Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/1cb2f777-c7bf-3b98-a955-fe6cd67a9907.roa
File:                     1cb2f777-c7bf-3b98-a955-fe6cd67a9907.roa (raw, json)
Hash identifier:          LIHAMXnFVgwEmR5DAb1kgBDPUMyONrSaGOHpGb0ACdE=
Subject key identifier:   84:07:12:31:AB:23:76:A3:61:C5:EA:31:AE:30:D3:7E:B7:2C:93:96
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F4328584F49733C6F1F29AE48BD7D6EC0
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/1cb2f777-c7bf-3b98-a955-fe6cd67a9907.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        198.97.212.0/24 maxlen: 24
                          198.97.213.0/24 maxlen: 24
                          198.97.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:3c:6f:1f:29:ae:48:bd:7d:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dc7fef06-7c99-44b9-b2ce-95e5357afe65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6a:a1:26:2f:96:07:f3:54:97:ab:35:a9:ff:
                    68:2f:5d:6c:8c:eb:64:c9:4f:f8:b7:b7:e7:a8:a1:
                    af:df:ef:f4:3f:0d:8f:9f:2b:74:21:b0:e5:e6:b3:
                    9e:30:07:ff:e0:37:7a:ad:ca:db:e6:bd:74:b6:22:
                    ea:0e:e5:6a:63:c9:a8:79:2c:6a:f7:56:cb:f0:5f:
                    21:05:2a:53:fc:14:f4:5c:f3:37:7b:47:44:a4:00:
                    43:44:95:e7:ea:11:44:fa:58:dc:7e:be:01:74:ec:
                    96:c9:9d:14:3e:98:76:d8:a7:d9:52:98:e5:7a:f4:
                    e4:e4:25:0f:30:4d:19:31:57:07:16:b3:1a:b3:3b:
                    a8:6d:06:37:95:5c:bb:a8:d4:5b:72:53:16:8a:0d:
                    26:c8:d5:fb:32:88:bb:f9:4b:75:23:e8:8d:79:18:
                    19:4e:74:e6:ed:03:d1:66:eb:97:8d:91:d5:3e:e5:
                    9b:ec:32:50:e4:2c:20:bf:c9:a6:15:f9:4e:57:db:
                    02:95:28:27:5d:92:1e:3c:2d:6b:b8:e1:2d:60:21:
                    19:6c:59:74:d1:0f:3b:a5:e6:d3:f4:92:de:ea:0f:
                    79:70:e8:0e:eb:9a:8a:be:e9:10:94:6e:ea:f4:ae:
                    04:ee:ea:0c:07:8b:d5:71:28:b5:b8:28:fa:1c:99:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:07:12:31:AB:23:76:A3:61:C5:EA:31:AE:30:D3:7E:B7:2C:93:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/1cb2f777-c7bf-3b98-a955-fe6cd67a9907.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.212.0-198.97.214.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c9:68:ee:de:8b:3e:83:67:d4:91:30:39:03:4b:0c:39:c9:
         9e:ae:11:7b:ca:a3:b5:09:26:1d:db:b8:dd:e2:5a:25:45:ac:
         8c:2c:7f:6b:22:e1:b8:f3:32:67:be:4b:66:84:93:ca:37:f5:
         6e:e5:fd:27:87:60:e3:d4:4c:1d:d3:e3:d9:58:e9:67:66:90:
         d3:cf:3b:c7:3a:8c:05:ca:39:68:26:41:d2:f4:d0:30:93:ec:
         59:30:db:c0:f7:a2:71:cf:d2:af:45:ae:d9:9a:f3:1a:c0:6b:
         55:6c:8e:8e:62:48:60:8a:1f:cc:6c:64:a1:3b:85:e8:10:08:
         7a:08:a8:d4:84:92:21:fc:5c:6c:cd:64:5d:c2:60:ca:4b:c0:
         25:5c:6c:cb:ec:a5:10:24:2e:f0:14:e8:35:d2:c1:ec:4e:5a:
         d3:8d:0d:50:88:2d:4d:b4:c1:3d:66:77:06:97:73:35:8c:f8:
         c1:c5:59:96:a2:2b:0e:6d:5d:0a:4f:5f:e2:1c:22:a7:fc:b3:
         24:82:21:8d:07:59:48:58:cb:6c:8c:69:90:56:f6:8f:33:5c:
         75:70:6f:be:fd:67:d6:e2:4d:f8:d3:d6:09:9b:70:fd:59:db:
         66:c5:01:df:8c:3b:fc:69:40:71:41:a3:86:92:e3:3f:94:16:
         b1:b1:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:28:37 2026 by rpki-client