Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/7538a78f-81aa-3146-b351-3bc94d0194df.roa
File:                     7538a78f-81aa-3146-b351-3bc94d0194df.roa (raw, json)
Hash identifier:          BbSXelOTOf24Z2SWGLt53jkgABPdCwON2gUMc75y1pM=
Subject key identifier:   8E:AC:2F:EC:F4:D1:39:5D:56:AB:3D:88:74:2E:8F:79:DE:18:C0:56
Certificate issuer:       /CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
Certificate serial:       010D0C9F4328584F4C3D6141730C42BDC172FD40
Authority key identifier: 81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/7538a78f-81aa-3146-b351-3bc94d0194df.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     399494
IP address blocks:        199.241.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:61:41:73:0c:42:bd:c1:72:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3fb3897-fd14-48ee-ad84-812c408cf46e
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=5c7f343e-6a24-48d6-82fc-1e1fab75d2a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:9b:4b:86:ce:b3:7c:6f:83:e5:6b:9f:3f:
                    45:0f:8e:89:6f:63:b3:f1:20:4f:3b:1a:dd:0b:0b:
                    ba:e7:f4:e3:dc:3b:72:d5:ae:33:22:d9:da:1e:bc:
                    86:08:20:a7:d1:33:66:96:59:7d:76:98:58:56:39:
                    12:c1:d4:7c:9c:f9:ec:e5:de:16:5a:fa:40:fb:1f:
                    7f:89:6d:97:aa:7a:cf:1d:81:10:ba:04:c0:92:a6:
                    7a:2d:10:93:22:d4:00:64:f1:cb:5b:f4:d3:b2:bf:
                    c9:57:d9:f7:04:ab:9b:ef:8e:4f:fc:c9:6c:e4:0d:
                    1b:12:6c:75:75:fa:e9:1b:d3:c1:eb:71:e4:4c:d8:
                    a6:dc:a4:d2:3b:32:81:cd:67:42:7a:1d:fd:c5:a2:
                    57:c5:eb:88:26:b8:6a:0a:09:18:3f:81:e6:c1:02:
                    8e:93:29:6a:0b:cd:ef:cb:74:3d:d9:d3:74:1d:a2:
                    05:85:c0:4d:cf:62:eb:38:59:89:06:df:3f:0e:24:
                    aa:a4:e8:72:d8:2a:a8:3a:b3:79:ca:26:62:e4:85:
                    13:56:b0:d5:a2:4d:af:4f:7e:5c:aa:ec:f9:48:c8:
                    c2:34:26:ae:1c:b7:90:62:7a:d5:37:5a:aa:8a:62:
                    ac:fe:7e:b3:04:eb:09:16:6a:ab:2f:fc:30:96:65:
                    6a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:AC:2F:EC:F4:D1:39:5D:56:AB:3D:88:74:2E:8F:79:DE:18:C0:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/7538a78f-81aa-3146-b351-3bc94d0194df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e/c3fb3897-fd14-48ee-ad84-812c408cf46e.crl

            X509v3 Authority Key Identifier:
                keyid:81:9C:0A:E7:28:DC:62:35:44:F4:10:85:B8:D7:12:59:1A:57:DD:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c3fb3897-fd14-48ee-ad84-812c408cf46e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.241.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:80:d2:88:b8:c9:b9:fc:9a:91:4b:09:e7:a4:36:32:a9:db:
         d5:5c:b5:84:1d:06:9f:68:bd:d1:61:57:df:f6:17:01:30:09:
         aa:30:ec:69:46:d7:e2:38:40:0c:5b:31:5b:3f:c3:9f:2b:e1:
         6d:86:96:9d:ab:2a:4f:d1:0e:30:94:37:81:8d:1b:46:de:d4:
         f1:f1:85:e7:d9:e9:e3:d5:97:0c:ff:0b:01:99:e4:c5:a5:9f:
         87:6c:62:fd:eb:d8:8c:4c:4c:4c:f1:0c:75:53:1a:50:f1:94:
         61:18:cb:d3:63:97:3c:24:80:fc:39:0e:1b:1c:6d:fa:a8:e0:
         f5:c2:28:aa:a1:dd:7c:0d:62:b5:ba:62:74:7e:88:71:ed:a9:
         c6:c5:13:f3:4a:f3:b1:1e:c7:99:5c:79:4b:4e:24:cf:90:6f:
         95:db:75:7a:cc:90:01:47:d2:13:a4:3d:77:53:cc:f4:9c:fd:
         71:42:cd:fb:f7:9a:8c:ae:06:38:5d:0a:c5:16:a4:46:4c:f6:
         ae:42:a2:d8:b5:86:41:79:71:22:67:17:06:c3:d0:26:19:34:
         12:a8:49:67:32:9f:49:ab:49:94:7f:cb:df:12:f6:f0:19:46:
         32:b7:bc:c0:81:0a:28:db:e7:2d:33:52:34:dc:c6:c0:f7:6a:
         3d:e5:cf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:05:43 2026 by rpki-client