Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/42c47900-5457-3149-beac-2366a6171933.roa
File:                     42c47900-5457-3149-beac-2366a6171933.roa (raw, json)
Hash identifier:          g9RalMd8vxVlK2Qm/F7nivkKbFZPcbfpxeQAuNTGuog=
Subject key identifier:   78:2A:51:98:18:9D:49:EF:10:AA:F6:F6:96:98:2A:62:A1:9C:1A:69
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584DAF101690E640AE908681BB00
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/42c47900-5457-3149-beac-2366a6171933.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     9009
IP address blocks:        198.145.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:16:90:e6:40:ae:90:86:81:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=5518db19-7d5b-451a-bd4f-91ef125dc8eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:00:66:40:18:ab:e7:f6:4b:1a:bf:98:2f:
                    66:ec:b8:97:4b:f7:69:30:65:48:1d:a8:05:c1:fd:
                    5f:1a:d2:ac:6e:d7:b4:de:3f:de:2f:19:ff:c2:72:
                    9c:51:1f:19:a8:2f:fc:db:78:ad:86:eb:cc:1d:8c:
                    14:6c:0c:e6:53:3a:d6:5e:cf:90:cc:d9:75:1b:91:
                    92:25:6c:46:f7:fe:85:8a:62:35:e2:75:4b:cd:e6:
                    a4:f0:a7:59:9f:5c:fc:c7:88:ef:1e:2e:e3:93:eb:
                    04:16:ef:aa:9c:e7:e9:fa:ff:6b:7e:9e:30:27:f6:
                    36:d5:64:0d:71:a6:b2:27:7d:dc:5d:d8:9a:43:6e:
                    a5:a7:31:3e:a2:b6:1b:d2:be:d3:f4:c6:98:a2:e5:
                    20:70:46:7e:a5:1d:89:a9:b0:e4:c3:d3:a0:05:60:
                    15:c4:93:7b:e3:11:30:eb:50:b1:da:4a:db:e5:68:
                    e3:ca:b5:b4:63:26:6e:2f:71:6a:48:c1:9c:81:a1:
                    a9:f0:b9:7b:3e:d1:21:70:46:69:7d:db:20:62:e4:
                    74:18:63:90:24:00:f3:40:cc:d2:b6:1f:49:6f:96:
                    97:52:67:7b:92:b8:fc:d2:65:99:36:89:db:01:cc:
                    64:f5:79:3e:56:98:2d:83:d9:a0:02:36:1a:3c:81:
                    c8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2A:51:98:18:9D:49:EF:10:AA:F6:F6:96:98:2A:62:A1:9C:1A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/42c47900-5457-3149-beac-2366a6171933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:b7:b5:bf:d6:3d:a5:d3:ee:cd:48:e8:41:df:92:ca:81:94:
         58:97:3d:8e:a9:16:14:dd:6e:b6:b5:8b:6c:d9:b1:f8:06:6e:
         71:b9:cd:a6:1a:a4:ad:71:b0:11:26:15:af:aa:b0:26:f5:5c:
         48:c1:ec:b6:76:8e:02:b2:8e:8d:13:9e:3d:28:9d:b1:bd:06:
         99:f5:bd:dc:0e:02:bf:e4:b8:5f:36:52:23:b1:f1:ff:70:39:
         45:ba:2d:b3:f5:d9:ab:e5:ce:31:f0:06:78:d4:31:64:86:cd:
         18:0d:ca:11:eb:39:3c:4b:53:ab:d5:9f:b5:74:6e:0e:98:af:
         8b:04:05:33:76:61:b6:8a:43:5e:55:44:f4:ce:33:c1:67:97:
         b5:51:2e:31:73:22:7c:4e:7c:8b:df:0e:a6:04:e3:14:0b:da:
         0f:46:77:c0:2a:8d:32:87:69:d2:08:3f:30:45:8f:83:59:86:
         24:8c:39:a2:24:95:9d:38:56:31:6c:b2:2b:44:7a:8d:b2:00:
         ef:64:f3:b2:de:b3:4c:e1:26:a1:7d:9d:81:17:0f:a6:55:32:
         e0:ec:21:62:b7:4a:41:1c:35:84:49:e2:04:54:9c:27:a8:1b:
         b1:99:17:66:88:eb:68:12:d8:73:5c:df:ea:90:1d:cf:70:2e:
         cd:9e:f0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:43:22 2026 by rpki-client