Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa
File:                     edf7a120-a151-375d-869c-0b92a25fccec.roa (raw, json)
Hash identifier:          9asrRxW3iwR+f7l/9pJW9IYmnMmKbeujG0vOpPBdLOE=
Subject key identifier:   60:2C:90:E7:27:89:49:35:3B:61:11:C3:D8:D4:FD:AE:E7:8B:19:4A
Certificate issuer:       /CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
Certificate serial:       010D0C9F4328584F2D87C48394A503507D1A9D00
Authority key identifier: A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     55101
IP address blocks:        198.97.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c4:83:94:a5:03:50:7d:1a:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8031642d-35b5-42ec-8bec-18b7bcfe2bd8
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=cae68683-396c-4548-9a3e-f1ad671e2063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:79:67:c6:1b:f9:32:db:bd:15:f3:e4:86:
                    c1:ee:89:87:fb:d8:e3:b9:23:a0:3f:bb:95:7f:a4:
                    36:88:d8:e6:2b:4e:2f:ab:4f:30:18:31:9b:ab:02:
                    5b:31:f1:ac:79:17:a4:d0:b7:1f:e4:7b:50:3c:c4:
                    8a:f2:79:bf:c0:0e:5b:94:23:73:58:2e:15:78:f6:
                    a2:59:7c:a9:f4:ab:dc:9d:f4:dc:0a:24:20:be:99:
                    fe:33:f8:d5:58:4c:0d:df:f7:ac:4d:85:98:3e:73:
                    dd:46:4e:02:be:82:ad:b3:8f:62:0c:44:8a:e3:29:
                    64:52:bd:86:2d:c9:67:f2:cc:6d:d0:1b:eb:64:ee:
                    5f:fc:74:0d:a1:d6:16:9f:73:ce:7b:ba:04:b1:06:
                    76:7b:d4:82:c5:a8:6d:79:ee:f8:49:84:c0:57:8b:
                    fa:84:a4:fb:ae:ef:3f:56:ab:dc:8c:97:23:e0:09:
                    47:03:9e:50:c3:3f:6a:e8:95:e2:e6:ae:2a:9f:52:
                    ad:b9:85:a9:31:30:bd:f6:64:2c:d7:bd:11:c7:81:
                    d4:ed:bc:17:81:d5:c7:38:b5:4c:32:24:82:5c:58:
                    e7:fc:a6:31:0c:8e:1f:db:29:52:78:3e:0b:9a:62:
                    ba:dc:45:0a:61:20:e3:5d:d2:fc:d3:fb:6a:e8:d8:
                    91:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2C:90:E7:27:89:49:35:3B:61:11:C3:D8:D4:FD:AE:E7:8B:19:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/edf7a120-a151-375d-869c-0b92a25fccec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.crl

            X509v3 Authority Key Identifier:
                keyid:A6:A5:1C:03:54:44:75:D8:E8:EF:92:A3:39:97:27:79:C5:07:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8031642d-35b5-42ec-8bec-18b7bcfe2bd8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.97.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:ab:8a:cf:e4:ac:be:b9:8e:2f:d9:28:8b:ca:b7:95:ce:
         86:17:64:e8:02:d5:cf:4e:53:a0:84:fc:f4:16:c6:7b:fb:59:
         e6:60:9c:c0:47:5d:df:36:33:a3:b6:7b:3d:21:32:ae:51:4e:
         7a:66:69:2b:19:c6:54:db:7e:79:e1:53:f4:3f:f1:fc:5b:09:
         52:70:87:90:c2:7a:24:7f:0c:30:3c:b4:c6:54:94:57:d3:42:
         68:f5:1f:c5:8d:5a:38:6f:9c:18:92:de:76:5d:72:58:72:22:
         fd:f8:ad:85:72:87:f3:c7:d0:fd:6a:34:fa:54:e3:23:7d:66:
         e3:6b:a1:70:ad:38:c4:2f:96:7d:17:e3:eb:88:f3:9b:0a:08:
         a1:e4:74:e7:c7:a4:0c:6a:36:62:7a:bc:26:4c:6d:b9:26:93:
         eb:16:88:a9:7c:03:87:2e:55:ad:5f:33:f3:9a:20:cd:bd:dd:
         24:4d:4a:c5:94:16:1f:da:bf:76:3d:31:12:4e:2c:9d:ab:e9:
         93:e2:17:7d:82:09:19:5a:04:b5:a7:d6:7a:71:c7:e8:08:e0:
         3a:a8:e2:c0:02:84:a7:0c:fb:ca:09:8f:ec:e3:f0:d0:51:c5:
         f6:d0:1a:8e:23:c9:d1:c2:21:63:e2:84:fe:e6:03:94:d6:18:
         47:18:d8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 17:13:17 2026 by rpki-client