Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa
File:                     2fb2f41b-197f-3998-95c5-b00e388ae797.roa (raw, json)
Hash identifier:          5davNl3iIdhp2Sz3Tqt4Or+fqVRXYcoVHugom6LMKKA=
Subject key identifier:   E3:BA:CF:4B:AB:00:59:0D:D3:C7:7D:B0:4C:9C:54:8C:91:41:EA:3E
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584E8B24EF598BE322B0D0ABC720
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     209181
IP address blocks:        198.145.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:ef:59:8b:e3:22:b0:d0:ab:c7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=69238d58-cc62-4425-911e-dace86827946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ea:8a:29:f5:94:82:c1:f8:02:fa:3c:88:ed:
                    58:b9:9a:d9:1b:05:cc:ff:58:58:0a:20:0e:76:5f:
                    b5:d7:23:13:07:40:20:7e:96:d5:ef:bd:d5:b7:a4:
                    05:86:4e:d2:b8:bf:08:d3:f5:e1:20:32:9e:2a:88:
                    3f:3b:d9:b2:8f:fc:3d:ce:9d:c5:4a:3f:23:11:74:
                    c5:8c:21:b0:90:62:e6:39:6e:72:da:aa:f8:b3:2f:
                    66:e0:08:d8:5b:99:01:f8:df:41:2d:ed:fe:ca:2a:
                    f4:f5:29:f8:a7:77:02:3a:09:87:fe:27:56:ed:1a:
                    4d:0b:3d:65:c0:ed:98:4a:86:c9:67:54:58:ae:96:
                    3d:b3:e4:fe:a5:61:1f:28:7d:74:ee:99:aa:b5:44:
                    34:0e:a5:a7:68:90:0c:ec:9e:46:59:8a:42:fb:2c:
                    34:e8:1c:5e:1a:83:1f:04:ea:cd:fd:ee:c1:01:f1:
                    85:46:46:7b:df:cd:c8:b4:da:c5:a9:a6:a6:49:9d:
                    96:06:99:4c:9d:6d:4a:a3:d7:c2:0e:bb:77:54:06:
                    92:77:32:b1:28:70:05:c9:7e:03:c9:99:63:ee:8d:
                    8c:dd:29:2d:fd:67:99:da:9b:2b:68:c9:7f:30:b9:
                    86:52:c7:01:52:5f:01:f9:e8:4b:13:47:7d:18:1c:
                    2e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BA:CF:4B:AB:00:59:0D:D3:C7:7D:B0:4C:9C:54:8C:91:41:EA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/2fb2f41b-197f-3998-95c5-b00e388ae797.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:16:88:cf:12:f4:01:27:a7:e4:b0:c0:8a:18:01:90:0f:17:
         bb:bf:71:c3:aa:e5:cf:80:8c:34:e6:94:b3:8a:9a:65:fc:d1:
         14:1b:6d:0f:dc:16:06:61:5f:53:89:ff:b2:17:bb:2b:39:b9:
         a0:6e:e2:02:53:28:04:9f:42:e6:31:f0:6a:62:72:4d:23:d1:
         55:0a:09:db:a4:0c:f1:89:f8:52:18:36:76:9f:f9:cc:31:da:
         e1:d6:b0:aa:4b:54:fb:d2:ac:97:0b:da:8c:c2:1a:ab:27:7c:
         a2:bd:14:ea:83:b4:76:4a:48:1f:56:c0:14:0a:be:eb:c8:4f:
         86:fc:bc:9d:de:c5:55:bf:4c:f1:6a:10:cb:83:a8:43:e7:2a:
         cc:29:7c:19:55:94:bb:6d:7f:29:49:94:dc:a9:89:54:ad:b0:
         23:d0:06:02:b5:44:d4:4b:9d:65:6a:73:77:56:90:55:13:6b:
         f1:85:e9:8d:a4:78:8f:bc:92:dd:55:28:ce:c1:5d:0d:67:0b:
         a9:6f:67:d0:d3:c2:c2:5e:46:56:bc:f6:d8:b0:bf:c4:e2:34:
         e1:af:be:48:75:a2:07:4f:70:65:52:d0:4a:34:12:ee:b1:e1:
         36:d7:83:8f:58:0f:c3:a2:cd:d8:d1:fa:41:be:76:1b:1f:6c:
         e8:be:cb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:58:38 2026 by rpki-client