Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa
File:                     a869d388-8367-3ca6-b27c-a77b7ecce0da.roa (raw, json)
Hash identifier:          rhtusn7aRIh5qgwPNFJTykI96DpDPQynatyRWX5/NHA=
Subject key identifier:   95:49:36:BA:78:48:0D:81:19:19:13:6C:E4:9D:4D:BB:F5:6C:FF:67
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584E1FA9A1C2C77611C62B4C0938
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa
Signing time:             Wed 10 Jun 2026 09:00:13 +0000
ROA not before:           Wed 10 Jun 2026 09:00:13 +0000
ROA not after:            Tue 08 Sep 2026 09:00:13 +0000
asID:                     20177
IP address blocks:        198.248.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1f:a9:a1:c2:c7:76:11:c6:2b:4c:09:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Jun 10 09:00:13 2026 GMT
            Not After : Sep  8 09:00:13 2026 GMT
        Subject: CN=a0c15b9d-ac20-4796-bd87-d9fbc7c8f497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9d:a4:de:1f:68:f0:02:3c:31:28:d4:43:61:
                    46:f9:e6:d8:b0:c1:b7:96:5a:85:60:ac:1f:62:15:
                    6d:3b:4c:72:ea:aa:18:f7:a5:c0:38:0c:22:31:70:
                    71:d6:af:7b:ae:27:c0:1a:28:a4:e4:bb:6d:ea:d3:
                    3e:9c:04:a0:43:81:10:d6:0a:56:07:ea:2b:5f:63:
                    97:cb:33:04:13:72:ed:9e:4f:f1:4f:f4:37:20:0f:
                    e5:e0:66:d4:c0:a0:00:e8:48:5d:25:d0:72:0a:ee:
                    20:e9:5c:5a:c4:cd:75:c3:a2:86:62:92:61:ae:92:
                    64:2b:11:ab:d3:91:2e:30:91:61:44:03:82:12:2c:
                    7c:ee:ed:21:42:5c:3e:0c:7b:79:0d:4d:16:0e:f3:
                    38:c2:69:36:d8:b7:d5:5b:0d:d1:2a:ce:37:fc:55:
                    98:c0:35:d2:8b:23:22:7c:1a:89:7a:c7:ce:44:79:
                    6b:74:8c:e8:b6:ab:c0:63:58:dd:32:88:c2:47:13:
                    a8:81:45:1b:38:df:8f:1f:59:18:3d:f2:52:be:40:
                    5c:3d:59:9f:2a:ba:1f:a2:f5:9a:df:77:96:28:f9:
                    91:63:dd:08:da:d1:82:42:14:49:95:e3:7f:43:9f:
                    da:c6:5d:a7:43:2f:e5:53:8c:0b:17:ea:10:77:fb:
                    09:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:49:36:BA:78:48:0D:81:19:19:13:6C:E4:9D:4D:BB:F5:6C:FF:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/a869d388-8367-3ca6-b27c-a77b7ecce0da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:85:9f:26:21:33:2f:e7:f0:7a:d8:6f:51:48:3a:31:39:0d:
         a8:6e:78:cf:84:1f:80:b9:ae:22:38:7c:e3:26:f9:12:43:80:
         f7:6c:8e:fc:58:da:38:04:6b:8f:85:20:50:b8:d2:4f:27:76:
         2b:36:a8:11:17:66:76:b9:50:3d:cc:7c:7d:06:bf:39:88:5f:
         9d:60:68:f4:ef:37:14:8a:9e:38:19:03:e8:a3:ee:9b:11:9f:
         19:10:9d:af:ee:63:69:0b:e3:16:fb:5c:9c:2f:4e:01:e1:2e:
         fc:9c:03:2c:a3:e3:f9:da:ad:59:27:b1:63:bc:dc:60:33:2f:
         01:69:7b:38:36:6d:b4:ae:80:bf:84:65:d1:0b:6e:ee:97:b2:
         69:24:c6:2b:b9:4a:7d:bf:04:3d:52:33:66:e4:f3:ed:f4:f8:
         1d:f0:e7:19:54:75:0a:00:28:31:93:1b:8a:3b:2b:41:99:9c:
         67:57:38:69:12:d3:68:4a:a1:96:3b:66:15:76:32:73:92:7d:
         6d:4d:26:f5:27:91:a6:04:60:b1:cc:8c:46:07:ba:81:09:9c:
         3b:e9:0a:9c:56:16:be:dd:5c:94:91:81:47:24:e9:a5:02:cd:
         50:2f:99:61:a2:5c:fc:d0:89:4f:69:22:4d:f5:d5:43:b8:ef:
         14:69:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:26:12 2026 by rpki-client