Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/7ff18450-e049-35a0-af61-498631698575.roa
File:                     7ff18450-e049-35a0-af61-498631698575.roa (raw, json)
Hash identifier:          iE110tSyh58zilBv7/gTmVaUKQuMplnYxCo7m9XX28c=
Subject key identifier:   5D:90:E4:0E:BD:D0:01:F4:10:A4:E1:2C:89:6E:8B:E9:1C:B0:C0:4D
Certificate issuer:       /CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
Certificate serial:       010D0C9F4328584D06479D177B8C985EFFFEE300
Authority key identifier: 88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/7ff18450-e049-35a0-af61-498631698575.roa
Signing time:             Sun 01 Mar 2026 14:00:41 +0000
ROA not before:           Sun 01 Mar 2026 14:00:41 +0000
ROA not after:            Sat 30 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        198.54.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:06:47:9d:17:7b:8c:98:5e:ff:fe:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe9c26d-adfa-43c3-aafd-d6c286065b77
        Validity
            Not Before: Mar  1 14:00:41 2026 GMT
            Not After : May 30 13:00:41 2026 GMT
        Subject: CN=7244740d-6fb3-43e1-9355-977b917af472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9c:52:e2:52:16:43:0f:0f:fa:b4:90:a2:0b:
                    ea:15:f8:46:b5:11:1c:38:dd:29:2b:ed:99:3c:59:
                    c1:8f:d6:0f:c0:74:89:6c:76:cc:03:5f:83:35:57:
                    d1:e7:65:0c:56:40:4d:39:a1:df:1c:8e:7a:e6:56:
                    aa:08:b4:11:5a:5e:b8:59:11:3b:57:b5:c2:63:9c:
                    a5:ea:47:cd:b4:23:46:d8:fd:e0:b3:bd:0c:b0:62:
                    06:16:21:b6:aa:60:13:93:fa:62:2c:ba:d8:a7:03:
                    48:4f:7b:32:ae:84:95:ee:4f:1a:d8:40:e8:ae:96:
                    88:99:80:54:c6:f2:20:8c:87:e1:2d:6b:22:61:b5:
                    a5:b8:bc:01:9c:08:bf:09:02:f0:0b:ea:f2:2e:e6:
                    dc:65:47:5b:24:a6:92:a2:a1:f4:30:c1:68:08:b9:
                    f4:b5:00:6f:c5:e7:36:2b:b1:c7:88:ca:c3:db:35:
                    b9:7a:ae:a3:67:bc:c5:bd:81:30:09:bb:22:fe:d3:
                    8f:f1:da:8b:80:6e:5a:87:a2:d9:36:00:bf:9a:13:
                    e4:c9:5c:b1:c8:b7:d3:86:40:1c:9d:2c:93:47:92:
                    5c:99:47:6c:42:56:9a:53:7a:28:e6:93:4d:40:8e:
                    7c:6a:0a:56:29:38:2d:9a:43:15:28:d4:aa:9e:9b:
                    d0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:90:E4:0E:BD:D0:01:F4:10:A4:E1:2C:89:6E:8B:E9:1C:B0:C0:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/7ff18450-e049-35a0-af61-498631698575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77/ebe9c26d-adfa-43c3-aafd-d6c286065b77.crl

            X509v3 Authority Key Identifier:
                keyid:88:5F:E1:BB:17:77:66:78:98:CC:10:12:0D:0A:07:8A:C8:10:0C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ebe9c26d-adfa-43c3-aafd-d6c286065b77.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.54.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:18:aa:2f:02:96:91:3f:1c:f3:20:46:23:37:44:27:6d:
         bd:2a:42:7a:56:b3:31:78:3c:bd:d1:a5:40:8e:4b:df:8f:fd:
         2e:89:51:0e:d6:c2:95:78:9a:56:3c:d2:46:03:82:ae:2f:c8:
         6c:15:b0:3d:36:b1:f8:35:07:a6:23:43:5c:0c:b5:15:6f:0d:
         a9:b9:83:82:0e:30:50:10:c0:54:d1:bf:a9:e2:d3:eb:4e:78:
         df:62:4c:cc:f7:a1:ea:c5:e2:bb:5f:86:ff:bd:85:51:7c:f6:
         b3:59:75:39:2d:87:76:b7:bc:2b:f9:3d:5b:ac:79:91:05:48:
         9a:07:1c:a7:dc:a2:f1:ea:be:ce:77:84:5d:3e:0e:67:10:13:
         92:f9:79:73:51:7d:2d:2a:a1:f7:3e:d4:6b:78:7e:0d:ae:39:
         42:51:42:67:79:99:c2:6c:61:76:83:85:95:77:a6:1b:0e:07:
         8f:64:34:98:80:41:3e:c4:62:6e:21:8f:c4:c5:ee:e3:43:47:
         8b:a1:76:af:52:ba:7e:92:70:9d:af:c1:9e:d4:7e:50:79:76:
         1c:a5:b2:68:95:f2:90:ba:65:be:c0:03:98:52:07:5f:74:64:
         ff:0d:8c:b0:8d:cc:85:6f:fb:4f:e6:2a:b9:c9:38:f2:c2:78:
         16:d5:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:24 2026 by rpki-client