Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/8414eb1c-dd88-3f46-8664-ebe59c86fdbf.roa
File:                     8414eb1c-dd88-3f46-8664-ebe59c86fdbf.roa (raw, json)
Hash identifier:          WjwIwkigP/ueiapDhWfIw6Vau9NNiby4bVXJlouRvcU=
Subject key identifier:   BB:95:B8:75:83:3E:C2:9C:95:1D:07:52:2E:B6:89:2A:14:0F:65:94
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584C6E21511A67072733A2641480
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/8414eb1c-dd88-3f46-8664-ebe59c86fdbf.roa
Signing time:             Tue 06 Jan 2026 02:00:31 +0000
ROA not before:           Tue 06 Jan 2026 02:00:31 +0000
ROA not after:            Mon 06 Apr 2026 01:00:31 +0000
asID:                     30383
IP address blocks:        198.208.0.0/24 maxlen: 24
                          198.208.2.0/24 maxlen: 24
                          198.208.28.0/24 maxlen: 24
                          198.208.48.0/24 maxlen: 24
                          198.208.79.0/24 maxlen: 24
                          198.208.90.0/24 maxlen: 24
                          198.208.154.0/24 maxlen: 24
                          198.208.155.0/24 maxlen: 24
                          198.208.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:6e:21:51:1a:67:07:27:33:a2:64:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Jan  6 02:00:31 2026 GMT
            Not After : Apr  6 01:00:31 2026 GMT
        Subject: CN=6750d81b-269b-4965-9062-b8bc2922a7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:64:32:a7:67:91:ae:00:ff:e1:43:79:ed:
                    39:3b:ed:c8:e7:8c:b0:c4:30:ce:33:d4:4f:03:21:
                    34:41:cc:cd:91:b4:13:c1:23:bf:cb:5f:01:97:65:
                    16:01:8d:28:88:5a:b2:fc:65:21:00:7a:10:de:ec:
                    99:fb:34:25:82:70:6e:b1:fd:10:ca:a7:9a:8d:a9:
                    11:8d:b5:a7:49:39:65:8a:40:f1:93:4d:ba:42:07:
                    7a:7b:31:b5:68:ab:64:3c:4c:4c:5b:32:12:aa:38:
                    9e:7f:25:33:2a:60:96:d0:fc:b2:f3:54:3f:f6:d5:
                    84:99:74:3f:89:64:97:f3:5e:bd:62:bb:02:1e:d0:
                    15:a6:5e:2c:ae:91:71:ab:ae:fc:b9:04:dd:1f:4b:
                    af:71:98:98:24:a4:a5:4b:c1:8f:60:38:c7:9d:7e:
                    25:89:ea:e3:3f:98:af:69:11:42:58:87:83:f1:2d:
                    95:66:a3:19:23:dc:dc:c3:ac:74:ec:ea:8e:5f:96:
                    50:d2:a2:36:6f:a5:31:c7:94:87:d7:85:84:08:f3:
                    1d:f7:f0:5e:03:f9:48:ac:5a:b8:51:4c:21:69:52:
                    8c:6c:60:59:38:db:1e:31:68:0b:c8:93:42:44:c4:
                    ba:68:c7:10:8b:53:d1:7b:22:31:57:c9:64:15:fe:
                    af:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:95:B8:75:83:3E:C2:9C:95:1D:07:52:2E:B6:89:2A:14:0F:65:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/8414eb1c-dd88-3f46-8664-ebe59c86fdbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.0.0/24
                  198.208.2.0/24
                  198.208.28.0/24
                  198.208.48.0/24
                  198.208.79.0/24
                  198.208.90.0/24
                  198.208.154.0/23
                  198.208.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:5e:b3:38:b0:4e:41:31:21:e1:96:76:f0:45:e0:fc:2b:a5:
         2f:d3:fd:9f:37:58:a8:76:7b:3a:6a:df:7b:6f:15:58:fd:e1:
         44:ad:ec:f4:83:fd:1a:b1:85:81:5c:82:bc:0a:83:48:62:fa:
         de:d2:44:39:23:c2:fc:80:7c:a2:f0:6e:5c:0d:35:62:1a:c8:
         b0:80:8b:0c:1f:78:38:5c:ee:83:67:6d:76:71:f1:76:5e:96:
         66:5e:f7:78:1b:78:4f:6c:4f:e7:48:10:36:62:c3:a4:23:48:
         cb:ee:e9:f4:bb:43:ac:49:97:23:29:3f:47:5a:50:b1:7c:d5:
         ae:81:22:d0:ce:b1:c7:b1:9a:b1:96:7c:44:7e:66:4c:67:e3:
         58:32:e9:e6:44:29:77:fa:e1:b2:b8:c8:bb:fa:a2:19:35:81:
         8f:fd:83:75:1e:7f:57:79:0c:3a:d7:2a:5f:2d:a4:84:51:ee:
         26:97:7f:49:47:53:6f:2c:ff:15:43:9e:e1:91:db:75:35:ee:
         d4:1d:e0:8e:fd:34:99:fb:16:98:43:1a:da:2c:6e:6e:72:da:
         77:46:0b:72:39:90:97:9d:fc:94:30:1c:06:64:75:16:bf:30:
         ee:9a:27:d9:22:ad:2d:c2:53:88:f1:83:c4:9c:31:f6:bd:f3:
         0e:59:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:47 2026 by rpki-client