Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa
File:                     557b0708-0206-328f-92e4-7aa700401b12.roa (raw, json)
Hash identifier:          9JXIvYzo1pGk58YwwHNw3h5QeD6GePyBrfnzKoYEnEQ=
Subject key identifier:   2E:C1:74:43:25:36:4C:A4:66:CD:55:89:1E:C8:3D:ED:84:7F:74:6C
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584E3A2F1D0BF64D053024CACA00
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     2495
IP address blocks:        198.248.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:1d:0b:f6:4d:05:30:24:ca:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=ac2d95dd-bf68-41d3-b85d-2aee262249c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:ce:9a:ae:c9:d1:bb:84:37:ee:3b:30:35:
                    55:cf:f4:e5:1b:13:9e:78:6c:95:8a:08:f9:4a:14:
                    90:8f:d9:39:8f:42:81:eb:00:48:91:98:66:cd:ef:
                    1c:5f:51:e8:c6:db:9c:36:f3:20:08:ca:f7:68:d9:
                    5c:97:76:24:d5:9e:96:c8:a9:41:65:0d:a0:b7:cb:
                    20:83:b6:d4:5f:b8:2b:b8:71:10:d8:d4:9a:57:0d:
                    dd:40:cd:4d:2a:9a:9c:f3:69:47:6b:7e:7c:33:92:
                    f7:88:29:65:eb:73:84:34:b2:fd:04:5c:d1:1f:6f:
                    c0:9f:aa:74:95:9c:fa:ce:ab:ac:e3:d2:d7:1e:3b:
                    49:a5:df:34:d0:f2:42:97:05:ac:ea:51:6a:bf:c3:
                    3d:1d:1e:c0:9b:0d:8b:3f:08:cf:ba:8f:61:2d:d7:
                    a3:e4:62:74:d3:69:9b:0f:82:14:a2:93:d7:b9:8a:
                    68:03:a7:60:9c:05:e3:68:69:8b:f7:9c:80:3b:69:
                    52:49:92:c0:65:e0:ca:cb:8c:dc:f4:03:03:1b:92:
                    2d:c6:79:d3:aa:65:69:e2:e6:cb:ac:5c:93:76:80:
                    ee:6d:54:7a:a2:ff:5b:14:e6:1d:cc:ee:6c:ee:7d:
                    52:5a:eb:ff:fe:f3:d4:49:94:a7:f2:c8:5a:fc:ed:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C1:74:43:25:36:4C:A4:66:CD:55:89:1E:C8:3D:ED:84:7F:74:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/557b0708-0206-328f-92e4-7aa700401b12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:d6:1a:ee:fe:63:d8:7e:5c:d7:b7:47:2f:34:96:02:b4:24:
         d0:97:a5:15:57:16:e1:2d:eb:35:b7:c4:6d:29:5d:2f:4f:19:
         a5:ce:2f:fe:30:a7:57:b7:fb:61:25:a4:8f:39:ab:e6:28:d0:
         47:0f:d7:c7:e5:bb:e0:a1:16:0f:fe:1b:6d:73:06:c4:f3:4b:
         35:68:4c:50:85:22:2a:94:f8:5f:ee:1f:e0:ce:52:60:5a:9f:
         c6:6b:49:a4:1e:8c:5c:31:a3:a8:d2:eb:e5:84:8e:28:9d:a4:
         b0:da:98:5b:ca:7f:db:94:9f:45:8a:71:c5:2a:ff:af:a5:f4:
         95:01:94:95:5c:cb:a3:52:d3:3c:54:2e:d8:f4:4c:63:cd:64:
         51:d1:27:cd:fa:4a:78:89:1b:f5:84:3c:c9:62:12:61:3c:9b:
         ad:12:46:7b:15:8a:3a:6a:72:54:0e:6a:4b:50:21:09:b4:b0:
         79:f1:4c:85:54:a5:27:b7:99:e9:6d:2e:54:24:8d:5c:ba:4b:
         26:69:50:d8:98:ae:e5:99:7b:53:0e:a1:39:5b:73:e9:b4:34:
         32:77:d6:d9:f6:24:38:6d:0c:06:fe:f2:62:0b:07:c5:2e:6d:
         f5:c1:a1:0a:ce:eb:68:ce:41:1a:8e:f0:8c:d1:51:eb:35:f2:
         ef:0b:25:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:14:08 2026 by rpki-client