Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa
File:                     b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa (raw, json)
Hash identifier:          wuLz8TvoM/q4OWkEUuh5UKbD9G8Lh+mXh+EItYK/JuM=
Subject key identifier:   96:9C:67:03:75:D8:08:AE:8B:BE:AA:E6:0B:6D:AD:74:D8:D0:6A:89
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584FAC8DE1A74D7D0DB2AA8D8E00
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa
Signing time:             Fri 30 Oct 2026 13:00:12 +0000
ROA not before:           Fri 30 Oct 2026 13:00:12 +0000
ROA not after:            Thu 28 Jan 2027 14:00:12 +0000
asID:                     26548
IP address blocks:        198.45.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ac:8d:e1:a7:4d:7d:0d:b2:aa:8d:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Oct 30 13:00:12 2026 GMT
            Not After : Jan 28 14:00:12 2027 GMT
        Subject: CN=89f9adb2-4ca6-4422-ba3e-ef3d077fcb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:25:3a:18:19:93:3f:3f:7e:d4:24:54:f9:97:
                    38:d4:cb:85:55:37:d5:19:5c:60:19:34:f4:3a:46:
                    93:3b:5b:29:99:e1:86:2b:bc:39:4c:61:55:a5:57:
                    ee:1b:77:13:74:3e:12:d3:da:0a:b1:8e:91:b0:d4:
                    ba:34:62:00:05:36:e7:e1:f8:fb:c9:75:3b:8f:02:
                    25:8e:eb:c2:4c:c2:72:97:16:86:3b:12:44:e7:13:
                    ae:96:3a:0c:9d:53:c9:e1:53:b6:47:ef:f7:08:ba:
                    7b:7a:7d:d2:59:f1:00:54:72:59:88:5e:6b:0a:14:
                    13:8a:c0:a5:25:73:a2:a9:fc:0f:46:7b:70:21:3a:
                    6a:56:71:ca:4f:71:dc:cb:19:c1:ef:7d:96:b6:1b:
                    52:2b:d7:aa:dd:cc:66:5f:a4:de:94:e0:97:ab:0f:
                    d1:00:7e:ac:6b:a5:c3:32:44:cc:d7:21:1d:b2:f6:
                    7f:56:a9:5c:d8:45:b1:13:a7:26:96:c6:c4:48:62:
                    f1:9e:1d:1d:37:2b:7a:f9:e4:77:7d:d7:2e:4f:59:
                    d6:1d:f9:8e:25:32:4f:d3:83:ec:fe:ad:4e:dc:43:
                    42:e0:8f:8b:af:5c:d2:18:2c:3c:d6:1d:c9:1c:11:
                    1c:55:e5:c0:8b:eb:85:8e:8f:76:a6:98:e8:fc:45:
                    f9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9C:67:03:75:D8:08:AE:8B:BE:AA:E6:0B:6D:AD:74:D8:D0:6A:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:58:c9:33:a7:74:66:9d:ad:d5:3d:b7:7d:27:cd:71:da:da:
         90:4c:8e:81:90:4e:e3:e9:4f:63:81:5e:e6:16:5d:d9:96:f2:
         21:6a:1a:d5:34:22:73:e7:67:a0:be:4a:86:64:7b:56:5e:a2:
         18:f3:b4:df:79:e0:46:03:d5:a2:20:22:cb:40:96:24:70:48:
         59:cb:c5:60:03:e2:a3:f6:7b:20:26:c8:17:f2:e2:de:53:d3:
         58:c7:40:00:81:e9:65:34:68:34:7b:b2:e1:9f:91:cd:d7:38:
         3b:ae:69:75:7c:76:8f:55:9f:80:ea:d4:8e:3a:5d:e1:c4:66:
         70:2a:40:9b:18:e9:f9:6a:c8:b8:6a:6a:eb:f3:f2:e8:a2:52:
         de:f1:fc:7f:fa:5f:2e:09:71:38:88:04:23:08:56:0c:67:bc:
         18:3c:1a:e3:96:55:12:ad:f3:6b:d2:43:bd:00:7e:66:dc:19:
         a9:33:fa:54:82:ea:82:30:d7:64:ef:7e:27:02:c7:b4:d0:10:
         67:0d:d2:77:ff:5d:e6:b3:5b:49:c1:8a:0f:72:ad:79:f9:98:
         76:c1:17:c4:8d:75:80:2c:57:01:98:a4:d1:34:b4:36:b5:a2:
         6d:96:3e:24:f1:04:74:0a:23:20:92:0f:d2:ae:05:21:75:c5:
         9c:3f:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:46:00 2026 by rpki-client