Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/9006e636-0a6b-3e60-b166-8b71ea8c3db8.roa
File:                     9006e636-0a6b-3e60-b166-8b71ea8c3db8.roa (raw, json)
Hash identifier:          iPjU8MYrbzV2QFwfTiFBa78iwKvBg4RjxqftXKXx3KU=
Subject key identifier:   4C:1D:47:F3:45:87:C0:D0:0A:A3:D2:7B:AF:A5:1E:BE:5D:2E:ED:68
Certificate issuer:       /CN=1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0
Certificate serial:       010D0C9F4328584DA3E56A272A1CB0B352ED9900
Authority key identifier: 83:75:39:FD:A3:0B:31:DE:65:83:6B:61:DF:D8:8A:30:BC:09:65:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/9006e636-0a6b-3e60-b166-8b71ea8c3db8.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     63023
IP address blocks:        198.17.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:6a:27:2a:1c:b0:b3:52:ed:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=d43071b1-ef9c-4054-a54c-e525af9b4041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:54:f7:a3:72:cf:42:0b:17:cc:60:82:c2:f9:
                    de:95:38:7b:3e:84:1f:7b:5c:71:ad:60:7d:37:7d:
                    8e:34:a3:dc:26:4e:94:67:ca:f4:7a:a3:b2:7d:12:
                    8a:1e:45:3a:a3:e5:3d:d8:57:60:3c:fb:1e:ee:69:
                    5b:84:66:bd:f8:97:c1:f2:ad:44:ba:65:b7:03:d6:
                    29:fd:16:ad:e2:f5:6c:17:b4:fb:b7:de:1a:65:47:
                    4a:20:84:9b:49:65:ae:89:a5:13:5b:51:f5:50:d1:
                    b6:91:9d:9e:a2:bc:9c:bd:4b:75:3d:d2:ba:65:34:
                    ae:72:cd:1c:d4:ed:a5:01:68:d3:c6:cd:cc:1e:17:
                    92:87:45:23:cd:49:cc:9a:7c:8b:3f:18:36:d9:24:
                    79:db:37:ed:79:bd:45:8c:bb:de:7c:82:30:df:11:
                    db:fd:24:95:05:8d:86:63:55:52:1d:24:e1:40:7d:
                    cb:58:57:a8:0a:29:90:5a:b9:30:03:c6:4c:11:58:
                    76:ac:a6:89:fc:6a:16:a4:53:fc:9f:c8:da:28:90:
                    e3:61:a5:b1:d3:f9:78:50:fe:15:48:fe:d6:80:bb:
                    46:b8:4d:23:97:0a:0c:09:37:12:bc:95:e3:91:94:
                    ef:55:e9:bb:9c:f4:7f:4a:b7:e0:02:40:13:c3:1f:
                    ee:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1D:47:F3:45:87:C0:D0:0A:A3:D2:7B:AF:A5:1E:BE:5D:2E:ED:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/9006e636-0a6b-3e60-b166-8b71ea8c3db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.crl

            X509v3 Authority Key Identifier:
                keyid:83:75:39:FD:A3:0B:31:DE:65:83:6B:61:DF:D8:8A:30:BC:09:65:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:36:26:53:74:96:0c:62:c1:8a:ac:43:15:56:8e:cf:6d:e5:
         a5:0a:bb:92:f5:f3:4c:c2:2d:0a:0b:18:34:70:3c:2e:d2:73:
         c5:78:ba:0e:2e:05:b3:2a:97:cf:20:3d:43:e6:5d:f6:86:26:
         40:57:d4:bd:24:06:67:d1:df:be:29:2f:4a:88:54:17:01:75:
         84:30:25:c5:a9:06:71:65:7d:e0:19:26:c2:85:f4:4b:0e:32:
         5b:10:f0:b7:8b:d7:a8:b1:3a:39:00:48:15:ea:c3:00:8f:e1:
         63:3c:a0:a0:5a:05:47:ad:d0:75:41:17:91:08:43:56:97:0f:
         25:73:28:50:cd:d3:2a:43:91:7b:22:21:d3:e3:60:f3:16:a5:
         6d:e3:78:19:e5:9a:b5:36:d0:f8:ef:c5:63:e5:78:96:80:d2:
         58:aa:14:63:a8:cb:96:fb:e7:8f:ee:36:ff:a8:a0:95:df:30:
         8e:3b:33:cd:43:ef:40:9c:dc:18:05:4c:1b:fe:43:ba:bb:84:
         cd:8b:64:31:16:db:0e:b2:91:34:14:87:9a:67:c7:83:1c:0c:
         8d:bd:06:dc:23:80:b7:56:02:c9:19:38:18:68:44:9b:6f:2c:
         73:4d:81:71:bd:4d:c8:37:5a:f9:45:e3:d7:b0:95:30:66:a3:
         bb:27:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:30:26 2026 by rpki-client