Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa
File:                     958bfc7c-2636-382b-b67f-ff905538c406.roa (raw, json)
Hash identifier:          KvvcdYqTOwbVSAKKJ+Up3ooJ+e0ACNUXY1GNJw5oU54=
Subject key identifier:   B7:C0:79:87:F9:8C:C4:79:88:67:A8:C2:8F:88:80:36:3C:AA:58:56
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F4328584F4973E202075839B1C3551300
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     9009
IP address blocks:        198.145.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e2:02:07:58:39:b1:c3:55:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e20bfdfd-ca14-4dba-8e2a-95b7072d21ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:dd:34:77:17:6e:1d:0c:e7:d1:f9:8d:0b:ee:
                    04:58:5d:89:2a:b3:fe:74:34:a5:fa:82:10:87:b6:
                    9e:a2:8f:95:3d:93:1e:7c:04:13:a2:0b:13:b4:ab:
                    9c:57:df:90:77:f5:c7:5a:24:23:02:64:78:03:79:
                    20:d9:89:00:4d:f9:14:95:9f:a9:74:1b:e2:95:4b:
                    a5:fc:e9:0f:d1:cf:e3:bb:2d:68:00:cf:35:c5:c8:
                    eb:d2:71:17:94:c8:86:86:57:14:21:b7:a5:16:25:
                    57:7a:ff:c6:13:00:cb:52:06:44:1c:bd:2c:42:4b:
                    f0:2d:fa:95:5f:db:48:de:5f:92:ad:ce:00:21:2d:
                    74:17:d9:74:ee:d9:6d:42:de:d6:41:f3:98:0c:c4:
                    c5:80:70:bc:62:af:ab:a6:a2:42:25:f1:31:46:16:
                    78:22:fe:a6:9f:fe:65:85:a8:ae:87:a5:9d:cf:c7:
                    d9:f8:ad:89:9c:90:9f:ce:cc:43:73:4b:41:a0:00:
                    ea:2f:b1:b5:6d:6f:e8:ef:e0:e6:a9:ac:8c:ca:2e:
                    46:ec:98:cb:e2:1f:a7:da:61:be:f6:97:38:de:56:
                    bd:07:4b:9d:38:01:b7:6a:ea:5d:33:fa:b0:b5:06:
                    d1:35:bc:7b:65:b2:a3:c4:89:28:6b:b2:2c:e1:1b:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C0:79:87:F9:8C:C4:79:88:67:A8:C2:8F:88:80:36:3C:AA:58:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/958bfc7c-2636-382b-b67f-ff905538c406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:66:1a:e2:7a:43:f4:93:2d:83:a1:99:94:af:58:7d:79:b5:
         56:11:66:4e:7f:66:70:39:8d:27:ef:34:d2:3d:dd:b3:ea:e7:
         12:78:aa:0e:00:9b:69:24:db:80:08:52:46:41:c1:6a:f0:11:
         8a:05:d4:2e:af:55:ca:27:24:0a:0e:16:5c:ea:0d:af:9c:21:
         1b:bd:34:65:80:dd:e7:37:57:c9:50:2b:e9:f2:e6:ea:c5:f3:
         6b:31:81:7c:44:a3:4f:f7:9a:63:c3:c3:21:67:f4:32:3c:b0:
         d8:9d:d1:b8:f6:74:2a:29:5a:30:94:6e:19:40:ba:b4:b1:3e:
         90:98:fa:62:18:a8:91:57:71:83:ef:7a:84:60:7b:4d:06:ad:
         64:18:66:38:3d:f9:f5:ab:ed:c6:27:4f:e1:f9:ba:4a:c1:5c:
         4c:47:7c:51:97:04:84:5d:5c:a4:c1:50:ea:5a:54:c7:d8:4b:
         f1:10:c8:2c:f6:a6:b9:9d:3b:15:65:44:5a:f5:1f:2a:a4:f5:
         c7:fb:a9:6d:3a:ce:a4:9b:a2:6c:d0:63:1e:61:ab:98:8a:99:
         d1:55:38:52:2b:9d:f6:77:4b:35:c9:3a:ed:80:55:84:2f:15:
         1f:a0:e8:e9:d3:0f:67:8d:ab:7b:98:1f:16:a5:50:0b:3c:2f:
         85:c3:6c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:51:51 2026 by rpki-client