Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0876278e-e434-3b5f-b1ff-b42f571c6f9a.roa
File:                     0876278e-e434-3b5f-b1ff-b42f571c6f9a.roa (raw, json)
Hash identifier:          933+NfX8qibtLkY/LcQrDnAEOU/ZefDgwItS+TSi+RU=
Subject key identifier:   3E:E1:AF:EA:B7:60:80:D9:40:1F:2C:38:02:30:DF:25:BB:E2:AE:D4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D60E4F22265515525EDE60600
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0876278e-e434-3b5f-b1ff-b42f571c6f9a.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     30036
IP address blocks:        198.40.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f2:22:65:51:55:25:ed:e6:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=e40b5418-2715-4027-b9f7-2e009b9a0a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b2:02:96:da:77:5b:91:bb:b4:a4:f5:07:ac:
                    aa:cb:5f:2f:b0:c0:94:bc:b2:aa:9a:44:99:f1:1e:
                    bf:0a:94:e7:9a:80:ba:e0:13:ae:84:90:54:b5:cb:
                    82:67:71:76:39:e7:35:c6:73:a2:fb:47:1c:88:17:
                    99:2f:8e:2e:04:21:b1:55:d5:0a:78:df:5a:e9:65:
                    b6:76:32:81:71:3a:26:6d:06:22:b5:cb:77:b1:a4:
                    a7:cc:41:cd:09:59:6d:b0:05:4a:b7:e3:66:a6:91:
                    1b:6f:60:ed:52:18:e4:bc:27:41:b5:d3:c9:77:08:
                    ae:7a:0a:c2:18:bb:bc:6a:f0:99:24:e8:8a:63:27:
                    74:bc:47:7b:38:c9:4b:45:cc:39:60:65:e5:62:7d:
                    05:20:30:41:56:f9:16:99:24:8d:a9:68:96:7f:e6:
                    5c:e7:23:dc:4d:06:04:2f:61:d6:5c:3a:40:b4:f5:
                    44:eb:1a:37:7c:d9:22:d3:54:85:bf:da:9a:47:cf:
                    de:06:5b:f5:e3:11:32:26:23:9a:1b:e9:af:ee:9f:
                    82:13:1d:a1:6a:a6:d4:e4:4f:a5:25:6a:46:f3:33:
                    51:c6:4c:1c:ed:8d:47:16:1f:88:a4:16:0f:d5:a2:
                    5a:47:c1:2e:09:14:6a:71:be:fb:75:f6:29:9a:3b:
                    52:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E1:AF:EA:B7:60:80:D9:40:1F:2C:38:02:30:DF:25:BB:E2:AE:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0876278e-e434-3b5f-b1ff-b42f571c6f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:3b:04:b3:f7:1d:4e:2b:0b:a7:2e:da:49:3c:6f:0f:9d:da:
         57:95:38:79:e1:04:41:73:76:05:4e:82:03:dd:fa:6f:73:08:
         ac:a6:b8:f4:4a:dc:74:e6:0a:56:5d:35:97:5c:68:6f:1c:20:
         0a:6e:06:36:4d:2b:0f:07:ea:23:9c:77:36:50:e5:84:79:69:
         22:5d:31:40:6f:8a:7b:9b:8d:bd:a6:8d:f3:52:55:60:48:c0:
         57:57:5b:5e:33:b6:9d:b1:4d:5f:d5:0f:f9:11:68:57:a8:10:
         b9:f5:6a:d3:c1:a6:f7:9f:30:a3:4c:29:97:7e:cc:82:52:b7:
         52:ed:34:ba:6b:b1:f4:e4:94:e4:8f:f5:cd:3a:84:8d:50:ef:
         84:fc:0c:f0:20:a0:b5:88:f1:d0:65:af:f5:77:c6:92:cb:d3:
         93:e1:be:33:53:94:04:63:95:84:18:17:af:21:25:81:64:4c:
         aa:46:84:2b:f3:b0:d2:b8:d2:fe:75:f8:85:5a:99:f3:ef:b0:
         52:76:26:81:dc:72:64:57:a8:27:9b:d1:b5:0a:56:77:49:79:
         92:b0:a3:2f:5f:02:ec:6a:0c:cd:5f:c1:8c:52:44:4a:c1:e0:
         bb:f0:f8:d1:6f:07:24:2f:ac:1e:de:22:f0:5e:ff:b0:fc:0e:
         2c:88:c7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:11 2026 by rpki-client