Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/a872c634-efde-3fa0-ad81-f82aaeee1307.roa
File:                     a872c634-efde-3fa0-ad81-f82aaeee1307.roa (raw, json)
Hash identifier:          HjWbOAWZoWc6HQkSaTRMofRzK+IwtdCQKnIHNwoE36U=
Subject key identifier:   61:8A:FC:28:1A:D9:E8:69:10:FA:CA:17:80:92:6C:7B:96:23:80:90
Certificate issuer:       /CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0
Certificate serial:       010D0C9F4328584E6F3A4595BA13954823924100
Authority key identifier: 58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/a872c634-efde-3fa0-ad81-f82aaeee1307.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     400133
IP address blocks:        198.145.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:45:95:ba:13:95:48:23:92:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1846ed-ef84-4eab-bfbb-1e94b6302ca0
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=ae2d5118-702f-4719-b28e-5621b969afba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:a8:4c:33:0c:b8:dd:3a:b6:c8:e1:83:64:
                    36:ee:44:b2:aa:63:05:b9:f1:46:92:1f:eb:e2:d9:
                    11:a9:3b:b7:c5:2e:15:e5:10:45:b0:aa:a6:1b:bf:
                    64:e4:aa:80:f1:c8:e0:7d:6f:44:ce:22:11:de:ba:
                    07:5e:82:74:8b:95:aa:14:0d:b4:3e:a2:57:3a:33:
                    27:c3:c2:19:50:c8:94:38:57:64:19:3b:a0:d8:93:
                    92:2a:31:6b:e8:14:dc:7f:50:b2:15:f2:e3:ff:d6:
                    a8:55:bd:8a:c5:b5:0b:81:e0:81:40:6f:4c:c4:07:
                    f3:0b:da:d6:5a:4c:13:06:52:0b:93:b8:5c:f4:59:
                    a0:ba:4c:4b:b3:32:ce:18:1b:2e:17:b2:09:7a:17:
                    aa:e8:58:51:32:3f:de:e2:c6:98:86:32:f6:6d:f9:
                    f3:a9:5a:8b:5d:74:47:68:ae:ee:49:6d:1b:69:3e:
                    80:9c:ac:5b:e1:1a:2c:cb:4e:3b:63:c3:f1:82:fb:
                    0c:93:3e:a9:f9:22:4d:a5:94:e4:a4:27:5f:e5:8b:
                    ba:a2:4d:84:70:94:f1:2c:e6:80:56:af:d6:fb:84:
                    88:b1:a8:79:c1:c3:00:63:58:8f:88:16:f1:46:e9:
                    c8:b0:da:2e:d7:ba:ae:c4:b9:bb:fb:8e:26:c2:60:
                    b6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8A:FC:28:1A:D9:E8:69:10:FA:CA:17:80:92:6C:7B:96:23:80:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/a872c634-efde-3fa0-ad81-f82aaeee1307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.crl

            X509v3 Authority Key Identifier:
                keyid:58:B7:67:25:AC:4E:39:47:F8:54:4F:6C:2F:20:C1:06:68:66:21:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0a1846ed-ef84-4eab-bfbb-1e94b6302ca0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.145.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:0b:8b:39:dd:99:6b:9d:e0:cf:7e:61:8f:84:00:d4:ac:f1:
         42:32:03:c6:2d:5d:76:de:6a:fc:d5:87:30:33:47:d4:a6:28:
         eb:1c:1e:2a:14:69:41:1e:ae:c7:94:f4:f0:ab:a2:cb:97:bd:
         c7:14:62:12:b2:1d:c5:bb:a8:e6:1b:8f:b1:07:1e:5e:3c:d7:
         77:88:62:2a:13:3d:65:9e:2c:e5:55:9a:e2:43:a1:52:02:e0:
         75:99:70:79:18:02:c6:b6:e6:16:bd:44:32:57:9c:58:c0:ef:
         a3:d6:a3:54:41:0f:5a:b4:6d:b0:78:ef:64:af:4b:ad:14:93:
         fc:71:d3:18:37:0d:7f:0d:23:31:a0:02:dd:f5:a6:79:e4:fd:
         2b:28:2b:86:c7:9f:24:74:6f:cb:34:84:43:08:1b:cc:0d:4c:
         84:cb:a3:41:fb:5e:ec:54:d9:3d:7b:09:b0:7d:81:d5:a5:a7:
         48:60:d6:a7:19:a5:70:82:26:12:76:86:1f:f5:28:1c:e7:2f:
         14:89:14:bc:ea:5a:d9:a9:bd:15:91:db:ad:75:50:d1:46:bb:
         05:26:4d:ab:21:4b:33:64:d9:83:9e:49:65:03:ff:f2:6f:12:
         0d:a4:dc:2b:38:cf:f4:cc:bf:9c:b1:8a:ed:7c:ab:52:c6:93:
         7b:c7:c1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:04:52 2026 by rpki-client