Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/781a9bc0-9963-3bc2-8c24-a13d0b293411.roa
File:                     781a9bc0-9963-3bc2-8c24-a13d0b293411.roa (raw, json)
Hash identifier:          SWlhQoyz9AfLq8/GWxuHgaXRIyF73qmgQ3iX4BeJpzM=
Subject key identifier:   F6:20:B7:6F:E4:1D:42:92:88:9C:9A:21:FE:74:AE:BD:CA:98:0D:C6
Certificate issuer:       /CN=a1853cd3-3329-4b61-a321-f6705ea74197
Certificate serial:       010D0C9F4328584EDC92111C4E57061C507C3980
Authority key identifier: 2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/781a9bc0-9963-3bc2-8c24-a13d0b293411.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     400554
IP address blocks:        199.248.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:11:1c:4e:57:06:1c:50:7c:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1853cd3-3329-4b61-a321-f6705ea74197
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=11dcdd3a-4207-4234-837d-957b7788ab34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d5:5c:ce:3d:61:87:52:45:47:6f:1b:0c:5d:
                    2b:8b:e9:01:99:10:d1:90:d5:aa:3e:cf:74:0b:df:
                    1e:b3:f8:5b:be:ca:f9:fb:d1:30:9e:93:f9:6b:7e:
                    18:9b:9d:06:94:14:f5:89:09:ce:39:c1:42:c7:77:
                    71:c3:f5:d4:17:dc:64:e0:09:9f:34:ea:34:d1:a2:
                    db:a1:e7:0f:1b:72:1b:ae:88:49:c0:46:37:b2:6b:
                    dc:8e:c6:0b:32:2e:62:83:99:70:2b:eb:4f:64:c1:
                    ee:37:a7:4a:c0:e4:4e:f2:0f:c9:73:c0:8c:ec:d9:
                    2a:3e:9e:ac:76:11:f0:af:8b:d1:3e:c1:93:ff:54:
                    09:0e:8f:76:46:7e:47:b3:9e:31:a1:49:b2:66:86:
                    ab:54:76:53:52:56:9c:05:fb:ce:b9:63:31:e3:b2:
                    f1:63:b0:2d:2b:0d:08:90:be:aa:e7:0f:c8:8e:86:
                    2f:4f:2f:b3:ff:72:21:cf:4b:a8:3d:3d:a0:87:e4:
                    eb:18:34:32:54:75:c5:41:63:90:0b:39:91:6d:14:
                    93:a5:b5:42:0e:6f:66:76:b5:9d:d9:9d:78:10:4b:
                    15:26:6d:94:3b:db:6a:48:42:c4:fd:95:75:62:41:
                    74:c0:35:e1:1b:72:3c:12:36:1c:29:5a:8d:0b:5c:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:20:B7:6F:E4:1D:42:92:88:9C:9A:21:FE:74:AE:BD:CA:98:0D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/781a9bc0-9963-3bc2-8c24-a13d0b293411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl

            X509v3 Authority Key Identifier:
                keyid:2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.248.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:dd:05:51:53:0f:b3:ab:ed:89:ed:8a:bc:2b:93:38:1f:0b:
         12:68:f7:7b:02:5f:72:e6:66:a4:1e:e7:af:66:1a:d5:6f:0a:
         43:d5:98:5c:3b:99:85:5f:cd:44:f9:8c:ce:55:e6:d4:fc:0c:
         9f:56:04:42:49:ea:cc:6a:fe:58:1a:02:15:10:04:eb:6f:84:
         d4:39:7f:b5:be:c5:50:0c:3f:86:84:93:e7:c7:8d:1c:bc:0f:
         09:9f:ab:b3:1b:d3:e1:1d:ec:eb:63:1c:18:00:35:ab:95:e6:
         b8:60:3b:1c:ab:5e:50:3e:1d:80:57:8c:17:9c:2f:c7:b1:71:
         c6:f2:53:07:ba:d7:f8:fd:ef:c3:5c:31:8a:8e:18:71:59:c6:
         c5:e0:a4:ce:5a:38:f0:2c:9e:86:dd:c6:2b:a6:7d:fe:73:c1:
         74:c3:e8:b1:b0:5a:ac:59:b0:c0:60:45:03:8c:a1:e0:4a:62:
         08:13:bd:a3:5b:e4:7e:72:44:df:27:f0:09:4d:a9:6a:44:c8:
         90:5d:3e:c9:51:7b:1c:cf:3c:af:7a:45:8f:fe:a0:3c:01:84:
         10:1a:dc:cc:83:0c:d2:8c:be:02:62:fe:5b:6a:4b:45:82:88:
         3b:e7:e9:28:61:4f:1a:b9:d6:6d:7e:11:ec:b2:51:e8:1e:48:
         72:6c:a2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:32:57 2026 by rpki-client