Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4247571f-5685-3fb1-a353-495198fb6fed.roa
File:                     4247571f-5685-3fb1-a353-495198fb6fed.roa (raw, json)
Hash identifier:          j/ONOlIHog7il9TS3V0K8eCYqi71wRGuQQfgDOJEWyg=
Subject key identifier:   4E:35:13:A1:CB:7D:D4:EF:74:9A:31:C2:C7:5D:89:4C:B1:DB:4A:60
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584F20F7D36F8B7802BEEAEB8780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4247571f-5685-3fb1-a353-495198fb6fed.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        198.181.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:d3:6f:8b:78:02:be:ea:eb:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=fe88f657-8095-4eb0-92da-7e4eca8eade1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:c4:e6:11:87:a3:92:ef:3e:bd:85:ff:a2:
                    2e:2a:3a:7c:79:7e:6a:f2:d7:8c:17:d0:b2:72:99:
                    78:dc:39:c4:eb:b8:c3:5d:f9:70:33:89:15:46:09:
                    3a:44:98:cd:e1:02:4d:0e:09:f9:8a:f2:a1:74:3e:
                    62:68:00:96:b4:e5:2d:f4:13:20:6b:85:d5:7b:a2:
                    74:4b:61:97:66:d6:1f:ff:6b:e1:71:87:36:48:b3:
                    0f:05:c3:c0:1a:4c:98:2e:c7:e3:46:eb:9d:66:60:
                    45:9e:00:4d:5e:fd:6b:21:1f:94:d5:5f:46:24:79:
                    49:19:b1:6d:c5:fb:e8:83:31:a7:a2:8c:ab:4d:3f:
                    c5:9e:02:c2:37:62:82:c1:00:ff:71:88:bc:eb:26:
                    a3:27:b3:f7:95:27:f4:39:f6:e8:03:ad:64:b2:8a:
                    4f:2d:8c:b9:61:45:5b:b0:ff:68:75:e1:6f:66:f7:
                    0e:90:98:da:ac:41:8b:0a:88:38:90:3d:1d:8c:df:
                    eb:b6:4e:a9:22:1f:c8:78:cd:1c:f6:7c:0b:bc:02:
                    d1:8f:95:1c:90:3f:e0:2b:22:e2:0d:d5:aa:b1:4b:
                    ca:dc:ab:f0:28:7b:c1:44:46:e5:c3:00:e4:1c:44:
                    7e:24:dc:41:e5:33:1f:a6:ac:09:4d:c4:59:34:93:
                    a7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:35:13:A1:CB:7D:D4:EF:74:9A:31:C2:C7:5D:89:4C:B1:DB:4A:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4247571f-5685-3fb1-a353-495198fb6fed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.181.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:b6:87:76:06:fc:1f:29:8c:c0:49:68:02:20:1c:98:45:7d:
         45:da:57:d7:47:52:d5:a7:02:c1:7b:f5:15:53:22:48:7f:e6:
         84:f8:a9:45:e6:32:ac:34:52:cb:0b:b6:0a:b3:9d:86:cc:50:
         36:c6:4a:09:ec:1c:db:37:2c:e1:02:89:0b:91:0a:87:eb:81:
         13:6b:36:62:51:5c:92:2d:5e:3a:d0:c4:c5:14:87:c7:10:50:
         eb:f9:bc:31:b2:0c:82:a7:c4:ff:1e:87:e9:76:5c:89:9e:19:
         e2:09:7f:e9:18:19:30:55:51:a6:bb:08:08:28:43:0d:bf:37:
         af:00:a0:5d:47:73:fb:a4:73:85:b2:e8:21:b0:9a:b0:4e:d7:
         96:67:3d:c4:57:d6:e6:3d:e6:d5:16:06:3a:05:78:20:75:86:
         d3:52:dc:cb:d9:ba:47:6c:1b:3a:41:e8:9b:eb:20:c4:10:26:
         26:c8:56:83:d2:93:21:97:ca:b2:93:5c:c6:2a:a2:f3:5a:39:
         be:d1:9f:2f:b0:ba:3e:93:5f:f3:c2:1c:eb:27:23:72:82:61:
         a9:a7:9e:54:ad:22:99:35:8d:05:3d:fd:ab:8e:4a:db:a2:c0:
         4d:5b:4a:49:0b:b6:e0:d6:04:42:8d:28:3c:60:00:ef:8b:b5:
         b3:aa:bd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:26:31 2026 by rpki-client