Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/b2cdbb5d-ac4e-3b7a-9ef2-c26d042bef31.roa
File:                     b2cdbb5d-ac4e-3b7a-9ef2-c26d042bef31.roa (raw, json)
Hash identifier:          iZ8uE97BwVZxDgK6bmiTCwRtmCfaMcoNDR10aDkcXnI=
Subject key identifier:   C0:46:42:10:47:B9:58:EB:B0:6F:2E:E2:37:BC:F1:85:EC:37:2A:4B
Certificate issuer:       /CN=4f03c6aa-8d91-4885-b92c-f839de5529ed
Certificate serial:       010D0C9F4328584FBCC31C01A5FE0AE43D041580
Authority key identifier: BE:1B:CA:7F:4C:49:F6:28:BE:9B:4A:B9:AC:88:23:59:97:AC:27:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/b2cdbb5d-ac4e-3b7a-9ef2-c26d042bef31.roa
Signing time:             Thu 05 Nov 2026 08:20:32 +0000
ROA not before:           Thu 05 Nov 2026 08:20:32 +0000
ROA not after:            Wed 03 Feb 2027 08:20:32 +0000
asID:                     399646
IP address blocks:        198.134.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/4f03c6aa-8d91-4885-b92c-f839de5529ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/4f03c6aa-8d91-4885-b92c-f839de5529ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:bc:c3:1c:01:a5:fe:0a:e4:3d:04:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f03c6aa-8d91-4885-b92c-f839de5529ed
        Validity
            Not Before: Nov  5 08:20:32 2026 GMT
            Not After : Feb  3 08:20:32 2027 GMT
        Subject: CN=03058ee6-148d-44f7-9a20-5e79d8671157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d4:ce:25:d8:bb:c3:2c:a7:54:51:28:3f:f4:
                    d9:4d:5d:a5:05:6e:3f:67:e4:99:4d:a4:40:ef:ad:
                    63:60:36:35:cb:08:19:38:a3:a8:ea:7a:3c:dc:3f:
                    b8:6a:19:de:dd:58:17:e9:40:11:fd:d4:15:0a:43:
                    70:98:13:c2:14:d5:45:5a:b7:e0:b3:d1:0b:d6:f4:
                    a1:52:ad:44:4d:e7:08:84:1e:87:e2:35:2b:f8:1b:
                    ea:64:07:36:f7:f0:00:58:0a:4b:18:68:4c:90:0a:
                    55:ae:89:05:6e:d0:77:ca:63:7b:ee:b8:6c:89:7f:
                    15:58:fc:5b:ab:84:89:89:bc:25:df:03:41:ab:04:
                    bd:b7:8c:2c:8f:64:89:8e:0e:c3:c1:c0:65:c8:02:
                    7b:64:02:5f:b0:47:63:cd:64:1b:4c:8c:29:c2:71:
                    02:b1:aa:c3:95:9a:2f:40:75:9e:13:d5:ef:9f:d1:
                    d2:d7:7d:b4:a2:21:5c:43:ec:e2:2d:ff:9f:20:3f:
                    94:c4:a2:a5:c9:a3:41:59:b9:77:33:d7:41:0e:f4:
                    00:48:46:96:b5:03:bf:38:bc:fe:4d:53:22:42:dc:
                    2c:42:44:fc:08:a3:ca:7a:d7:22:8e:f2:b8:e3:b3:
                    37:cb:71:9c:be:2c:a1:4d:8d:4b:ea:61:84:83:6e:
                    e0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:46:42:10:47:B9:58:EB:B0:6F:2E:E2:37:BC:F1:85:EC:37:2A:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/b2cdbb5d-ac4e-3b7a-9ef2-c26d042bef31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed/4f03c6aa-8d91-4885-b92c-f839de5529ed.crl

            X509v3 Authority Key Identifier:
                keyid:BE:1B:CA:7F:4C:49:F6:28:BE:9B:4A:B9:AC:88:23:59:97:AC:27:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/4f03c6aa-8d91-4885-b92c-f839de5529ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.134.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:79:5a:2b:04:b5:19:1e:45:f4:af:cb:f5:a4:44:ab:6c:3c:
         a8:7b:62:37:ce:c8:78:a1:73:17:70:2b:8e:2b:8d:73:1f:9b:
         ed:ab:c0:3e:f4:0f:e2:1e:c3:1a:ae:b6:e7:25:9f:80:1c:29:
         8d:1e:dc:90:0f:a5:cb:c8:9d:5d:d8:a0:10:6f:ca:b4:b4:f1:
         ef:b6:61:72:8c:b4:06:70:ed:4f:58:da:67:c0:4b:e1:c9:99:
         69:ed:ec:34:94:ee:c8:03:27:ad:3c:e4:e1:c6:c4:56:d4:85:
         db:29:e8:ac:1a:02:13:74:5d:22:5d:55:72:a2:d4:30:17:cd:
         f2:a7:43:a2:63:4b:dd:d5:3c:41:ef:52:a2:c1:32:3a:07:d3:
         7d:61:4b:98:41:84:6b:9a:74:68:1f:78:aa:85:52:64:54:0a:
         a6:38:32:f8:1b:b5:39:1b:23:ce:35:a6:07:d3:9d:33:55:9e:
         c7:5e:cb:0a:47:43:d2:0d:ae:85:0c:20:f2:8f:90:b4:ba:29:
         b4:e6:0b:4f:23:4f:ad:60:53:4b:85:72:27:1c:af:20:6e:75:
         27:ae:56:49:30:57:b1:72:f8:7a:66:e8:76:d2:09:72:0a:00:
         3f:f6:a6:9c:a7:40:7f:c8:5f:4b:f7:77:94:56:0b:a2:43:51:
         c4:8e:47:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:14:21 2026 by rpki-client