Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c26c7fd8-7485-3f92-8f84-cb7cd7b42386.roa
File:                     c26c7fd8-7485-3f92-8f84-cb7cd7b42386.roa (raw, json)
Hash identifier:          L/hTIOMp2GCJAPx6z14u2LxIoiyEsgD1EaroOQfGeVQ=
Subject key identifier:   BC:D9:1A:5D:F7:32:9A:84:C5:DF:6E:C6:1C:25:2B:5A:F8:F7:24:C3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584BA0D25A94773CB38076F937C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c26c7fd8-7485-3f92-8f84-cb7cd7b42386.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     30036
IP address blocks:        198.40.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:5a:94:77:3c:b3:80:76:f9:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=5c1e49f3-ae6d-4772-98b1-1279f4e99acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1a:f2:d1:28:e5:fc:24:d5:64:38:2b:23:99:
                    97:ec:c4:7e:2b:eb:5c:9a:9b:43:5d:57:f0:82:ad:
                    d3:c6:c8:88:88:ab:55:7e:a4:73:68:10:bf:9f:18:
                    32:0d:bf:03:2e:59:fa:e8:80:ce:25:8b:9c:03:d3:
                    ce:c7:33:2f:7d:7c:70:73:81:f9:30:7b:2c:c7:65:
                    a1:70:fa:4b:74:b7:60:e5:83:79:50:4b:b1:36:ea:
                    74:dc:6f:99:e9:5f:d7:c1:82:03:cc:ca:f5:4e:6a:
                    6d:8a:2d:cc:14:c6:21:cb:29:e3:da:a1:8f:bb:21:
                    a5:41:a4:7b:70:77:02:4c:20:52:ab:5a:bd:9d:0a:
                    b7:99:75:a6:7b:d7:15:69:c5:b0:cd:af:5c:0b:36:
                    76:07:71:98:89:2a:56:ed:c7:fa:d3:52:f0:97:fc:
                    86:d3:34:b5:5b:db:a8:7d:9f:8b:94:53:e8:3c:29:
                    d2:ad:dd:f1:ff:d4:63:07:86:a5:a4:a5:7d:03:01:
                    6e:d1:40:4d:f1:48:b1:7f:f9:6e:73:ed:a3:7c:f3:
                    51:64:52:54:62:16:08:7b:9e:f3:e2:6c:a5:d4:e0:
                    31:f4:61:63:fc:03:2f:88:b9:df:d9:75:d2:13:56:
                    df:46:a0:00:e0:e5:d1:1b:72:6c:ec:19:c3:7e:a0:
                    03:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D9:1A:5D:F7:32:9A:84:C5:DF:6E:C6:1C:25:2B:5A:F8:F7:24:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/c26c7fd8-7485-3f92-8f84-cb7cd7b42386.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:cc:00:ff:7b:6b:4a:bf:11:20:11:3b:91:b5:f1:37:16:01:
         18:7d:f3:60:d6:53:87:f6:12:85:d2:c1:6b:c0:88:bd:e0:6e:
         55:e1:9d:fc:29:89:ea:24:9c:84:01:cf:4c:e1:88:a1:83:c5:
         04:1f:02:a1:90:63:c4:d3:05:71:c2:09:b9:99:d1:a0:7f:d5:
         60:7a:92:fd:1e:81:82:77:92:14:07:f2:92:31:4e:4f:27:5d:
         2e:c1:f2:f6:5b:43:36:bc:22:63:09:51:7b:e8:9b:b2:23:ad:
         9f:85:cb:91:37:a8:61:3b:2f:04:37:d4:99:cc:73:4a:2b:ed:
         fe:6e:0c:f3:50:eb:c2:db:34:c5:2b:16:ec:6d:cc:9d:78:f5:
         d9:e3:41:ce:04:b9:ac:66:75:d1:52:d2:49:67:f6:28:5c:bd:
         62:23:ec:1e:bc:8e:05:11:39:34:9f:04:96:91:25:35:23:87:
         16:e8:44:6a:60:f0:87:8a:34:c1:6e:e5:88:af:18:e8:53:dd:
         e0:2c:13:58:d2:bf:2e:94:30:75:f1:ff:b6:81:e7:d0:59:d5:
         44:48:07:ad:e4:6b:e8:cb:4c:4c:4c:25:06:d9:a3:97:2b:de:
         0e:4f:17:a0:08:53:05:d4:b6:3c:3e:e2:0a:23:74:93:0f:98:
         c7:6a:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:26:26 2025 by rpki-client