Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ccf7876-e5b4-3043-af0b-4333d7d76083.roa
File:                     1ccf7876-e5b4-3043-af0b-4333d7d76083.roa (raw, json)
Hash identifier:          WT+FxrvycYdZl+pyhsdc3XaV2KByJNo/Ktbt0tQn3Gg=
Subject key identifier:   41:F3:E4:23:83:08:FD:0A:40:9A:1A:55:95:CC:E8:42:94:EF:FF:C7
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584F0672A170FF3A2671BA79C778
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ccf7876-e5b4-3043-af0b-4333d7d76083.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     577
IP address blocks:        198.235.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:a1:70:ff:3a:26:71:ba:79:c7:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=f94ec1be-120c-4a67-bb50-9ab74fcf3065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:72:f5:e0:7d:ca:df:7f:b3:8a:85:c1:ea:
                    a6:40:9c:a4:82:49:e9:23:bd:1a:97:e3:c5:9c:1a:
                    3a:34:36:cf:a3:cc:ac:cf:2a:b2:8f:03:1e:92:6c:
                    c3:7e:94:43:13:0c:15:ef:5c:a1:fb:88:9c:f2:c1:
                    45:1a:40:d5:93:72:39:05:07:5d:12:d5:02:b0:7b:
                    f0:cc:bb:bc:ce:7a:b7:d9:ca:fe:d0:9b:84:04:b1:
                    94:a2:b5:19:b0:5f:c3:5e:cc:d1:9c:f0:4c:44:53:
                    2f:ac:dd:78:fb:0b:00:c4:45:c9:df:8f:61:07:d4:
                    9f:ef:6f:01:06:52:a2:26:28:ab:78:e7:6a:1d:2a:
                    bd:eb:8b:b3:4d:c9:6d:27:10:2c:40:ed:bf:84:1e:
                    18:40:01:93:9d:31:35:a5:60:d4:c6:4e:d8:6b:6b:
                    b8:57:79:a1:f5:e1:94:5c:2a:26:69:2a:37:9e:de:
                    87:7a:3b:62:d2:8d:b9:02:8e:7a:50:04:c6:5e:be:
                    0c:36:ca:05:8f:1d:8a:8a:df:1c:8f:99:41:7f:ba:
                    6c:91:23:db:7c:a0:de:f7:23:8b:68:a2:6f:95:19:
                    a1:08:6e:64:53:e3:61:ef:52:36:ea:f4:93:a3:7f:
                    d4:0c:82:f0:c7:5a:ee:a8:b9:c8:72:61:8c:74:d4:
                    04:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F3:E4:23:83:08:FD:0A:40:9A:1A:55:95:CC:E8:42:94:EF:FF:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ccf7876-e5b4-3043-af0b-4333d7d76083.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.235.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:99:48:8c:68:15:41:2a:ff:a4:27:46:e6:5a:b6:45:82:
         b4:7f:a0:fe:1e:09:b0:57:80:e5:92:de:f8:0a:ef:35:e4:b4:
         28:2e:87:d9:3e:c8:34:7e:6f:8a:e8:99:c9:63:09:7a:16:8e:
         5a:8d:ee:89:ab:53:70:4b:ee:1a:51:cc:c1:e2:4c:ee:68:f4:
         60:80:d2:f0:db:46:79:53:71:a5:70:21:3b:90:a0:41:cb:65:
         fb:44:38:e4:d7:41:c4:3e:9c:a4:61:76:18:3b:f3:b0:82:45:
         16:34:bd:a4:7c:5d:09:8e:6f:dd:1c:0f:81:eb:47:28:89:42:
         69:af:e2:da:1b:7f:d4:32:98:b6:4a:ad:d3:6e:b1:1b:64:e2:
         5b:fa:25:8d:9c:68:50:5a:24:64:a0:5d:ce:e9:32:b4:54:d7:
         de:6f:2a:47:55:ec:ae:be:af:b0:31:43:3c:e0:e1:80:db:75:
         67:a2:53:61:63:c1:97:85:7e:d8:5f:ab:45:71:8b:09:34:86:
         f9:e0:50:20:2f:b9:da:3c:d8:5e:56:33:fd:f8:4b:03:ad:69:
         84:a4:ea:88:b8:3a:32:1d:c0:5d:86:34:89:2b:79:67:33:6e:
         96:a8:d2:09:91:30:8b:6c:a2:09:92:21:8a:56:0e:70:b2:87:
         ce:83:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:22:11 2026 by rpki-client