Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9313e3b4-6027-451c-abd9-821c395ebe77/dd914ab9-2349-31f3-8bd5-1c477694dd76.roa
File:                     dd914ab9-2349-31f3-8bd5-1c477694dd76.roa (raw, json)
Hash identifier:          jIv0s1j6xW76sT20RCcdMeYmzv5o8ce2RNs2tmFEBQc=
Subject key identifier:   DA:37:64:19:05:F9:BE:8B:C8:BF:95:FF:E5:4B:DE:0F:59:04:45:DB
Certificate issuer:       /CN=9313e3b4-6027-451c-abd9-821c395ebe77
Certificate serial:       010D0C9F4328584D44FA279F7AB022D7F9BC2B80
Authority key identifier: 83:49:CF:8A:D9:6F:18:8D:8D:15:CC:EE:FB:15:49:DC:E8:A7:48:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9313e3b4-6027-451c-abd9-821c395ebe77.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9313e3b4-6027-451c-abd9-821c395ebe77/dd914ab9-2349-31f3-8bd5-1c477694dd76.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     30564
IP address blocks:        198.182.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9313e3b4-6027-451c-abd9-821c395ebe77/9313e3b4-6027-451c-abd9-821c395ebe77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9313e3b4-6027-451c-abd9-821c395ebe77/9313e3b4-6027-451c-abd9-821c395ebe77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9313e3b4-6027-451c-abd9-821c395ebe77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:27:9f:7a:b0:22:d7:f9:bc:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9313e3b4-6027-451c-abd9-821c395ebe77
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=b09ef0ed-f8b4-4049-b63a-de8e7802a1ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:69:10:43:52:7a:1b:1b:fd:15:e9:35:a2:
                    99:3d:49:7b:da:f5:a0:41:5f:16:51:44:de:54:f9:
                    76:af:68:3d:4c:5a:fd:9d:74:23:d2:1d:cf:28:4a:
                    cc:6c:6e:81:c8:f2:c5:89:04:79:7e:82:af:d5:74:
                    c5:59:df:d3:2d:f0:9f:3b:4c:47:b6:8a:c6:f1:76:
                    08:74:0b:c1:39:a2:69:8d:5c:38:8f:6b:cb:06:71:
                    f0:b8:ab:56:d6:a4:c3:17:bf:ea:a8:aa:2b:df:b0:
                    cd:8d:31:ea:04:7f:7b:fd:39:e5:d3:8f:ad:3f:4d:
                    cb:88:7e:02:18:2c:fa:ee:ea:82:ee:e9:22:a2:54:
                    6b:6a:4a:3f:c1:6a:1e:ca:6d:8d:98:38:fb:24:ff:
                    c7:a1:b7:0a:a3:28:0a:47:f1:fd:16:62:d5:06:db:
                    f7:dc:45:ef:62:8c:c6:f7:35:61:b6:a0:3a:4c:b4:
                    4a:ae:a0:7d:c3:3e:0c:ca:21:cc:df:f5:86:6b:f3:
                    39:ee:3f:24:af:42:31:b8:53:c4:e6:a3:94:13:aa:
                    27:4d:50:cd:ed:55:65:e0:76:dc:d4:ef:71:31:31:
                    df:dc:ea:d2:d1:58:77:b7:06:fd:79:ed:47:77:2c:
                    88:dd:36:21:b1:5f:b1:22:5a:42:f9:c4:38:34:ac:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:37:64:19:05:F9:BE:8B:C8:BF:95:FF:E5:4B:DE:0F:59:04:45:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9313e3b4-6027-451c-abd9-821c395ebe77/dd914ab9-2349-31f3-8bd5-1c477694dd76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9313e3b4-6027-451c-abd9-821c395ebe77/9313e3b4-6027-451c-abd9-821c395ebe77.crl

            X509v3 Authority Key Identifier:
                keyid:83:49:CF:8A:D9:6F:18:8D:8D:15:CC:EE:FB:15:49:DC:E8:A7:48:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/9313e3b4-6027-451c-abd9-821c395ebe77.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.182.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:92:39:88:fe:26:60:c2:dc:2b:b2:ee:57:e9:83:59:77:bb:
         79:75:d0:46:53:38:bc:07:f2:10:ab:7f:81:4f:4e:83:b8:fa:
         5f:96:0f:b6:44:05:83:92:c6:d1:c1:fc:55:c9:a2:c4:ab:6d:
         f5:4c:44:26:a1:14:d6:3b:5d:e8:c6:a1:9b:0a:e4:fa:1a:e5:
         1c:7a:a6:6b:69:9b:d8:87:2b:ec:14:1e:1f:8c:90:f4:17:80:
         1b:21:99:5e:e9:b7:f2:06:bb:97:77:ba:63:0f:01:5c:a6:60:
         2e:eb:0b:6e:60:c6:ed:14:45:88:90:85:c8:48:c2:ea:0a:60:
         f6:c7:55:78:ec:ed:0d:b2:77:b8:ba:9f:1c:08:6b:74:d2:be:
         de:16:b5:a7:30:dc:34:34:cc:af:49:9e:62:41:4e:5f:d2:5b:
         29:e0:b2:49:5d:49:1e:b6:de:1a:14:1d:bc:27:86:41:69:d3:
         d8:29:c7:34:c9:e8:fc:d3:03:86:e5:07:eb:9d:76:39:bc:f5:
         5a:25:fb:5c:83:9d:3d:93:2d:ee:06:3c:ca:33:a0:ed:1d:69:
         9c:93:7e:d7:bb:50:f2:ed:36:3a:e0:c3:07:2c:a5:6e:17:29:
         51:ca:25:46:f8:9b:d3:d9:18:cb:28:d8:06:3c:fb:f4:55:0c:
         53:f1:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:00:12 2026 by rpki-client