Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/306fc983-244c-33e2-8c4a-51231d217125.roa
File:                     306fc983-244c-33e2-8c4a-51231d217125.roa (raw, json)
Hash identifier:          LZs98iZQ6i0vtxJqgelVUYSi9VGrMhjaneR/mUp49lM=
Subject key identifier:   0A:E4:E8:3E:56:5E:54:F5:A2:5D:9A:E9:A4:1B:32:F2:07:ED:B8:94
Certificate issuer:       /CN=64b51de8-9235-4199-90c9-93aee2696fab
Certificate serial:       010D0C9F4328584AE89133CF6E408F0A280D4280
Authority key identifier: 09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/306fc983-244c-33e2-8c4a-51231d217125.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     396982
IP address blocks:        199.47.26.0/24 maxlen: 24
                          199.47.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:33:cf:6e:40:8f:0a:28:0d:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64b51de8-9235-4199-90c9-93aee2696fab
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=473c70c3-3fee-42d8-85e7-1c6b6f6cad85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7c:de:9d:17:c5:7b:23:21:e2:5d:8c:ea:6d:
                    0e:d9:2f:bb:8e:27:a8:67:60:78:95:ab:1d:36:c2:
                    a1:6f:70:f6:ae:87:bc:75:dd:88:21:cb:01:5d:48:
                    d8:f3:f9:b2:b1:75:a9:9c:ad:c9:fa:31:85:43:f3:
                    22:b2:3c:51:ca:7a:1a:54:ef:d6:89:41:6c:97:fa:
                    fe:b3:02:e5:e5:4e:e2:36:94:f4:05:96:2c:bf:82:
                    2e:e5:f6:4a:9e:81:4b:37:0e:56:98:75:70:f8:d2:
                    39:2b:0d:58:2f:82:44:09:47:4a:93:54:d6:f4:b1:
                    b8:e0:da:6f:c2:cd:c5:ad:c8:1c:34:29:b7:fd:2e:
                    9b:56:6a:cc:46:44:b7:0b:09:d0:77:48:e2:f9:c7:
                    fd:f5:5d:5e:a5:69:cb:7e:22:f2:5f:36:d0:02:3c:
                    e6:7b:1d:46:77:eb:dd:cf:70:32:66:90:ee:fd:95:
                    b5:07:1b:97:43:c8:f8:a7:61:a6:cd:90:51:c5:b9:
                    1a:fd:0a:c5:bb:d1:09:82:a3:68:72:cd:d1:3a:b9:
                    51:95:c4:7d:87:d7:29:94:9b:4e:6f:66:dd:92:9f:
                    63:94:12:9a:17:06:a3:ef:f2:07:80:cf:7d:c2:17:
                    89:21:7c:35:eb:06:6d:fa:c4:d8:28:84:36:87:36:
                    b8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E4:E8:3E:56:5E:54:F5:A2:5D:9A:E9:A4:1B:32:F2:07:ED:B8:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/306fc983-244c-33e2-8c4a-51231d217125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab/64b51de8-9235-4199-90c9-93aee2696fab.crl

            X509v3 Authority Key Identifier:
                keyid:09:F7:2A:B4:C4:52:37:E8:54:AA:62:74:BE:F4:C4:E2:9B:C2:B4:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64b51de8-9235-4199-90c9-93aee2696fab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:fe:27:33:82:b0:f9:0b:e9:b9:dc:31:54:1b:28:9f:03:ce:
         e5:75:33:6c:ca:be:7f:37:39:98:66:67:52:0a:fa:0e:a4:b0:
         12:36:c5:b6:9b:b8:e9:a1:8e:f7:61:71:70:14:51:54:76:b8:
         25:41:2b:27:f2:76:e4:6a:a4:bc:66:5b:70:53:0b:d3:58:86:
         18:b2:a4:8c:70:c9:df:05:c2:03:38:e7:16:69:bb:3f:11:ac:
         a6:f3:9d:ae:f2:4b:57:1e:9c:9b:bb:19:df:c4:86:a6:84:51:
         35:82:04:c9:63:59:64:76:ec:1d:40:70:46:00:55:da:fd:69:
         cc:d5:65:b5:8c:7d:91:c4:db:9c:54:5f:85:42:f1:59:b6:c5:
         9a:8f:68:2e:1e:38:78:7a:f4:ac:5e:f1:0b:87:c8:ed:00:da:
         09:c5:e6:3c:f0:b5:27:0c:2e:3d:4e:3c:b4:d6:9a:f3:09:a2:
         7b:a2:a9:ab:69:19:aa:99:71:a9:4c:fc:1a:78:f9:4d:17:94:
         6f:84:c7:47:d4:44:a7:b7:26:d9:81:8a:ef:99:96:c6:a7:c4:
         7a:71:2a:c5:0d:d9:c7:c6:db:54:dd:24:b6:43:ba:24:00:9c:
         95:eb:35:26:f6:47:a0:ed:65:c4:11:b5:15:dc:e2:2a:a5:6c:
         a0:1a:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:14:03 2025 by rpki-client