Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/c71a15d2-e000-33ce-85be-6790968c961e.roa
File:                     c71a15d2-e000-33ce-85be-6790968c961e.roa (raw, json)
Hash identifier:          l1dnHb49/ukplmMSTaVFeDexWrw8gqgawB9ypT0lCC8=
Subject key identifier:   22:64:C2:07:A3:05:61:BE:D7:C0:55:E1:26:1F:C2:5B:33:6F:FD:4A
Certificate issuer:       /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Certificate serial:       010D0C9F4328584E0DB828D3E8385E0FEB935100
Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/c71a15d2-e000-33ce-85be-6790968c961e.roa
Signing time:             Wed 03 Jun 2026 22:45:05 +0000
ROA not before:           Wed 03 Jun 2026 22:45:05 +0000
ROA not after:            Tue 01 Sep 2026 22:45:05 +0000
asID:                     397709
IP address blocks:        198.203.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:b8:28:d3:e8:38:5e:0f:eb:93:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
        Validity
            Not Before: Jun  3 22:45:05 2026 GMT
            Not After : Sep  1 22:45:05 2026 GMT
        Subject: CN=0a76b0e4-c96d-41bc-ab78-36092cf46280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dc:26:d0:8d:5a:05:c7:e7:f4:5f:cb:89:1d:
                    9b:72:03:bf:c4:a5:1b:8a:32:12:98:30:c4:82:2d:
                    5b:91:88:39:bb:ae:60:ce:95:66:b0:92:bd:85:ca:
                    61:3b:47:b2:c9:ac:28:2e:61:4d:86:90:5b:fb:20:
                    9d:a1:cd:e2:d9:f4:36:ea:79:d1:6d:7a:59:1a:51:
                    b3:d3:6a:55:fb:c1:0c:22:2a:2a:32:45:3d:46:e2:
                    be:7e:af:d2:c2:ac:6c:38:c1:0b:1d:84:05:9b:20:
                    97:db:e2:06:13:29:cb:fe:8d:20:66:6a:de:64:2e:
                    d6:5c:18:fa:16:15:53:5a:23:2b:67:0d:31:0d:cf:
                    e1:ab:d9:0a:ea:cc:21:8d:26:11:d7:eb:b9:d8:8c:
                    c8:51:e6:14:60:86:8d:7e:ec:bf:0d:b0:cf:ed:3f:
                    1d:ae:36:81:fd:ee:49:92:40:c0:1d:1b:4a:f9:9c:
                    64:59:b6:8e:bf:5e:ab:a1:4d:41:2b:f6:94:0b:b7:
                    5f:2b:b4:a9:03:42:fb:26:11:ba:cd:77:75:61:eb:
                    e3:36:50:9b:b6:04:89:c1:be:29:47:36:e4:54:b8:
                    7d:b4:79:04:35:e9:5e:bc:a6:6b:12:09:90:b3:b9:
                    9c:c7:dd:05:f6:f6:1e:8a:25:44:3c:18:b4:15:dd:
                    fe:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:64:C2:07:A3:05:61:BE:D7:C0:55:E1:26:1F:C2:5B:33:6F:FD:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/c71a15d2-e000-33ce-85be-6790968c961e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl

            X509v3 Authority Key Identifier:
                keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.203.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:8f:7a:58:1d:4d:7c:90:45:4e:ba:91:63:b0:18:ad:33:
         6e:88:05:76:a0:be:a6:32:07:cf:53:92:15:b6:c0:2c:35:09:
         78:ce:66:b8:f0:c1:0e:2a:43:e7:25:8e:ab:11:51:5d:ed:3c:
         dd:a2:77:49:57:63:18:ba:d3:17:83:fa:48:24:c5:19:45:c4:
         66:6e:ea:74:f4:ea:81:ce:32:f0:2d:d9:5c:df:3d:68:86:48:
         ff:67:2b:1e:67:3e:03:5d:4d:9e:6c:e4:21:32:15:58:2f:1b:
         af:70:3e:62:ba:90:ce:23:37:1a:fb:13:02:2c:12:70:66:29:
         d6:8e:68:d0:56:ea:f8:ee:5d:7f:4b:6e:33:85:aa:7e:52:99:
         21:d6:54:89:a2:37:08:15:b9:0c:0f:7b:7a:6c:ae:4c:58:5a:
         24:cb:ed:d4:fd:9f:5a:71:7b:64:3b:cb:8e:5f:c9:05:e5:89:
         f4:94:21:e7:bd:c9:ff:c4:cd:a0:b7:fd:6b:86:5d:63:7f:93:
         49:e8:57:32:4e:40:cd:b2:e7:7d:07:53:30:f9:d9:c1:81:46:
         99:0f:08:f4:95:23:d6:1c:9b:d6:7f:74:49:72:f1:8d:96:96:
         ab:24:69:26:c1:20:00:f8:15:99:95:9e:4e:92:bf:6b:0d:ce:
         58:f4:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:40:23 2026 by rpki-client