Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/0f3f67fb-23be-338f-8572-dab1184548e2.roa
File:                     0f3f67fb-23be-338f-8572-dab1184548e2.roa (raw, json)
Hash identifier:          jgoWpbxIWgOQd/v0hBut2yhwe2hRVzXY/o+MajwdB34=
Subject key identifier:   B7:71:89:A7:3D:A5:A7:E9:E5:E5:72:43:EE:75:42:13:02:25:CA:75
Certificate issuer:       /CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
Certificate serial:       010D0C9F4328584F506D490E63A31AFFDBA05F80
Authority key identifier: D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/0f3f67fb-23be-338f-8572-dab1184548e2.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     14537
IP address blocks:        198.37.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:49:0e:63:a3:1a:ff:db:a0:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22dfbc20-b48d-4ad3-9ada-aaa1a88570dc
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=0b4f9a48-c9d4-4ba8-9d6c-c8323a88eb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:af:99:40:8b:a8:11:a9:ac:ce:08:aa:4f:45:
                    6a:ad:ca:a6:77:c9:48:72:d0:72:b3:47:89:7c:ff:
                    0f:30:b5:61:27:24:b7:ea:9a:96:ed:31:d6:e8:9b:
                    b2:eb:be:7b:4b:46:b8:d1:f9:2a:37:4b:5f:b6:2b:
                    d3:12:26:48:38:56:78:e4:d8:c9:cc:d0:1b:25:b3:
                    80:9b:c8:08:01:f9:b6:17:86:79:13:28:55:b6:d2:
                    15:43:cd:c7:58:57:e8:c7:7a:b7:2e:dc:c1:46:db:
                    b1:41:dd:34:47:f7:cb:04:dc:01:e7:e6:67:f0:33:
                    32:74:3b:8b:71:d5:12:93:e2:6f:58:91:f3:8d:38:
                    6f:9f:2d:6a:38:17:42:83:b4:8c:0b:12:f3:51:1d:
                    d1:e3:15:f5:09:88:fb:76:fd:b3:bf:78:58:02:73:
                    4f:01:59:e0:eb:4a:0e:f0:74:46:c1:12:12:69:c5:
                    9a:86:8d:f5:21:e1:6f:49:be:7d:31:72:3e:c6:2d:
                    ef:9e:78:dc:ef:7b:c6:ec:91:a5:71:a9:f1:a3:81:
                    f9:e2:e4:fd:61:4f:b0:de:4b:09:2b:12:9b:7f:66:
                    99:a0:cd:33:0c:4f:9b:08:d6:c1:7e:29:1b:7f:b7:
                    19:40:ca:b3:da:89:e9:80:ec:ea:a7:2e:f1:6c:84:
                    d9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:71:89:A7:3D:A5:A7:E9:E5:E5:72:43:EE:75:42:13:02:25:CA:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/0f3f67fb-23be-338f-8572-dab1184548e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.crl

            X509v3 Authority Key Identifier:
                keyid:D4:24:69:AB:E4:65:51:C8:5E:22:B8:EF:B2:A7:BA:52:F1:62:65:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/22dfbc20-b48d-4ad3-9ada-aaa1a88570dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a2:85:58:a7:76:8b:ac:55:96:33:50:7b:75:3d:98:c3:56:
         6e:7c:d8:85:2c:ea:1f:9a:0b:35:4b:e9:fe:a7:6f:f9:81:62:
         7e:54:3e:fa:59:e3:c8:40:4a:b7:ff:21:60:41:e1:00:32:4c:
         2e:18:5d:f2:27:cc:31:0e:69:f1:73:25:3c:09:0f:33:2a:32:
         19:3c:b1:3d:b2:62:e4:07:7e:54:8b:4e:b7:d9:57:46:95:91:
         d3:9c:68:a7:9f:dc:b6:2c:8a:f0:ff:9c:30:57:f5:87:75:b8:
         64:74:47:0c:ca:d9:1d:1b:f8:57:10:a7:16:bb:73:92:e0:97:
         42:99:9d:03:d8:1d:fd:6d:04:c3:0c:11:2d:70:15:57:80:64:
         f1:66:67:5e:14:cb:77:63:3e:b1:64:5e:66:e2:df:fa:dd:ca:
         f1:c7:ea:29:53:69:d4:50:28:c6:d2:2d:d1:5c:6c:8a:ce:66:
         52:a4:a6:6a:57:e6:e9:d7:86:b0:3d:0c:8b:96:12:54:1a:7f:
         52:f4:2e:cd:b4:12:23:6a:d5:3a:d5:aa:f9:ee:74:d9:86:22:
         e8:ae:cb:66:92:c7:cd:92:af:cd:8e:e0:1a:bb:8f:ca:7a:4b:
         e5:ec:3e:7a:40:3a:9d:66:8c:c8:a4:1c:10:27:8e:67:2e:12:
         6e:df:7a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 15:11:26 2026 by rpki-client