Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7235d4d4-cada-3790-b333-39f6375999c4.roa
File:                     7235d4d4-cada-3790-b333-39f6375999c4.roa (raw, json)
Hash identifier:          M5YpgdY6WKNkV63FDBg7XXPY95mgp+tvjTuM7g2vuNw=
Subject key identifier:   CF:A1:39:BB:63:71:AA:9F:E5:58:B8:47:B2:EE:1B:B1:E9:B2:8C:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D492A4CB784AFB1404FAA7540
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7235d4d4-cada-3790-b333-39f6375999c4.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     396576
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:4c:b7:84:af:b1:40:4f:aa:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=7d770142-d924-449a-b9cb-fbdeff4b3398
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9c:e5:46:68:55:8a:36:c6:0b:ef:05:da:7f:
                    95:63:86:bf:2d:07:9f:83:27:99:58:1a:6f:7d:2e:
                    17:cd:15:a5:5e:db:f1:5d:99:c1:7f:ec:eb:bf:bd:
                    d8:41:fb:d3:a4:df:e2:bc:1e:ff:80:2d:1c:76:b7:
                    5e:ba:dc:8b:b8:01:f3:c9:dd:ea:b8:ce:b5:49:b6:
                    7e:c1:c9:1e:7f:9b:4f:ed:4f:2c:02:7f:6d:f8:eb:
                    56:73:4e:71:7e:e4:4f:29:a3:19:e1:cd:a9:a6:52:
                    91:f3:58:31:1c:6c:a4:42:fb:be:a9:48:a2:8a:cc:
                    8e:93:5d:89:63:90:ea:cc:70:ab:0e:b4:c9:c8:18:
                    3b:78:88:9f:c4:39:d4:17:82:9f:fb:5d:5b:26:6b:
                    37:b8:0e:01:ec:46:8e:ed:72:06:38:09:4e:31:ea:
                    28:93:cb:e6:49:3d:ff:ff:38:f5:2e:62:1d:7c:41:
                    62:35:2c:13:55:f6:93:00:0a:0c:e5:69:8b:51:e4:
                    cd:64:1c:f0:ee:d4:c5:db:12:8d:ca:47:7d:30:b8:
                    9a:5e:10:fd:90:07:d6:5d:8b:fa:d0:01:99:92:48:
                    75:fa:b0:1b:b8:e4:d6:69:f6:1a:83:ba:6d:28:b2:
                    87:88:41:b0:bb:67:95:c6:a7:7c:78:d8:d9:a4:d5:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A1:39:BB:63:71:AA:9F:E5:58:B8:47:B2:EE:1B:B1:E9:B2:8C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7235d4d4-cada-3790-b333-39f6375999c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:73:75:89:51:57:af:f8:b5:07:a5:18:cd:21:7c:e1:2d:74:
         1d:ac:46:f6:0e:28:fd:9f:e9:63:48:fc:ca:07:d6:90:5b:f8:
         b7:31:f8:26:09:f8:86:ff:23:d3:52:67:dc:14:ae:d9:8d:d7:
         ce:6d:86:b3:6f:bb:ab:f7:99:1f:36:7d:34:07:5d:3f:ae:15:
         8c:e6:a1:23:e3:d0:2d:c5:2a:3a:62:2e:7a:e6:1d:38:24:c0:
         55:0f:fd:bd:86:9e:c8:c4:24:64:a6:e4:a4:2e:2f:73:40:a4:
         87:cc:1d:33:d5:e4:75:ec:69:9d:3f:8f:5a:ff:c7:43:8e:2b:
         1b:13:87:a2:4b:c2:5a:8a:cc:7d:6b:1f:55:cf:19:a9:7c:d1:
         d4:c6:7a:c5:1a:a3:3f:49:ea:25:4b:dd:e7:6c:cd:21:2a:79:
         75:07:b0:18:92:75:ee:47:f2:1d:02:14:1d:a1:94:60:27:28:
         25:5a:4d:1a:e5:98:77:5b:08:6b:df:3d:b4:9e:78:c9:81:1a:
         ba:bc:5c:5b:c9:da:64:4a:51:c9:d0:e0:7f:0b:e0:06:37:71:
         e8:11:9d:16:9d:3a:35:b0:ab:1f:02:fd:ae:36:93:52:0c:a3:
         87:19:06:f0:ec:47:66:3e:e3:66:11:97:00:5d:b6:75:97:51:
         1e:de:d0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:42 2026 by rpki-client