Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa
File:                     99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa (raw, json)
Hash identifier:          D7g3iCMOFAbi56Qmhx7RC7/8C0YG2gC9b+nOOdCj3tY=
Subject key identifier:   BA:13:61:E2:8B:AE:FE:95:16:B4:3A:EE:4A:E7:33:D2:C6:A8:C3:AF
Certificate issuer:       /CN=b9ea3438-4142-4de2-a912-7b081a51b42d
Certificate serial:       010D0C9F4328584D3E001EB4E9163391EFDDD400
Authority key identifier: 24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     47870
IP address blocks:        198.17.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:1e:b4:e9:16:33:91:ef:dd:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea3438-4142-4de2-a912-7b081a51b42d
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=919acc14-150a-4cd9-9d6a-c1524a5d69fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c1:86:d4:fc:c4:e1:f7:3f:cb:83:21:2f:42:
                    29:70:c1:c1:7f:ec:ce:3d:9f:5f:5c:18:16:86:db:
                    68:d3:f0:c5:8c:5c:17:15:15:b5:ae:06:6f:c7:6b:
                    84:ab:1a:0c:3a:d1:2e:54:9e:c6:3c:7b:30:86:9a:
                    6f:55:0a:f5:19:57:c8:14:fe:33:c3:b3:a6:da:36:
                    fe:05:a5:be:3c:eb:42:b0:2f:bf:58:66:93:a7:a8:
                    b5:a8:93:b4:ec:f2:79:64:55:92:be:e3:74:2e:09:
                    e7:f5:1b:16:18:13:ec:b9:ea:4f:2b:82:94:13:0d:
                    70:f2:92:a4:ca:de:f6:0a:51:cc:59:5b:71:0a:b5:
                    99:ef:24:90:1f:86:b6:61:33:1b:9b:b2:06:f6:9c:
                    48:59:cb:cf:38:56:ff:98:ff:37:b7:f3:b1:3b:04:
                    11:78:b7:c9:1b:be:ac:f4:3a:7d:ac:16:54:99:66:
                    87:bb:15:4c:a5:88:0c:78:56:b6:8a:d6:e5:40:6d:
                    d9:92:03:e4:8b:ef:ff:84:3a:d8:f0:06:8f:6a:91:
                    97:dc:ef:9a:6f:a5:49:ea:52:d9:1c:52:6a:af:ab:
                    54:11:53:b8:00:ed:cf:29:0a:f3:bd:5b:52:7e:1b:
                    e4:ca:27:79:4c:79:38:49:78:f5:8f:48:ff:86:90:
                    29:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:13:61:E2:8B:AE:FE:95:16:B4:3A:EE:4A:E7:33:D2:C6:A8:C3:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/99fd484b-6aac-37fd-b6fb-dbd306fca6b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d/b9ea3438-4142-4de2-a912-7b081a51b42d.crl

            X509v3 Authority Key Identifier:
                keyid:24:39:62:5E:88:76:78:F6:73:98:11:AD:E4:48:16:6D:39:36:AF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b9ea3438-4142-4de2-a912-7b081a51b42d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.50.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e9:c8:95:9b:cb:2b:fc:4a:51:b3:01:f5:22:14:a0:3d:6c:
         ab:93:6a:6f:bd:cc:18:b7:f5:96:e8:96:31:55:43:13:62:27:
         5e:eb:84:39:a5:45:3b:46:fd:9e:3d:9f:07:a6:e5:36:6b:a1:
         d7:cf:a0:ef:d5:c6:68:f9:6c:d2:3d:82:7d:10:65:0b:a7:03:
         0b:00:7e:cf:38:4b:12:ae:d4:d8:3d:89:9d:f8:56:df:90:95:
         e4:5c:62:89:3c:69:f9:ea:f3:c2:0d:fa:d1:69:45:fb:81:59:
         37:db:3f:76:3b:e3:87:ad:a2:cd:c5:b4:7e:2f:a2:69:ba:eb:
         db:88:c7:00:f6:68:d9:3e:dc:9f:d4:ff:f5:e7:85:8c:75:52:
         e4:b2:97:e3:1c:4a:98:34:d2:c9:eb:32:36:1b:7e:58:b7:6c:
         e3:1d:e0:c5:1f:4e:47:44:f0:15:5e:c2:b9:9c:4f:b9:d6:71:
         2e:da:84:86:97:12:9b:89:26:1f:e9:1f:5f:1d:45:5a:62:84:
         db:9c:e2:db:51:2c:f5:7e:7b:45:57:77:5a:45:dc:7b:ad:e4:
         2e:84:09:34:11:96:c5:c4:80:a3:d8:bb:08:ce:32:95:f2:63:
         63:bd:8b:4e:fe:eb:b4:ee:40:7f:96:89:8d:02:35:dd:d6:06:
         17:27:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:47 2026 by rpki-client