Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/00ec0363-a384-3f2b-a277-a906a7ee103b.roa
File:                     00ec0363-a384-3f2b-a277-a906a7ee103b.roa (raw, json)
Hash identifier:          YkSR+n2Oiavi8FhwA10BuMgexFki5NsuvW+LkffbVCo=
Subject key identifier:   E5:2B:AE:B3:EA:9A:2D:CA:8E:A4:2F:73:E5:1A:F6:4E:B4:E0:69:AA
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DBA438D1565FDD3F74EF80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/00ec0363-a384-3f2b-a277-a906a7ee103b.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     396978
IP address blocks:        198.85.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:a4:38:d1:56:5f:dd:3f:74:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=d0abed66-2f7a-4e8c-ab6b-32b29c7b9797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bb:78:b8:c8:20:47:0d:64:22:b2:67:e9:0f:
                    e5:0f:ab:d4:ed:6c:03:f5:95:08:4b:e1:6b:f5:cd:
                    63:70:66:c5:df:fc:7c:5c:51:52:a2:51:33:c1:bc:
                    c6:0a:cc:6f:f8:c3:59:65:8b:79:58:13:80:dc:0b:
                    46:4e:6c:e7:d4:14:26:70:23:a5:d6:a3:6e:c9:b7:
                    74:6a:9c:f0:84:c3:9f:f0:6e:52:0a:9b:75:44:e4:
                    d2:cd:ab:e6:bd:0f:32:5e:b4:7c:48:66:fb:1b:04:
                    78:2c:4b:fb:ca:94:9c:46:f5:65:ca:62:9e:20:e0:
                    b8:fa:fd:6a:93:ef:23:0a:17:75:97:f4:de:ce:89:
                    18:92:9f:5e:d3:63:a9:21:b0:c2:64:09:29:8c:ac:
                    14:5d:0c:47:3c:d5:6f:e6:de:dd:d8:2a:41:9b:12:
                    dc:d6:79:11:09:de:26:62:ae:7c:3b:d0:27:8a:c7:
                    41:3f:5e:ef:ca:78:eb:23:7d:d2:04:67:a6:a7:ea:
                    c2:f4:68:27:0b:21:81:8b:e3:99:3d:c5:ed:c8:38:
                    f2:4d:61:87:e6:e1:ed:f2:52:0b:91:dd:da:03:3b:
                    68:fc:37:7a:71:70:36:34:6c:32:6b:d2:1d:3d:1f:
                    d6:e9:77:99:1f:32:07:7f:1e:61:d9:65:26:f7:a7:
                    18:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2B:AE:B3:EA:9A:2D:CA:8E:A4:2F:73:E5:1A:F6:4E:B4:E0:69:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/00ec0363-a384-3f2b-a277-a906a7ee103b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.85.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:39:9b:92:4b:46:0e:0a:51:48:23:88:f4:9b:47:c6:80:5d:
         c9:bb:7a:cc:41:ca:cd:57:bb:15:6a:0f:d4:74:a2:5a:9b:a7:
         6e:5b:fc:ec:10:34:90:cd:4d:c1:68:1d:66:40:fc:1e:a2:54:
         0b:ee:ce:b6:92:fe:d4:e3:40:aa:dd:7c:79:da:e4:a8:9a:48:
         f1:b2:8b:97:a2:07:af:8c:8d:49:0a:f7:9c:35:e1:e0:a8:2a:
         d9:83:01:a3:87:e8:10:3d:e1:da:e1:13:8e:b5:fc:9d:29:c1:
         c1:93:f9:10:05:14:5f:9a:75:83:86:6f:d4:f9:75:6a:85:d2:
         65:7c:63:d1:f1:92:d7:67:0b:f2:76:24:aa:c7:94:83:6d:2b:
         e5:61:01:d3:80:2e:73:bf:10:11:8f:f1:d9:08:ca:a2:d6:2a:
         6a:ab:ba:d8:52:fb:0f:6b:b3:b7:42:6a:db:52:07:a0:96:fc:
         3a:78:7f:e2:ff:8d:ca:08:09:e8:68:41:8a:42:75:ed:db:68:
         db:28:a8:58:9e:01:03:22:f7:6a:25:b5:71:56:9e:96:b9:87:
         2f:be:7e:f3:ad:e3:37:46:6d:13:ad:3c:d3:94:11:70:c3:e6:
         0a:b1:90:0f:dd:26:49:8c:83:74:cd:bb:25:4d:65:58:1e:91:
         f5:1b:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:33 2026 by rpki-client