90:de:d8:da:21:01:
                    b3:8f:27:e7:8e:45:bc:18:ad:d2:ab:a6:41:45:48:
                    6b:36:21:4c:1f:28:c6:c5:69:d5:46:36:dd:c3:2e:
                    2e:93:c9:2e:ee:b6:3b:26:0c:09:67:62:6c:ce:54:
                    7c:1c:4a:6f:22:75:8f:bf:d7:a5:58:a3:09:93:0a:
                    56:34:98:43:85:6b:78:1f:c4:88:70:cf:89:0f:a8:
                    50:d5:a2:64:89:50:96:87:9e:5d:22:5e:81:0a:5a:
                    42:fc:fe:70:0f:68:c7:38:fd:cf:34:ad:2d:9b:6a:
                    dc:79:1e:f0:a6:6d:c2:76:6b:2f:9f:0f:84:7c:b1:
                    10:62:9f:20:30:97:a8:c7:3c:28:ba:c9:e6:66:32:
                    dd:37:58:6d:01:e6:fb:24:85:1d:46:14:c0:19:b9:
                    7a:d4:a1:62:21:d5:98:b2:18:ed:30:cf:41:73:5c:
                    16:05:bf:94:dc:57:30:6a:bc:57:a6:92:c0:38:25:
                    e3:6c:b0:71:e4:d3:4d:da:fe:a1:2a:83:ca:8a:1f:
                    7e:38:13:04:d2:5b:d7:fd:8d:2a:a0:18:fc:e2:6d:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8A:DB:3E:EF:63:8D:85:4C:7C:6F:6E:92:D6:71:55:92:6D:95:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/982afe77-fc9c-3f87-a4df-328bd01590ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl

            X509v3 Authority Key Identifier:
                keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:cd:c4:d8:1d:6f:46:cf:72:2e:ee:45:e1:a7:75:b0:73:2e:
         b1:f4:85:ab:3c:d6:3a:c1:03:7a:b4:42:31:33:e8:19:7b:e0:
         f2:1d:d0:d7:a9:78:14:f7:33:2b:e0:b3:7f:29:24:86:5f:25:
         db:a6:72:2b:1c:9e:4f:f3:56:86:6f:2e:13:dd:c3:22:09:eb:
         97:53:f2:e7:4d:59:35:17:09:15:85:5d:eb:fe:e4:d2:ae:ad:
         92:b2:c3:cf:4d:f0:b8:47:77:3b:6a:d7:9e:c2:90:1c:1d:8d:
         29:3b:c0:a7:9f:b4:52:ff:76:96:11:96:ac:b8:ff:4e:5f:c4:
         a0:15:4c:b1:50:da:16:2c:97:a1:d3:ea:7c:88:e3:f0:d1:93:
         90:1c:42:cc:0c:db:7e:f2:f6:5e:eb:ca:4c:c8:83:21:52:ef:
         df:44:ad:b7:88:fb:dd:a0:4b:8f:86:75:46:2d:74:2f:e0:ea:
         67:29:ac:2d:1d:c7:61:9f:ff:0f:00:63:a8:9c:db:08:3a:7b:
         91:f7:e9:20:7d:4e:12:09:a4:92:12:ff:31:7c:bd:27:38:88:
         20:96:fc:08:cf:44:27:ce:0f:7d:5c:ca:20:53:c9:a7:80:01:
         90:20:15:0d:ce:64:bc:a9:7b:de:5b:25:83:b5:68:42:22:e6:
         58:94:4c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:36:32 2026 by rpki-client