Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
File:                     4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa (raw, json)
Hash identifier:          gEVvy1J+STcnaBy+Ol4AmngEVRYdHzZ62aye/ABzTI4=
Subject key identifier:   B3:88:8D:43:1D:C9:54:12:B5:65:6E:4C:49:E6:25:B9:FF:FE:B8:DE
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584D9E5008CBD5C947E77469D600
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     396982
IP address blocks:        162.240.198.0/24 maxlen: 24
                          162.240.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:08:cb:d5:c9:47:e7:74:69:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=47e326b7-610d-493b-944c-5affa9e4e5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:82:62:af:21:eb:23:56:cd:25:eb:2b:82:b5:
                    8c:6f:7d:68:01:0b:d4:a8:66:af:ad:5d:9e:c5:4e:
                    08:b0:82:fa:90:8c:55:00:d2:b2:4f:e8:85:5e:c9:
                    99:00:57:39:02:f3:06:ae:6a:dd:62:11:7d:b9:c5:
                    67:b1:50:cd:9b:a4:fc:7f:af:61:01:f0:84:b8:a3:
                    4a:22:0d:a1:02:bf:b9:3f:1c:be:de:2a:04:7d:04:
                    16:35:aa:83:4d:53:cc:68:2a:b3:8f:be:15:e7:3e:
                    a6:1a:cb:36:a7:e2:00:ae:33:7a:33:9e:33:77:07:
                    f9:2e:3f:f0:29:96:e2:19:80:52:a4:ef:9c:be:a7:
                    1c:13:97:38:d6:70:85:85:04:06:b5:88:d6:4d:66:
                    66:49:c3:21:99:a4:ee:a1:20:09:51:12:6e:60:47:
                    45:03:06:0a:02:44:89:69:17:b9:d9:57:a4:f0:34:
                    7a:a0:45:f1:84:ef:16:06:4a:a4:9d:f9:c0:db:dc:
                    7a:64:c9:b8:c0:62:c9:d8:44:f7:ff:aa:aa:45:3b:
                    a8:9b:fd:0b:07:aa:a7:44:92:19:1e:9c:53:6f:11:
                    c2:3a:20:3a:0f:66:09:fa:84:e6:41:d0:43:32:4c:
                    dd:6e:75:0e:af:d0:9d:09:1d:14:30:14:32:77:21:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:88:8D:43:1D:C9:54:12:B5:65:6E:4C:49:E6:25:B9:FF:FE:B8:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.240.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:72:89:8e:dc:4c:ce:02:f6:f3:bc:33:ed:0c:57:0d:74:c7:
         52:68:7f:e4:78:fe:4d:f5:0d:44:8e:ab:93:ad:d8:18:89:e6:
         19:ea:12:b2:95:81:4f:34:97:72:cc:c2:83:8b:1a:bf:75:8d:
         64:b4:0c:aa:d7:66:e9:50:77:59:58:58:9b:27:48:3f:92:d0:
         1e:7d:45:59:85:b1:d4:45:33:0e:05:cc:a5:ba:a8:66:5d:7f:
         3f:56:e9:05:32:d6:fa:4a:be:f2:91:9e:ba:a8:6a:5d:b5:c9:
         1e:2e:7a:59:a6:7a:8d:ce:18:a6:33:fc:99:96:80:49:35:11:
         79:83:49:c6:91:8f:18:74:85:1b:a8:cf:77:7d:eb:7a:43:f4:
         14:82:01:d0:4b:00:ac:38:91:de:4e:f5:04:17:fc:73:78:a8:
         2b:ed:94:60:0b:93:ee:81:bb:da:04:34:ca:0f:ae:26:28:b6:
         4d:60:34:26:a2:e7:76:4d:b9:78:10:24:d0:8a:5b:ab:1e:56:
         3c:f5:f1:9c:aa:78:bb:1f:51:55:87:66:c5:9c:d4:2b:63:32:
         84:f5:a9:e1:2e:be:70:86:fe:c3:10:a1:4b:ad:13:a9:44:2d:
         65:83:6c:08:9e:82:1f:7d:95:21:60:cb:2e:79:12:f4:59:e4:
         24:92:7b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:46:39 2026 by rpki-client