Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/12775cac-651a-3bcd-88b5-86c3b3bb3ff0.roa
File:                     12775cac-651a-3bcd-88b5-86c3b3bb3ff0.roa (raw, json)
Hash identifier:          5lMKhxmFQ+3lHPCjJrlDrwU9HUrL+EzBuV27epiLDBM=
Subject key identifier:   91:C5:CB:14:7D:8D:24:54:31:94:32:0B:E9:07:7E:AB:17:1A:8A:08
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584F331D319DE50E28A40E9C9780
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/12775cac-651a-3bcd-88b5-86c3b3bb3ff0.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     19905
IP address blocks:        198.23.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:31:9d:e5:0e:28:a4:0e:9c:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=db1df22d-85fe-4db6-b1f9-cb69f8841dbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2e:f9:13:2e:d6:9b:86:a5:ef:47:fe:8d:3b:
                    74:16:ea:dc:c2:18:1a:b3:4b:e1:d4:fe:a8:c3:76:
                    8f:9e:21:6f:07:35:ea:1f:b4:58:a3:b5:08:5d:ea:
                    51:4e:f8:84:07:9c:c3:e6:d6:7a:7c:be:d4:4e:56:
                    a9:14:b6:42:c8:04:cf:75:6a:42:04:bf:14:93:6e:
                    16:c9:bb:a2:f9:98:44:0d:61:ea:e7:b4:1b:e1:a4:
                    23:ff:01:28:5a:64:f7:8d:52:6a:31:fe:2c:e7:c6:
                    05:39:aa:40:2a:2d:02:92:14:16:dc:96:22:f5:2c:
                    a0:74:3b:78:aa:ce:8f:b6:ae:bc:98:8e:07:bd:84:
                    93:50:c4:aa:56:28:f8:44:5e:49:f4:e6:88:73:b6:
                    d9:de:21:10:d5:9e:9b:76:cf:32:ee:1a:3f:66:db:
                    aa:dc:dd:6f:89:3c:42:96:b4:67:94:59:0c:50:cf:
                    04:6e:9e:e8:1e:53:64:20:43:05:cd:fb:b8:3b:e1:
                    da:34:b5:f4:21:a9:a3:4a:03:b9:ef:25:d0:f7:09:
                    ba:c2:d9:8a:d5:78:c6:1b:28:d0:b1:f7:e6:34:4c:
                    94:76:a8:9f:21:69:c4:ab:35:8e:67:d5:6c:66:eb:
                    df:c4:b1:7e:65:f5:30:6b:ab:76:43:4c:b3:91:58:
                    e2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C5:CB:14:7D:8D:24:54:31:94:32:0B:E9:07:7E:AB:17:1A:8A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/12775cac-651a-3bcd-88b5-86c3b3bb3ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9d:89:bc:73:1c:f9:db:9a:d0:a9:7a:87:05:de:18:89:12:
         e4:29:f0:fa:88:6d:9a:7b:d3:1b:53:bc:2c:fb:11:a8:f7:85:
         90:02:7a:cb:d9:51:ac:d7:b7:85:49:67:db:f9:57:8d:36:1d:
         00:26:0d:1c:0f:b4:21:3a:6c:c3:9c:c6:ca:f1:50:a8:30:b6:
         05:9c:a5:df:bf:6a:84:30:ac:33:95:98:04:26:e1:08:2e:4a:
         67:1e:74:51:3e:bd:24:0d:89:84:7e:8d:03:1c:a6:61:7f:8c:
         00:ac:cb:10:6d:99:69:22:0a:80:f5:2d:53:5b:74:e6:85:66:
         fb:12:cf:3f:87:52:b9:f8:03:41:61:63:d8:94:36:c2:af:f9:
         ab:82:93:85:8f:4e:8e:e8:f6:19:fd:76:d4:5c:c5:9c:ce:69:
         31:75:97:cf:fa:03:f9:cf:9e:50:c0:a9:ce:2f:d8:39:52:d9:
         aa:7a:62:a4:a5:87:54:7d:f9:55:a7:a4:cf:80:62:a7:b6:6c:
         71:82:94:4c:9e:74:97:87:8f:10:88:fc:68:30:34:72:57:2d:
         62:33:63:6f:65:50:82:21:63:89:12:1b:50:a6:d2:73:40:4b:
         67:52:be:46:e0:58:dc:30:4b:3f:80:48:ef:dd:f0:fb:f6:8e:
         f9:ff:20:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:33:07 2026 by rpki-client