Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/881fe42e-9888-306c-92be-56a61a8ccf0b.roa
File:                     881fe42e-9888-306c-92be-56a61a8ccf0b.roa (raw, json)
Hash identifier:          BdaCAomb8/FfxUNaWCESrYxiRzmPK7lF9DD7nvcXtlw=
Subject key identifier:   A0:A2:A8:C2:56:7A:17:FA:9B:3C:D3:BB:89:9B:39:64:E1:92:A4:D3
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584E104EDE300D9D5DA7451A9B80
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/881fe42e-9888-306c-92be-56a61a8ccf0b.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     6922
IP address blocks:        198.215.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:de:30:0d:9d:5d:a7:45:1a:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=5368d5f7-d5d2-4a18-a247-fdb76ceaaf70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c4:ea:48:96:04:f4:a9:e7:85:de:11:fc:61:
                    0f:d3:20:26:fb:9c:cb:38:26:3b:6f:f7:70:d5:74:
                    6c:0a:4c:5e:87:8c:5f:e8:ce:ef:42:39:61:78:13:
                    9e:af:b5:63:08:3e:0f:0a:5c:1a:de:67:81:8a:52:
                    f8:8c:de:e0:1a:92:71:22:ef:2c:89:a7:93:18:a7:
                    b3:1b:35:ac:5f:fb:a5:f4:07:4b:e5:3b:39:ba:29:
                    b7:29:25:dd:5c:29:96:3c:42:1d:f4:aa:39:a0:99:
                    9b:51:87:57:09:77:fd:2f:38:53:c1:d1:95:8b:38:
                    8b:d9:19:4f:fd:b4:3a:0d:8b:d0:5a:96:97:c8:71:
                    5a:eb:03:4f:d6:69:b8:50:44:91:15:c9:ad:55:9c:
                    f6:f5:00:d1:51:b9:78:57:fe:70:80:b8:d1:cc:3d:
                    99:9f:ab:87:7f:67:32:c0:ac:62:2e:5b:a6:31:a8:
                    dd:63:9a:5c:c9:3c:64:49:b8:79:31:9d:09:8c:b3:
                    fe:94:c2:1f:e3:d3:35:6d:6d:86:66:3a:1c:c1:05:
                    10:ce:0a:35:82:11:ad:e3:fe:46:e5:6c:93:79:0e:
                    c3:9a:bc:72:75:4d:98:a3:30:dc:cd:47:58:fc:33:
                    85:6a:7f:0e:e4:ba:a3:a4:f3:0b:5c:28:4b:cd:ec:
                    92:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A2:A8:C2:56:7A:17:FA:9B:3C:D3:BB:89:9B:39:64:E1:92:A4:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/881fe42e-9888-306c-92be-56a61a8ccf0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:75:08:95:84:bf:76:9f:72:bf:14:37:1a:6b:f2:0a:10:14:
         b0:0f:57:4e:fe:27:53:67:24:42:0b:ff:b5:37:cd:3f:2f:45:
         95:09:3d:26:11:6c:27:c6:32:1b:e1:b7:41:f8:50:56:12:36:
         39:1a:cf:e1:54:71:5c:2c:98:95:fa:2f:be:e9:a5:c3:39:f2:
         52:80:fb:0e:7c:07:19:03:7d:92:69:a4:3b:a8:cb:72:7c:5c:
         b8:e7:e0:82:a8:e9:4b:17:73:f3:bd:3f:a9:c1:0d:9f:10:30:
         87:42:26:64:e6:96:20:b2:9c:e1:ce:c9:03:7b:31:c7:e7:17:
         b3:5d:ab:43:ef:df:cb:97:0d:66:b8:04:45:ad:a2:83:40:a3:
         48:76:d6:c5:af:e8:07:f1:ab:4a:96:03:bd:b1:23:be:be:ee:
         9f:7f:3a:08:8f:22:ee:e3:34:c0:54:30:4b:c0:26:88:26:19:
         88:84:6a:ce:52:6b:1d:d2:2a:a2:8b:37:b5:dc:9f:5e:08:56:
         d4:38:fd:93:45:39:3e:49:e7:07:e6:ec:01:29:18:d3:ac:da:
         46:45:13:f7:2c:15:75:08:65:d4:fb:fc:dc:1d:55:97:50:6a:
         81:a1:6a:da:c6:9b:39:9b:cb:cf:4b:41:c9:3e:e8:13:ea:0d:
         2f:51:13:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:23 2026 by rpki-client