Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c4f923-11f5-3079-98a7-da4329fec231.roa
File:                     98c4f923-11f5-3079-98a7-da4329fec231.roa (raw, json)
Hash identifier:          9F+dmkMGh1ARwXwGcuDb6vT5v+1/EubNUPWCWjxIgXM=
Subject key identifier:   7D:54:FE:EB:E6:96:9D:D5:6E:55:03:DA:63:D7:9D:41:F8:F4:38:19
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF18221209790A6E98FCE5F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c4f923-11f5-3079-98a7-da4329fec231.roa
Signing time:             Mon 24 Aug 2026 13:00:12 +0000
ROA not before:           Mon 24 Aug 2026 13:00:12 +0000
ROA not after:            Sun 22 Nov 2026 14:00:12 +0000
asID:                     396578
IP address blocks:        199.7.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:82:21:20:97:90:a6:e9:8f:ce:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 24 13:00:12 2026 GMT
            Not After : Nov 22 14:00:12 2026 GMT
        Subject: CN=4267ef39-2c9e-4d0a-843c-7e707ffb6e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:86:6a:ab:9c:91:a6:ae:7c:ec:13:93:fa:11:
                    80:8b:c6:56:8f:99:1e:b4:ae:98:eb:41:a1:b4:e5:
                    fb:76:2c:d4:81:43:10:03:6c:f5:13:f4:6d:2c:86:
                    9e:90:b6:30:f9:3d:bf:b9:aa:f7:5e:26:ce:5a:32:
                    f1:93:0f:77:de:c7:51:83:25:20:66:46:c1:e1:3b:
                    c2:95:08:4d:5c:9f:2f:0b:9a:cb:e3:41:5c:8c:86:
                    26:44:85:07:96:40:4d:ad:81:05:45:ca:40:2f:0b:
                    17:9a:f1:56:1d:5c:00:22:b1:69:81:02:3e:58:a3:
                    96:87:55:e9:b1:ca:69:83:9d:22:67:19:db:af:69:
                    2f:03:6f:56:b9:74:c9:0d:a2:33:de:fe:51:39:5a:
                    e5:b3:15:33:f8:88:2f:cb:9b:10:16:d3:82:d6:c0:
                    af:dd:ac:ff:ae:47:30:ec:d8:d1:f7:76:12:d3:f8:
                    ad:12:4f:9a:c4:fa:4e:ef:51:0b:8e:b8:45:bb:df:
                    1e:83:48:e8:02:ae:89:25:2a:cb:20:90:36:1c:f9:
                    a7:16:60:c4:70:8b:b8:02:6b:bd:87:18:83:93:7c:
                    88:e9:b2:af:34:b3:1f:dd:6e:33:3e:fa:56:9f:fd:
                    63:0f:d1:46:dd:b9:e5:2b:d9:82:46:8a:40:e4:d4:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:54:FE:EB:E6:96:9D:D5:6E:55:03:DA:63:D7:9D:41:F8:F4:38:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98c4f923-11f5-3079-98a7-da4329fec231.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:08:f8:bf:6d:8f:41:26:35:c8:5a:1c:e0:98:99:2f:f3:93:
         9a:f0:df:6e:f2:68:73:82:e8:e6:d1:40:74:c6:24:46:3b:dc:
         56:71:16:9f:55:7d:ca:d9:d7:00:7e:ce:51:63:dd:31:e2:e0:
         ee:0d:b5:c4:d5:69:9f:9a:6e:4a:e8:9c:cc:74:7a:d6:08:b7:
         77:96:ff:9f:16:11:a3:9f:be:40:d0:75:a8:64:9c:f8:2b:68:
         80:c8:26:4a:08:cf:26:41:7b:c3:62:3a:50:a3:39:db:87:92:
         85:94:84:78:58:2c:8f:37:6e:26:40:d4:c5:7e:25:f4:1d:68:
         be:5d:c4:e1:79:8d:98:66:9e:81:6e:0f:c1:e9:cd:58:82:c3:
         01:ad:8d:95:c7:b2:6f:87:cf:be:33:a2:3a:8b:84:b2:db:05:
         28:95:87:8e:f7:75:7c:63:51:6b:4a:f7:a4:48:18:29:c0:84:
         25:42:0d:6b:23:0c:0d:c9:e7:d9:79:5e:92:aa:88:db:93:3c:
         61:3d:12:2c:eb:7f:47:02:58:c1:d9:b5:b6:b0:f8:67:77:91:
         3c:a8:3e:80:db:f4:78:3c:29:90:93:ed:bf:8f:45:f8:b1:a4:
         66:a1:a2:36:24:12:93:1e:55:70:d5:65:81:91:c2:52:b6:a6:
         86:b0:bc:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:32:56 2026 by rpki-client