Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa
File:                     9a647916-d419-3dbb-868d-b7491eb1551d.roa (raw, json)
Hash identifier:          CaOCBj7c7ZLwNrbd65/TqV+x2e3+THZ2w4leLUMFcK0=
Subject key identifier:   6C:BC:F3:3F:5A:7F:D2:BE:92:11:4B:96:9A:D4:D0:01:5A:D3:B7:96
Certificate issuer:       /CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
Certificate serial:       010D0C9F4328584E0005E1C083982585557FF900
Authority key identifier: 41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     29848
IP address blocks:        199.5.197.0/24 maxlen: 24
                          199.5.198.0/23 maxlen: 24
                          199.5.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e1:c0:83:98:25:85:55:7f:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=822ab581-a0b4-4f01-9ab1-8dac6d881508
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=f74fad8f-eecf-4d6d-aff7-cb81f9d73f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:18:cd:7b:87:85:8a:54:b6:fc:90:62:9c:
                    0c:44:d2:9f:fc:85:3c:15:60:70:be:a0:55:85:e9:
                    e6:64:4a:bf:eb:54:90:d6:c9:c8:29:35:a0:61:5e:
                    fb:bf:ca:54:27:4a:15:34:e3:f9:61:b7:b2:c6:3f:
                    64:72:ca:02:ec:29:fb:c5:bd:ac:cc:65:d0:89:5e:
                    e1:6d:a9:fb:4e:43:42:d5:8c:8b:c5:80:52:54:f1:
                    1a:38:cf:cf:9f:9e:e8:c1:b1:54:4d:03:c9:f0:db:
                    00:87:9e:5b:9f:3d:63:1f:0c:0f:79:80:7a:f7:db:
                    fc:e5:5f:72:55:07:d3:b5:58:27:54:96:e1:cf:a2:
                    91:48:99:bd:53:db:eb:1d:0f:83:d8:2d:96:14:8f:
                    fc:9a:8e:a4:da:b3:dd:09:e2:a3:20:6b:70:29:7f:
                    1d:b8:08:18:fd:97:2c:8c:99:2b:87:39:11:8f:f1:
                    d6:65:46:2e:41:04:75:bd:12:6b:f1:88:5e:2c:ab:
                    4c:fe:51:ea:bd:49:9a:fd:5a:42:d5:e6:2e:5b:96:
                    83:c7:ed:c2:c1:97:e4:a3:bc:c6:bf:c4:3a:2f:83:
                    49:4d:5a:36:7a:27:47:68:67:b4:7c:b0:81:ef:08:
                    07:d5:f5:33:df:4d:1e:b0:2e:2e:66:7e:e8:bf:bd:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BC:F3:3F:5A:7F:D2:BE:92:11:4B:96:9A:D4:D0:01:5A:D3:B7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/9a647916-d419-3dbb-868d-b7491eb1551d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508/822ab581-a0b4-4f01-9ab1-8dac6d881508.crl

            X509v3 Authority Key Identifier:
                keyid:41:AB:0B:AD:05:EC:30:E9:3C:36:D9:74:0F:59:A2:B6:07:1D:5A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/822ab581-a0b4-4f01-9ab1-8dac6d881508.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.5.197.0-199.5.200.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:71:d8:76:3b:b7:47:16:7a:07:1c:f4:a1:fe:5a:bc:30:18:
         58:03:2b:4e:1f:50:a9:59:29:db:5a:b4:ba:ac:5b:0f:6b:76:
         0e:59:78:d3:b6:8f:e2:46:3d:0c:53:b2:b4:3a:8f:03:8c:85:
         44:71:fe:a3:ee:46:85:e4:7b:28:23:7f:6c:16:3b:9b:f0:25:
         c8:3f:25:b5:fb:46:f0:14:21:cd:55:f8:4c:b6:4b:93:ca:cd:
         9d:c5:eb:f4:16:81:4c:77:9b:e6:cf:d8:5b:b6:f1:48:4b:56:
         87:ac:90:a8:49:cd:b5:43:ad:cf:5a:42:19:19:cd:26:e4:e0:
         1d:dd:da:be:60:c6:a8:08:88:50:49:1c:60:c4:39:9d:62:bc:
         34:f3:97:c9:b3:62:c6:fb:c6:0c:0e:a9:a5:a7:9c:36:f7:a3:
         66:ac:3b:9a:90:cb:f7:04:e5:72:35:03:35:c4:c0:60:1b:2f:
         f0:a6:7f:97:cd:e7:ff:77:08:32:72:ff:4b:12:5d:e0:e5:f4:
         cc:63:2f:f6:35:e5:0f:21:bf:2c:40:b3:c3:41:ff:f2:38:eb:
         e2:42:a0:ba:f1:9e:a4:8a:95:6a:5d:df:09:a8:71:54:19:44:
         71:4d:bf:d1:d4:85:7e:5e:b2:fb:2a:4b:11:52:75:18:0c:04:
         89:e6:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:06:13 2026 by rpki-client