Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f861b26-c03e-31fa-ae19-11f336173cdc.roa
File:                     2f861b26-c03e-31fa-ae19-11f336173cdc.roa (raw, json)
Hash identifier:          7W2F5J3ghzqm8o8IOjO6Uuytwg5/FJI/369aM42yFSQ=
Subject key identifier:   CD:1E:50:8E:26:06:BC:D3:11:16:13:6A:53:69:A9:7F:29:93:D0:D7
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD7D14F02FC26AA572364C300
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f861b26-c03e-31fa-ae19-11f336173cdc.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     202623
IP address blocks:        198.41.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:4f:02:fc:26:aa:57:23:64:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=f61078c5-dd91-44b8-a2f3-f2055ef844d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:08:36:db:fe:7d:31:e2:a3:df:fe:00:ba:0c:
                    d0:bd:09:63:8e:32:32:24:93:bc:48:e3:7a:31:60:
                    0e:09:68:02:cd:72:d0:5b:2b:d6:a4:17:d1:a0:4c:
                    03:b4:f8:86:75:4c:b3:5a:28:31:64:95:7d:83:94:
                    52:88:7a:de:69:58:1a:68:12:5e:54:14:28:92:49:
                    9d:de:37:00:13:ab:d9:10:7f:34:d8:b4:8b:33:52:
                    89:65:a1:3b:76:ef:bd:a0:76:3e:09:5a:09:30:9c:
                    4b:93:dc:3d:23:73:f4:65:4a:63:42:84:0d:d0:37:
                    7d:39:98:c2:80:c3:ca:1b:5b:5c:a9:8c:c7:26:64:
                    88:83:9d:4e:f6:66:ac:a4:e3:24:de:6d:84:fd:89:
                    7a:73:4b:a2:2a:17:54:81:d4:b6:d4:0d:6f:b1:08:
                    79:58:e9:1e:ac:e5:5d:44:ac:e9:d4:3e:2a:53:57:
                    a4:92:30:52:d0:fc:0a:bd:6e:4f:1f:a9:06:60:8f:
                    11:d7:be:44:97:cd:b9:18:98:6e:08:a8:b9:9b:7c:
                    ec:26:2f:b3:2b:68:ff:fb:a9:9f:88:f9:a2:51:5b:
                    c1:db:6f:9b:0d:8e:f3:36:f9:11:28:b0:d7:3d:5f:
                    94:74:09:cb:38:a6:fb:c9:f1:23:74:27:e4:fe:08:
                    c8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1E:50:8E:26:06:BC:D3:11:16:13:6A:53:69:A9:7F:29:93:D0:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f861b26-c03e-31fa-ae19-11f336173cdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:15:5c:55:fb:11:85:05:d0:aa:a3:7d:b6:7f:c8:b2:1c:02:
         08:4a:33:57:4a:6e:be:0d:16:2d:1f:12:15:5e:e3:16:d6:f7:
         5f:8f:77:38:57:f7:bb:bb:87:04:23:16:ea:6e:8f:72:eb:01:
         fc:2f:44:22:e1:87:9b:89:94:e2:24:ed:88:6f:9d:f0:e9:d8:
         5b:59:d2:cb:5c:e9:ac:78:0a:52:3d:01:2c:84:50:c5:72:64:
         54:c5:ae:a1:96:09:11:99:4f:21:06:d0:cf:b6:23:e4:3a:fb:
         f5:59:a9:48:ef:66:97:70:2c:00:0a:8f:85:b5:31:ba:f4:29:
         26:fe:6a:3d:50:1d:b6:72:d1:c1:81:69:72:6f:b9:dd:1a:8d:
         9e:80:4d:3d:a9:dd:49:4e:d5:5e:d1:74:e7:a1:5b:2c:61:2c:
         de:0c:55:f8:bd:ea:6d:a3:9c:75:b3:bd:17:53:89:77:13:3f:
         1c:0c:85:23:99:14:f9:50:30:08:12:6e:80:81:82:b9:4e:60:
         57:39:48:d8:7b:e7:2d:c0:80:b7:dd:0f:d8:c6:d3:c0:a3:7b:
         bd:9c:a8:07:a8:a3:29:6c:91:68:ef:dd:23:f3:a8:3b:42:09:
         22:37:aa:ae:60:e8:92:f5:5a:eb:3c:59:c5:95:10:2d:e5:53:
         4c:f5:ce:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:58:47 2025 by rpki-client