Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa
File:                     f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa (raw, json)
Hash identifier:          uAhMZhWMgZ+5pMoSlCzQXYMTxw/Kj/q1+lEO7aLzSTw=
Subject key identifier:   33:E7:18:7F:AB:89:92:D1:E4:E3:3B:CA:76:78:29:DB:05:B8:7C:17
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584F49770A6A812EA68BDEFF3C50
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2559
IP address blocks:        198.217.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:0a:6a:81:2e:a6:8b:de:ff:3c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=1e660bb6-b4c0-4ec7-ba9a-b39f4d3a665b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a4:e9:29:85:56:e9:e9:26:3c:79:43:1c:ab:
                    fc:33:78:b1:be:44:5b:f7:2e:01:53:da:82:a1:06:
                    85:fd:ee:42:08:a9:53:b7:b7:87:fe:bf:86:25:51:
                    1e:c7:76:5e:06:e6:39:7c:85:7d:7d:e6:70:60:66:
                    2e:00:6d:b4:99:af:60:83:82:03:04:fe:03:5b:71:
                    58:0e:90:ce:04:33:c5:c5:4c:2b:54:bf:00:1e:17:
                    32:2f:90:c2:b8:b7:e5:d2:d0:b5:4e:df:ed:41:e6:
                    55:96:c5:22:f7:3f:52:80:c8:c3:9e:28:7e:d7:85:
                    9c:67:40:90:8a:24:25:74:6b:8f:d1:d6:28:23:70:
                    c1:af:5f:5f:a2:2b:e9:da:9c:26:f8:bd:1e:dd:d4:
                    64:c8:af:78:cb:08:67:55:ea:6e:f9:b4:0e:52:06:
                    0d:c9:19:8c:0b:4e:8b:eb:ad:ac:8b:68:05:25:a2:
                    b3:74:b7:62:2d:db:9a:b3:51:ad:89:a9:e4:9c:8e:
                    ea:f7:b6:c4:5f:ed:90:27:1a:4e:34:3b:5f:51:a7:
                    cc:49:f0:4d:99:93:1d:15:3f:b0:6c:bb:9a:5d:ce:
                    0f:bb:8f:ba:ce:02:96:30:97:9c:09:da:1f:14:54:
                    83:bf:95:c2:db:4b:be:4f:6b:9c:f4:44:66:3f:fc:
                    da:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:E7:18:7F:AB:89:92:D1:E4:E3:3B:CA:76:78:29:DB:05:B8:7C:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f7c2d0bc-7fba-3c1a-b69a-e8c0639810bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:89:da:a0:58:55:21:e6:43:2a:99:83:a7:ad:bc:9b:e6:a6:
         d9:fd:26:2f:a9:96:3f:ae:66:09:c8:81:13:89:c8:39:fd:d1:
         6d:3b:00:6a:aa:88:9d:67:ba:8b:61:80:38:f4:bd:26:da:37:
         8b:27:f2:d8:41:4c:c1:43:79:30:e9:ed:74:ed:91:ba:ac:68:
         4f:62:c4:bd:3c:45:e2:0f:c7:57:ec:d2:e4:e0:d1:5a:33:61:
         06:c1:d2:fa:41:1b:22:16:a0:87:a1:3b:8d:4b:8f:e3:9c:e6:
         6c:73:ab:7c:d1:a1:73:45:e2:74:fa:9a:c4:81:2e:2d:ec:f1:
         7c:cc:da:11:a5:f6:a8:dd:eb:41:0e:6b:d6:63:85:00:36:56:
         a7:70:94:d1:19:ea:3e:eb:fe:4f:39:71:d7:90:49:e3:69:c8:
         bf:c9:26:6a:c8:16:bd:29:19:a7:d2:58:6f:41:cd:6d:4b:08:
         08:17:e1:14:c0:23:44:13:d3:bd:80:f4:40:25:5a:3e:f1:da:
         80:3a:ca:1a:76:d3:09:af:54:a0:4b:86:8b:49:de:8f:0b:0f:
         d4:16:0a:b3:3e:8a:e0:5d:25:be:07:08:b3:b8:ae:fc:2e:e4:
         db:96:63:a6:ad:b0:a8:a5:4c:83:28:2c:79:6c:a2:cc:f9:21:
         41:1d:88:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:19:58 2026 by rpki-client