Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa
File:                     ba10d448-b912-33bc-a392-2588e49baea1.roa (raw, json)
Hash identifier:          NkIGRau8ncdsgoMW4LYnTbtOBUfXQiQwR8BGb/PbBN4=
Subject key identifier:   43:1C:3C:BD:47:A4:72:11:5A:02:22:4A:88:AE:6D:7C:0A:80:BB:2E
Certificate issuer:       /CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
Certificate serial:       010D0C9F4328584E1E444F80C35A5B061EE11A80
Authority key identifier: 36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     14977
IP address blocks:        198.99.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:4f:80:c3:5a:5b:06:1e:e1:1a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb23b03-9d1d-412d-a56a-493aeaa5d057
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=bd2346fe-8be6-48c0-9159-14182c19ad1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:47:57:2a:ee:d9:ac:fc:df:dc:93:27:91:5e:
                    25:aa:d3:48:e5:02:bf:ad:41:31:f3:58:15:cd:e6:
                    79:72:a7:23:34:b6:b2:12:7c:66:cf:8e:6d:c9:6b:
                    07:cb:b6:96:96:df:53:d0:39:05:8e:e3:e6:32:91:
                    a9:3c:b3:ab:24:ea:84:44:d9:09:23:c0:cc:fa:86:
                    1f:66:5f:83:f3:34:d9:e6:54:b8:ee:66:12:de:49:
                    48:02:19:1c:e9:77:09:f8:18:87:de:05:72:33:9c:
                    10:82:a3:ea:28:76:c6:a5:d0:47:7c:cf:92:98:a3:
                    68:ed:b0:6f:95:2a:85:43:84:43:36:91:71:c5:47:
                    cd:42:34:97:d5:03:62:de:84:15:7d:af:c1:97:f5:
                    13:c0:25:47:07:24:44:60:6f:00:e0:3d:b6:a2:83:
                    53:c2:db:d7:df:d8:5f:d7:2f:f9:eb:bd:c7:ea:1b:
                    db:03:c9:b1:c1:0f:55:8a:06:98:0e:05:76:ba:f1:
                    ce:a0:46:31:05:56:4a:fe:f0:35:f9:a3:ed:a2:f3:
                    94:53:b7:ad:d3:16:d9:64:ed:a4:b9:d6:3c:00:02:
                    09:9f:70:15:d0:79:62:bc:cd:c8:a8:eb:74:4a:13:
                    27:d2:de:06:9b:81:e3:78:dc:08:da:7d:4f:7d:5e:
                    2e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1C:3C:BD:47:A4:72:11:5A:02:22:4A:88:AE:6D:7C:0A:80:BB:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/ba10d448-b912-33bc-a392-2588e49baea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057/6eb23b03-9d1d-412d-a56a-493aeaa5d057.crl

            X509v3 Authority Key Identifier:
                keyid:36:34:B6:69:CC:BF:86:C1:CA:BE:06:6D:34:F3:24:A6:86:D3:31:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6eb23b03-9d1d-412d-a56a-493aeaa5d057.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.99.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:4e:6e:97:19:45:48:28:c1:96:45:8f:92:67:11:3b:fd:c7:
         c1:5e:7e:ed:9d:08:7f:1f:4d:4e:61:dc:69:a4:6b:ee:90:ae:
         19:34:e4:97:31:76:02:e5:9a:35:ea:7d:4c:a7:39:21:31:0b:
         6d:41:5a:25:9c:d1:82:0f:83:51:fc:18:39:b1:40:f6:32:49:
         06:e9:bd:9e:62:5d:92:0b:9e:8d:76:60:99:80:a2:65:b0:a7:
         9f:e6:64:c6:c9:4c:5c:69:61:3f:86:ee:b5:95:87:bb:be:96:
         c3:37:62:1b:f3:bf:88:a0:aa:4d:62:89:90:15:7a:28:3c:3f:
         04:47:5a:0e:e2:e6:d7:79:2b:a3:dd:f3:5d:96:e6:83:a4:75:
         39:e9:a5:39:2f:d8:51:43:cf:dc:9f:29:da:d3:e7:da:a4:3a:
         34:83:14:3f:3a:4f:e8:32:66:fd:d0:b4:41:5c:a8:41:12:79:
         98:a2:3a:b7:3a:a8:e1:01:1d:a1:5e:07:2b:54:3a:65:33:54:
         e2:c3:43:0d:87:e6:4d:31:a3:5b:eb:66:3f:14:c2:fd:12:fc:
         1a:4a:d2:58:63:ff:f3:56:01:12:fd:0d:b6:22:0e:16:1e:44:
         69:c7:9b:d3:26:90:18:73:2a:5b:44:18:c2:e6:01:99:4a:f4:
         4d:05:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:45:01 2026 by rpki-client