Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/7187fa6a-6221-36ae-bc8d-79bf0dcbda96.roa
File:                     7187fa6a-6221-36ae-bc8d-79bf0dcbda96.roa (raw, json)
Hash identifier:          a6/WjVk5D2Tr7N+MR/KIEYx2lwy7YDGVxDxX2uOV0MA=
Subject key identifier:   2B:E3:13:25:D2:7B:B2:45:33:64:1F:47:BB:EB:76:6A:B9:15:88:A5
Certificate issuer:       /CN=c4a7bfa6-ee21-4973-98bb-12cc8fef1c68
Certificate serial:       010D0C9F4328584E86F4E4DB5C1F571A09116340
Authority key identifier: EC:D8:32:2D:D6:3F:C6:8A:64:40:4C:7F:EE:95:76:FF:42:E5:BA:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/7187fa6a-6221-36ae-bc8d-79bf0dcbda96.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     3356
IP address blocks:        198.135.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:e4:db:5c:1f:57:1a:09:11:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4a7bfa6-ee21-4973-98bb-12cc8fef1c68
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=99c92e42-b5eb-4cbe-bb4e-8e7f58f5529c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e0:bb:2f:cc:51:3a:e3:63:80:6a:41:d5:b2:
                    6b:37:1c:2f:b8:45:ea:07:ed:a8:45:54:75:08:23:
                    22:3f:2d:c1:37:2b:cb:94:35:c3:dc:03:ca:6a:2e:
                    81:9c:20:d7:9b:06:f1:cb:f4:c3:40:7e:78:48:2d:
                    5f:de:47:b8:c4:ad:2c:a0:7e:f0:2b:2f:f6:aa:e8:
                    94:77:cb:c5:7e:c9:9c:af:33:68:7c:ec:f7:66:af:
                    a9:8b:3f:06:28:a3:26:37:d9:f0:bf:ac:31:d1:f5:
                    95:76:3d:77:9f:97:53:58:68:bb:75:e9:d9:a3:24:
                    54:3d:be:1f:ac:a5:56:74:4f:05:17:f6:24:da:08:
                    e8:ad:42:b8:17:42:21:44:b0:63:c0:86:10:aa:e3:
                    aa:d7:c1:1f:c2:15:f5:28:b2:77:41:89:79:5b:d5:
                    9d:b8:82:c9:42:d6:19:6f:5f:2e:d7:36:29:f1:f7:
                    38:53:4d:32:b2:89:3a:fa:b4:a6:49:4d:77:d3:06:
                    f0:4b:42:c4:21:7d:e2:0f:dd:38:03:41:63:07:19:
                    c3:e9:27:35:0c:56:98:f4:b5:6e:c2:34:26:76:f0:
                    22:64:56:d5:e5:da:9c:0b:8f:ac:b1:c7:2f:f0:ad:
                    6f:f5:ed:5b:63:fa:5d:cc:37:94:7e:e8:06:a7:03:
                    6b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E3:13:25:D2:7B:B2:45:33:64:1F:47:BB:EB:76:6A:B9:15:88:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/7187fa6a-6221-36ae-bc8d-79bf0dcbda96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.crl

            X509v3 Authority Key Identifier:
                keyid:EC:D8:32:2D:D6:3F:C6:8A:64:40:4C:7F:EE:95:76:FF:42:E5:BA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c4a7bfa6-ee21-4973-98bb-12cc8fef1c68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:00:47:c8:9f:5e:68:c4:35:85:79:0f:58:93:c7:d7:76:
         8e:ed:a1:8e:8e:e6:a5:78:7c:9a:ec:13:92:66:5b:1c:11:01:
         cf:dc:38:2c:58:9a:6e:de:56:76:a3:15:d5:79:7b:9e:cf:b7:
         b5:b4:49:ab:20:64:1e:f4:57:1f:82:ca:bb:c7:0f:96:42:15:
         a9:61:7e:8c:76:bd:93:de:b6:f6:d8:3d:db:bb:65:ac:90:65:
         4b:1f:81:d4:54:ee:31:19:2f:9f:99:96:99:ec:3f:fc:b6:ce:
         e3:81:6a:00:10:ce:23:41:cc:4c:2d:31:4e:8c:02:36:47:f5:
         32:6f:48:cf:47:dc:35:30:e2:c1:2f:b8:de:da:f1:6c:db:38:
         88:c7:a1:2a:34:65:51:1d:d2:ed:6c:be:df:20:a6:74:73:9b:
         7b:37:00:95:b6:d4:6a:90:83:79:81:16:8b:98:d5:49:ee:bc:
         5e:be:49:c7:44:9c:b9:18:c2:fa:0e:9a:9f:d2:77:2f:cd:cf:
         be:0b:7a:47:9d:8d:52:5f:5c:0d:00:2e:08:0d:5f:bf:05:d7:
         cc:2e:3f:8d:2f:d0:c3:65:92:dc:2a:e8:b0:ff:68:00:2c:74:
         fb:4a:cf:30:21:b8:10:55:45:b1:4b:2a:eb:89:06:35:f9:70:
         0b:69:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:14 2026 by rpki-client