Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d2fd1299-c743-3306-b786-763bde2fea18.roa
File:                     d2fd1299-c743-3306-b786-763bde2fea18.roa (raw, json)
Hash identifier:          ODruk6TEb4VCF5osDneQzMlBJ3aVjEFhTwJThfnw83g=
Subject key identifier:   90:01:B9:10:34:45:9E:80:F2:EF:CA:00:54:29:30:3D:45:3D:80:C5
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584F348271EC01AE10339DC85700
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d2fd1299-c743-3306-b786-763bde2fea18.roa
Signing time:             Thu 17 Sep 2026 13:00:12 +0000
ROA not before:           Thu 17 Sep 2026 13:00:12 +0000
ROA not after:            Wed 16 Dec 2026 14:00:12 +0000
asID:                     399444
IP address blocks:        192.228.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:34:82:71:ec:01:ae:10:33:9d:c8:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Sep 17 13:00:12 2026 GMT
            Not After : Dec 16 14:00:12 2026 GMT
        Subject: CN=fc0d8a4f-bb30-437b-98e7-8c99644c1d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:34:b3:27:61:d8:ea:07:0e:23:a3:fc:5d:fc:
                    f5:9c:e9:67:b6:73:b1:b6:c7:bb:57:aa:63:20:9a:
                    96:90:f7:64:2b:e8:a6:b5:76:96:17:69:84:41:7f:
                    73:d3:08:8b:aa:52:96:65:af:46:52:b6:40:fa:df:
                    90:17:ee:63:ee:4a:77:b7:73:c8:b2:3a:94:bd:fd:
                    71:67:8c:ff:d4:ef:8e:a7:96:bd:31:e8:bf:86:91:
                    b2:87:ac:08:e3:8b:8c:83:58:88:81:73:53:e8:fc:
                    70:8f:0c:6e:f2:59:2a:9f:f3:7b:a6:d6:47:7c:84:
                    16:87:63:00:ec:b0:c9:d9:f9:12:7a:4a:be:a5:89:
                    3c:3d:e3:ea:05:ed:5a:cb:82:5a:c3:c1:4a:9a:a8:
                    25:07:c3:fb:cf:a2:a1:4e:e6:90:e1:51:f3:21:04:
                    df:88:3b:1c:7f:2a:aa:93:c3:98:20:15:d1:05:00:
                    65:a3:f1:28:2f:55:3c:a2:eb:bb:83:7a:8a:8c:17:
                    03:66:95:4f:58:cd:53:ee:5d:80:17:41:e2:80:d8:
                    5d:f7:27:f8:c6:3e:5d:f4:f2:17:70:12:b5:f3:72:
                    da:fd:9b:3a:eb:14:ea:43:7e:66:04:9c:2f:50:f3:
                    1a:77:58:6a:f9:0c:6c:bb:27:38:45:ad:14:a4:cb:
                    34:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:01:B9:10:34:45:9E:80:F2:EF:CA:00:54:29:30:3D:45:3D:80:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/d2fd1299-c743-3306-b786-763bde2fea18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:be:2b:53:c8:df:7d:24:9a:fe:ed:c0:3a:a9:37:76:43:a7:
         c7:6a:64:81:c5:2b:97:63:e2:85:c3:01:6c:e4:18:f3:58:9b:
         b1:6b:01:95:1f:1d:5f:b7:86:ba:87:6c:6e:dc:3b:58:d6:85:
         24:9a:c4:60:db:59:ca:e7:81:7a:0a:e2:82:f5:4e:8f:58:aa:
         ac:98:fe:4b:89:88:4d:ed:7e:7e:4c:95:fe:70:9b:39:e9:2b:
         05:30:6a:f9:31:3d:7b:11:e9:14:4a:f1:29:95:6f:8c:7b:ee:
         ae:cd:70:27:e6:e6:b2:b5:22:4c:72:31:f2:f3:8a:cd:c2:78:
         c3:8c:71:1f:92:38:dc:74:d5:4c:d1:ce:34:cd:db:68:26:93:
         af:52:b6:0c:78:b6:c2:72:da:94:f8:a4:d6:46:b9:07:34:67:
         44:3c:ac:3e:79:eb:97:4c:58:6e:e0:e5:84:7d:85:80:a3:3a:
         fd:f5:ea:65:b6:32:7a:90:87:64:cf:43:59:ba:ee:54:ae:bb:
         23:4e:eb:63:c6:82:f2:bd:25:30:fb:c6:52:da:f2:80:9f:27:
         cd:0a:2a:85:51:13:85:54:de:02:a0:18:b0:54:f6:8c:5e:7c:
         2c:d9:a4:09:d1:55:d5:05:18:db:77:fd:9c:93:ad:f3:7e:76:
         be:54:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:28:28 2026 by rpki-client