Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/3a63ce88-9856-3a25-b5e8-cd631a553f7b.roa
File:                     3a63ce88-9856-3a25-b5e8-cd631a553f7b.roa (raw, json)
Hash identifier:          G4wmnHN8feyzc680haOEUwceYBzWrmz2PfV9K3tgTPg=
Subject key identifier:   03:B2:11:6C:87:80:FA:68:89:E0:15:FE:0F:58:25:80:51:B3:78:C1
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584DD09051B99E7DCB475F6ED580
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/3a63ce88-9856-3a25-b5e8-cd631a553f7b.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     209181
IP address blocks:        198.145.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:51:b9:9e:7d:cb:47:5f:6e:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=900efd3c-fb92-4cbe-a221-d36020b5c099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c3:66:3e:b2:d8:ee:0a:82:0e:5d:ff:ad:38:
                    d0:92:7a:d3:69:07:33:ae:49:3e:c1:62:fd:39:67:
                    a8:6d:f2:98:d4:28:ac:51:ed:79:53:e3:58:78:d3:
                    bc:95:5b:49:ea:c6:4c:84:72:5d:24:ac:15:ed:8e:
                    b5:8e:e8:91:e2:21:2b:09:3d:54:96:bb:ac:10:92:
                    15:d1:a3:17:04:ed:56:0d:1b:97:f8:d5:c0:51:06:
                    72:a8:77:8c:a4:46:6a:26:74:cd:47:52:50:b4:58:
                    5e:57:5f:ac:7b:4c:07:78:f1:4d:fb:bf:99:4e:bb:
                    f0:88:47:5a:8d:8e:f0:60:81:fd:7d:03:fc:1b:49:
                    87:dc:87:8d:3d:46:23:8a:c6:ec:87:a5:e4:ea:89:
                    44:a5:39:6b:53:e8:ac:7e:63:2f:fe:1d:0d:db:f8:
                    68:61:27:ee:3f:38:20:94:25:e7:50:15:c2:d1:f4:
                    7e:ef:48:79:52:03:46:70:f1:04:65:97:3f:c5:0c:
                    35:a5:f4:a2:92:a5:d4:53:70:ce:f2:42:d8:57:92:
                    3d:97:7f:78:cd:79:51:fd:a0:e1:94:5e:b9:0b:f9:
                    03:0d:b7:a4:6d:6f:59:9b:08:09:c9:09:a2:ef:c9:
                    04:73:c4:b5:b6:6f:5d:b7:ef:db:2b:93:d6:05:e6:
                    fd:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B2:11:6C:87:80:FA:68:89:E0:15:FE:0F:58:25:80:51:B3:78:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/3a63ce88-9856-3a25-b5e8-cd631a553f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.224.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:b3:7e:4f:cc:30:a7:0b:e5:87:26:56:33:0d:ed:5c:79:3f:
         7c:9a:fe:f2:ee:47:8c:8e:6b:6b:3d:ce:cd:2b:81:3f:4c:c4:
         62:91:ba:7f:2d:ae:9d:c5:97:74:3e:a5:ab:46:b8:b6:99:a1:
         08:ae:e6:d1:1b:db:f9:9d:fd:ed:e3:03:ee:e5:b2:70:7b:35:
         7b:86:1a:f4:d7:d6:4c:ad:8e:ee:b6:99:29:c0:fc:80:be:94:
         26:ee:25:b1:61:be:cb:02:3c:73:86:5b:42:fa:e1:c4:3a:3c:
         9c:9f:18:bc:32:fb:b3:50:5e:03:bf:41:7c:d6:b4:fc:53:42:
         5e:d6:94:9d:31:bd:87:e0:2f:b1:e7:f4:24:b8:e8:3b:b6:66:
         a1:2b:a6:99:f8:e4:7f:a9:c2:7c:5e:2a:30:02:c5:58:a4:81:
         d7:6b:e2:97:62:9a:48:45:25:60:79:5b:56:a5:51:50:ac:3b:
         12:16:7b:4b:5e:b5:ce:60:9c:b5:7a:30:8c:e5:38:17:67:61:
         d9:c5:0f:50:ad:91:f4:45:0b:a1:c5:c9:07:9b:0c:a3:a5:b5:
         2a:f7:0f:27:bf:e3:63:1b:d2:aa:9c:07:60:e7:3a:9d:cf:45:
         5f:ca:b7:dc:72:4c:5b:50:74:23:84:e4:50:da:8f:b4:00:e6:
         03:9b:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:35:55 2026 by rpki-client