Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa
File:                     ade61511-8398-3e2e-b0df-4582caf49fa7.roa (raw, json)
Hash identifier:          0728fUTKu3l/pEl+/UXOkQR0LBnsp5N8MpWiqfAXFKI=
Subject key identifier:   F0:03:1B:F9:E5:10:E8:47:EC:25:F4:03:B5:5D:6D:5A:69:FE:58:8E
Certificate issuer:       /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
Certificate serial:       010D0C9F4328584F49771540FBEF09CF6CC56E80
Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395567
IP address blocks:        198.73.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:15:40:fb:ef:09:cf:6c:c5:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=863b6341-2f75-4f7f-a328-a4a7fb6deced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:5f:a2:27:6e:fd:b7:c3:fb:1b:67:0b:d7:
                    05:90:ac:7b:3d:8d:e5:0c:cd:72:15:0b:b6:55:8c:
                    28:cc:fe:15:28:05:d8:89:7d:b5:7d:64:be:ab:49:
                    61:cc:9a:a5:9a:55:f0:93:b4:ef:2d:e8:32:81:bd:
                    c6:d7:e6:b3:e2:cb:7f:5f:b4:73:72:1a:a9:f7:0f:
                    a9:31:7c:c1:b1:11:31:25:9b:2f:c0:14:47:0d:d9:
                    4e:bb:3f:f9:75:a6:6a:e5:34:ab:e4:50:70:8f:d3:
                    5f:e9:66:1e:c5:9e:71:d2:9d:1c:bc:16:04:b4:2a:
                    45:1b:47:0b:11:61:ef:93:9e:3e:cc:94:60:55:5f:
                    01:ae:ff:0c:ed:38:f2:c7:bf:93:de:b1:5c:94:7d:
                    6b:77:a1:63:d1:3c:ad:06:92:0c:04:a1:b3:a4:58:
                    bf:b5:8a:51:32:18:b2:e0:c5:d1:2c:19:98:24:9f:
                    af:90:14:8c:5e:3d:9e:3b:e2:f4:62:1c:ef:db:f8:
                    a0:6a:ef:ec:24:28:4e:09:76:97:17:fd:a9:2a:04:
                    74:3e:25:05:eb:59:5e:d7:b3:c0:5f:e4:64:e8:1e:
                    9b:91:c5:82:a8:33:88:fd:b5:5c:8a:3b:e7:4d:17:
                    68:25:c0:e5:a7:2d:82:08:7f:36:38:b3:4b:62:67:
                    4b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:03:1B:F9:E5:10:E8:47:EC:25:F4:03:B5:5D:6D:5A:69:FE:58:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ade61511-8398-3e2e-b0df-4582caf49fa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:75:d8:26:fd:c5:d5:7b:48:fc:5d:9e:9d:a7:e1:05:2a:61:
         a0:6e:ca:2c:cd:31:51:c0:33:87:2f:16:df:87:c4:fd:a8:04:
         80:62:5a:8b:2d:95:1e:0e:1b:32:38:3b:ad:7e:91:d6:94:87:
         f2:f6:1f:20:79:99:d3:20:8e:6c:59:f8:31:90:4f:47:20:1d:
         d8:e5:7f:33:17:0c:a3:1f:52:20:8f:dd:46:98:1b:5f:f9:1f:
         d0:59:33:62:15:85:62:6d:a2:38:07:91:83:b8:b1:95:e4:81:
         55:09:4d:4a:6f:67:f0:01:18:55:1c:2c:8d:b0:ac:3e:c8:e0:
         c3:08:ed:a2:80:6e:88:a3:99:cb:47:39:48:e6:63:86:41:be:
         9e:03:7d:d9:94:5b:95:55:c9:52:0c:d2:a2:2d:02:50:a8:c0:
         0e:c9:02:ee:a0:a4:a4:ff:89:9b:22:fd:a1:06:c7:9c:46:88:
         84:10:67:ae:5f:5b:8a:4b:cd:4d:3b:0c:4c:a2:e2:0e:2c:3d:
         6e:5e:4d:13:7e:78:e3:34:0e:12:06:b5:73:dd:6c:cc:cf:4a:
         0a:56:44:15:8d:6d:90:19:bc:a3:0c:c1:e6:1c:88:3c:db:dd:
         b5:5e:4a:86:3a:91:5e:31:64:c7:bb:10:d3:f6:6c:53:c6:33:
         c3:b2:40:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:41:17 2026 by rpki-client