Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa
File:                     46e9f517-eb87-34a5-9509-23f3b4683a98.roa (raw, json)
Hash identifier:          JtWa+eo3389h8exXfOTT1PFQSuPhQ0b3PUkV/dGym88=
Subject key identifier:   51:AE:FC:3B:72:70:90:08:78:0D:88:EE:1F:98:BF:83:A2:A2:39:3B
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584D8EF5678A64F7BEC866C57600
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     32780
IP address blocks:        198.145.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:67:8a:64:f7:be:c8:66:c5:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=fb7d9613-819c-4abc-9023-fdc3efd31b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:79:81:51:8f:a8:af:5d:89:80:b6:50:a7:
                    00:e6:aa:ba:65:08:ca:8a:c1:31:a6:86:dd:d9:f3:
                    03:db:16:2b:77:1c:65:a7:2c:d0:3a:f0:e3:41:ce:
                    12:80:00:b2:cc:f4:24:c8:a8:c1:62:d1:95:94:5f:
                    83:cb:e0:14:61:f6:a0:e5:a5:b3:75:d9:74:e7:40:
                    22:1a:89:b5:fe:6f:e8:20:ac:44:ac:7f:c7:de:c5:
                    ed:2d:a7:02:07:b4:5c:a3:71:1a:b2:7a:ed:9d:ff:
                    52:c9:40:83:fb:a9:24:6f:ce:de:70:a9:15:7b:1b:
                    73:83:bd:aa:d1:e1:95:00:cc:86:13:d8:58:6e:8e:
                    c9:db:dc:6b:cd:86:f3:d3:cf:db:49:24:db:97:9b:
                    cb:5e:98:b1:d2:cb:78:c8:83:19:29:a4:85:d4:bc:
                    12:cb:1a:81:bc:85:df:2b:6d:59:e4:9a:41:2d:d0:
                    ae:3d:84:ed:a7:21:41:ea:a4:43:bb:2f:b8:df:7b:
                    6d:73:64:7a:27:71:e5:df:32:05:f6:70:51:99:e5:
                    8c:42:35:78:db:22:4f:b1:0d:52:ed:fa:4c:9c:6d:
                    89:4e:bc:80:33:b7:cb:bf:b8:2c:f3:ac:bc:d1:1b:
                    ad:8d:44:09:5a:64:fd:1a:68:95:6a:34:1a:ef:1b:
                    be:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:FC:3B:72:70:90:08:78:0D:88:EE:1F:98:BF:83:A2:A2:39:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/46e9f517-eb87-34a5-9509-23f3b4683a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:05:f9:4c:b3:f7:c1:2f:59:7c:df:90:b2:b3:8a:18:1f:30:
         0a:1d:be:ad:5f:90:19:18:d9:b5:6f:7f:8a:75:ee:25:8e:52:
         bf:e3:e3:76:bc:46:a9:d0:0d:0d:ca:db:b5:62:02:47:4c:22:
         19:94:f0:5f:70:ee:ad:ad:1b:5a:4a:68:4b:cb:e1:e6:c7:58:
         3e:e7:20:03:9e:cc:fb:26:6e:06:ca:22:bf:0a:ae:1d:ed:aa:
         2c:2e:a5:6f:fc:57:da:6b:d2:c4:a4:62:9e:1d:9d:54:2b:c4:
         90:83:67:c0:85:96:dc:11:72:27:02:d1:43:43:5d:a6:46:f0:
         2d:8a:b9:3c:4a:7e:6b:4d:c4:f7:18:5d:f4:f7:bf:47:6d:fb:
         63:24:2c:76:30:0f:ee:2e:a9:03:ab:27:42:80:eb:57:d1:3b:
         cc:a2:d9:b6:e6:30:0b:0e:fb:7c:a7:c4:07:23:8d:e4:81:80:
         fe:42:f1:9b:6c:10:49:06:f4:5c:ff:d3:47:4e:cd:40:32:48:
         0d:16:06:b4:54:65:98:4e:9b:0b:a8:17:be:37:f8:69:97:4e:
         b4:b4:48:d9:9a:f5:b1:a8:ba:bf:81:da:1c:bf:b2:a8:d9:a5:
         0a:1c:77:4a:2a:cd:4a:36:68:b6:f6:df:dc:c4:a5:3c:83:62:
         df:1a:d8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:38:05 2026 by rpki-client