Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/835f8af6-8f53-3129-ace1-d8a74c4b73a8.roa
File:                     835f8af6-8f53-3129-ace1-d8a74c4b73a8.roa (raw, json)
Hash identifier:          BjLGoBLbVKs+EcCv4vC3ekjP742m8i0wpV/e6J88nM0=
Subject key identifier:   50:C0:95:E0:D3:FA:DD:18:01:3F:68:96:B6:CE:BB:5D:D9:C7:32:BE
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584D3368422B1324A17712BD9400
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/835f8af6-8f53-3129-ace1-d8a74c4b73a8.roa
Signing time:             Tue 17 Mar 2026 17:57:52 +0000
ROA not before:           Tue 17 Mar 2026 17:57:52 +0000
ROA not after:            Mon 15 Jun 2026 17:57:52 +0000
asID:                     22616
IP address blocks:        198.14.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:33:68:42:2b:13:24:a1:77:12:bd:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Mar 17 17:57:52 2026 GMT
            Not After : Jun 15 17:57:52 2026 GMT
        Subject: CN=aac39ef8-a4e0-42ae-bcae-9bac15643b03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:06:f4:bf:86:fc:2c:f5:0c:e5:bb:12:18:6f:
                    a7:42:7d:8a:54:76:12:da:7c:6a:10:cf:94:2b:35:
                    3d:a3:5b:0e:a4:ff:42:51:f3:67:23:ea:fb:2a:58:
                    be:c3:0f:3e:40:23:4d:e1:97:b7:a3:68:6b:60:83:
                    e6:58:5a:83:5e:9e:73:94:3d:51:8a:a8:b3:e0:dd:
                    f6:16:20:cd:f3:55:01:78:08:82:ee:8c:ae:16:b8:
                    4a:e6:90:9e:ce:bb:ea:2b:9e:cf:24:ab:0f:bc:b6:
                    24:03:53:38:ec:df:19:c0:13:fb:99:3a:0b:71:e8:
                    18:08:45:43:16:ac:89:28:0d:f8:91:4f:68:f2:47:
                    39:70:54:24:f2:5b:0a:c8:62:2c:67:5a:3b:f0:a4:
                    d5:39:20:8d:a3:81:78:3e:10:2a:52:f5:ec:9c:ca:
                    1c:6a:c4:c6:ef:83:d5:9e:1a:be:a0:b7:f4:52:fb:
                    2e:a3:ab:f5:1b:ac:a8:33:3e:47:02:a7:2a:6c:f3:
                    f6:86:95:76:64:8c:e4:cd:aa:e7:8e:c1:30:0b:f6:
                    0d:72:d4:d3:e1:c0:f9:87:23:c2:bc:22:02:42:4c:
                    0c:a0:c6:8e:ee:12:2d:88:93:68:7c:bf:98:2c:92:
                    9d:a1:c0:29:89:1e:38:2e:22:1b:d0:12:fd:fc:94:
                    f3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:C0:95:E0:D3:FA:DD:18:01:3F:68:96:B6:CE:BB:5D:D9:C7:32:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/835f8af6-8f53-3129-ace1-d8a74c4b73a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.14.100.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:55:7c:11:91:1e:41:87:ed:38:a9:f2:ea:7a:90:d5:c1:98:
         85:8e:35:2c:68:8d:85:91:c6:b9:f4:1b:ce:b8:bc:65:c0:4d:
         8d:5f:2d:09:a2:d5:b2:19:55:9d:01:b9:62:98:a5:00:e8:03:
         e1:28:63:b2:03:83:70:99:f9:31:cf:ad:ce:48:bc:6b:d8:2b:
         17:95:82:64:ab:82:51:4c:07:15:93:c4:a1:e4:94:f7:8e:41:
         a5:52:94:68:3e:03:e7:74:54:f9:87:eb:73:76:13:f2:1e:8c:
         9c:d8:73:15:87:08:d6:09:a3:58:8e:17:61:02:68:ef:07:ef:
         87:04:0d:48:d3:3a:6c:0a:c7:24:a0:0f:24:4c:c9:1d:16:ca:
         1c:e8:45:3e:94:ea:28:f3:43:1d:d4:71:a7:0f:b8:f8:55:50:
         f1:ea:3a:1f:e9:ea:0a:26:82:53:fa:86:7d:78:f9:d9:b9:e2:
         5d:d3:32:4f:55:04:18:fd:9b:b8:34:9d:1b:3b:6b:2a:2d:95:
         b9:ce:ed:9e:40:a3:c9:1a:8b:00:ea:3f:4f:65:af:c7:ad:17:
         6a:4f:e7:49:cc:64:27:5b:2d:20:b8:2c:15:83:2e:ff:7e:60:
         8e:bf:5c:15:14:ab:e3:ee:41:f6:d9:92:8f:08:11:37:1a:55:
         98:b1:b1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:45 2026 by rpki-client