Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ff91d2d4-1312-374d-bb72-7e2738d45f92.roa
File:                     ff91d2d4-1312-374d-bb72-7e2738d45f92.roa (raw, json)
Hash identifier:          gQetQUQtIor8+L+sycrSHpchF2/3rKKr/K6C+Ssk5TI=
Subject key identifier:   CC:85:C6:7D:61:69:2D:BA:47:02:29:0B:EE:56:07:E9:57:F3:D3:2E
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584EA796E7EE1FDB573CD23B1900
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ff91d2d4-1312-374d-bb72-7e2738d45f92.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     81
IP address blocks:        198.86.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:e7:ee:1f:db:57:3c:d2:3b:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=36f974e8-3794-4184-96ad-67819bf9e206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f0:ee:cf:ce:4d:b4:be:56:0f:09:7c:7e:06:
                    3c:1f:fd:1c:50:e3:10:3d:74:55:0f:54:87:ab:e2:
                    40:24:ef:42:6b:40:7d:43:c2:1a:54:35:52:40:d3:
                    59:d1:e4:f6:60:68:0f:b4:9c:cc:03:e7:1f:cf:9e:
                    ad:35:40:c7:eb:48:cd:b6:c9:1b:85:53:60:7e:f5:
                    d2:aa:33:dc:29:5e:21:d8:5d:dc:51:bb:a6:ba:13:
                    a7:16:99:25:a8:29:20:3e:df:d6:ab:51:94:3b:50:
                    7b:bf:3a:e9:e2:72:5a:77:e2:dd:01:f2:da:c9:e1:
                    e8:61:fc:1f:72:2d:14:1f:03:fb:68:1a:bf:63:08:
                    2a:83:70:59:c2:2d:16:2d:11:d9:ee:00:de:fc:66:
                    48:2e:1f:0c:42:c9:fa:40:e0:f6:6b:13:e2:f5:73:
                    0d:3f:8d:1e:d7:29:00:b0:b1:6b:91:7f:c5:dc:bc:
                    c5:fe:e2:74:60:d7:90:40:cf:ad:c3:ef:b1:f8:12:
                    83:fd:61:21:95:c6:84:54:29:87:b2:fa:57:1c:df:
                    53:f0:55:2e:93:45:a4:6a:34:a0:ec:39:23:a4:d3:
                    1b:3d:fb:b3:6c:54:d7:4f:9c:ca:6b:cb:d1:7b:6d:
                    1e:47:b2:2b:f7:3b:24:c5:43:3d:a5:db:39:36:86:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:85:C6:7D:61:69:2D:BA:47:02:29:0B:EE:56:07:E9:57:F3:D3:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ff91d2d4-1312-374d-bb72-7e2738d45f92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:23:75:aa:8f:cf:6e:f2:3a:bb:be:b4:71:b7:a6:26:79:0b:
         d7:d0:8d:3f:1b:64:03:40:22:62:71:1f:a4:1f:c0:7a:98:c5:
         91:f2:4c:f9:29:dc:2e:67:e5:23:39:77:c7:4f:df:cf:2f:77:
         04:da:11:34:10:5f:3f:e0:f6:f9:34:53:ce:de:ab:34:22:27:
         e9:75:36:7c:74:f9:47:cd:9d:48:81:9f:69:5c:8a:d9:fc:61:
         fb:db:b3:c0:fa:c2:31:7c:61:be:b6:e6:6a:86:7c:be:5e:a2:
         1c:04:a7:b2:b5:c9:2e:c5:a8:cc:ba:20:7e:fd:51:19:13:b7:
         0a:2e:60:8e:b2:87:fd:1f:ab:55:f1:53:25:27:a3:9c:19:96:
         43:69:2c:10:d3:c4:bf:79:bc:3d:e8:35:c7:08:10:e2:38:2a:
         b0:be:4f:43:01:ea:f3:45:15:c8:6f:3f:83:ce:4c:a8:21:71:
         97:e7:db:c7:3e:7f:a4:73:7b:26:09:79:3c:1c:12:b4:fd:d1:
         1e:4b:75:62:4d:93:c9:be:27:50:ca:88:37:b4:25:fb:96:7c:
         12:bd:85:33:58:e0:dd:ae:97:a2:4c:2f:49:86:f4:f7:af:e6:
         69:97:e0:47:4e:2e:05:e1:07:64:00:21:e4:f2:6c:19:f3:43:
         bf:f0:d7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:12:00 2026 by rpki-client