Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa
File:                     9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa (raw, json)
Hash identifier:          N8tbDUZLJeVfYF7zjOhYbPkzXsYgLthVq6GA3jzr07s=
Subject key identifier:   7B:B9:A3:1D:47:3A:1B:66:CE:17:AD:88:5C:C8:38:A3:FB:9F:2C:08
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F4328584F03A794B8200A2DC3F8C83D00
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     54334
IP address blocks:        198.133.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:94:b8:20:0a:2d:c3:f8:c8:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=6a51638b-2236-4ec9-8ac6-503f8fadedd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f3:c4:88:8b:ee:82:a1:d5:ec:2e:4e:5c:8a:
                    aa:ae:08:8f:f2:30:0e:be:36:e1:ab:6a:fe:40:5c:
                    25:2e:33:ed:37:2e:51:75:85:63:73:bb:06:fe:32:
                    f1:86:00:69:15:5c:16:ea:85:9d:81:8d:ff:12:2a:
                    56:5c:00:35:ca:de:85:e9:a5:f4:00:fe:1b:5a:65:
                    f3:8e:bf:b8:be:3f:31:89:2b:80:1f:48:cc:6b:9c:
                    d4:2a:f5:a1:d7:c9:d9:7b:36:c8:48:36:df:03:4e:
                    ad:03:d6:6a:19:c8:8c:ec:e3:96:ae:68:e0:58:e9:
                    16:3a:55:cd:1a:6e:6e:5a:d3:7f:7e:ca:e8:25:f2:
                    e7:30:95:05:be:39:6e:0b:22:81:2d:d9:9e:68:ab:
                    5b:6e:a5:66:01:e0:d1:37:b1:2f:11:d6:19:0e:8f:
                    4f:8f:4c:00:7c:e3:37:a5:d5:33:f4:ff:9a:55:e8:
                    6b:d2:1d:96:9a:a0:02:93:c3:07:07:b4:38:fa:24:
                    5d:af:d8:d6:05:4f:1a:79:21:59:1f:e0:b0:de:e1:
                    7a:5a:21:cb:e2:09:88:7d:d4:67:e1:ee:d7:41:ef:
                    68:5c:8e:3c:99:fa:5c:4d:66:97:b8:4f:85:c7:fe:
                    1b:c0:b3:08:03:3e:1d:20:c1:99:b5:4a:ba:e2:78:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:B9:A3:1D:47:3A:1B:66:CE:17:AD:88:5C:C8:38:A3:FB:9F:2C:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/9a9fe228-0c29-3c72-b8c4-fb20f31baca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:21:5a:6c:d3:32:6f:05:3a:5c:9c:13:d2:b5:37:8c:df:c8:
         06:fd:e8:50:20:62:f2:85:3e:96:68:37:b8:20:c2:32:b6:01:
         00:92:a6:8e:07:e9:14:58:77:0a:b4:a1:32:4e:0c:c6:65:99:
         25:4c:ed:45:89:c8:04:fc:c6:2a:42:e5:f7:4b:29:01:2c:e7:
         ce:fd:27:b8:15:68:1e:04:a3:bd:c0:32:e0:30:0f:97:36:cb:
         53:41:19:83:b3:eb:67:f8:81:f3:85:66:13:de:60:55:fa:53:
         ce:25:b6:34:66:37:12:44:67:78:3d:62:31:79:aa:d7:f1:15:
         ae:b2:ba:ab:1f:67:23:70:f6:f4:65:bc:18:af:49:88:7a:f0:
         a6:6b:02:a1:ad:c5:91:2b:88:06:4f:fb:42:8e:e5:9b:8a:f8:
         a9:a7:12:f8:a2:13:fc:91:37:4b:7c:d9:c0:01:fa:65:e1:d6:
         6e:3c:91:4e:8c:d7:9a:fc:71:d3:72:4d:ea:f0:ad:00:7e:d9:
         73:f6:6e:90:e9:48:a6:53:ed:2e:bc:07:79:60:b2:7e:0d:d4:
         12:a0:28:91:f7:55:dc:7f:52:13:2b:ac:79:33:a5:e0:50:3e:
         57:50:93:2b:44:05:8e:70:86:0f:e1:93:9b:e7:d2:a4:11:68:
         2f:90:16:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:45:52 2026 by rpki-client