Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa
File:                     4280c96f-e83c-3483-a3d8-84f727a16bb3.roa (raw, json)
Hash identifier:          rfJEMdCkwa2IzBr05DduODJbFVfWl5QJd65tcCw5GfY=
Subject key identifier:   52:CA:6F:3C:69:AC:52:3C:3E:20:05:27:B1:71:44:25:61:B0:B6:71
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584E1B798F96F55F19A728901400
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa
Signing time:             Mon 08 Jun 2026 21:00:12 +0000
ROA not before:           Mon 08 Jun 2026 21:00:12 +0000
ROA not after:            Sun 06 Sep 2026 21:00:12 +0000
asID:                     2559
IP address blocks:        198.241.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1b:79:8f:96:f5:5f:19:a7:28:90:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Jun  8 21:00:12 2026 GMT
            Not After : Sep  6 21:00:12 2026 GMT
        Subject: CN=2946fa4f-0287-4beb-b36e-5d51ee8a6d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c4:b2:61:bc:68:de:ca:7f:d2:dd:d5:ac:19:
                    ce:4c:04:7c:aa:12:ad:50:33:7b:02:88:af:5a:55:
                    77:37:a6:cb:fa:89:05:69:a0:96:eb:6b:7c:ab:d4:
                    10:d1:a3:24:68:0d:c7:63:e7:96:98:9c:5a:7e:36:
                    ae:cd:29:2f:a5:eb:41:02:17:e5:47:97:3e:49:fe:
                    23:c8:58:7f:50:62:a1:f5:ab:5f:aa:5b:0a:9e:42:
                    e2:55:c3:ff:e2:42:13:de:9d:00:cb:85:73:cd:1e:
                    cc:7f:74:7c:8e:5a:37:90:93:16:e4:0c:a8:e6:70:
                    25:7a:6c:d9:60:9c:da:37:7c:35:ab:0f:28:13:93:
                    b0:f3:ab:28:2b:54:3a:dd:f7:72:54:ca:11:0b:85:
                    d1:23:11:0c:6a:a9:7e:fe:55:61:05:b0:c2:5e:a1:
                    43:55:f8:8e:4e:95:9b:4b:b5:04:01:43:f4:d8:56:
                    af:23:fd:17:1c:dd:62:50:dc:e5:b6:b0:f0:63:0a:
                    f3:26:72:af:fa:0f:31:8c:11:c7:c1:64:32:fb:ef:
                    d5:82:88:96:94:ed:8a:66:03:37:d0:82:34:7c:cd:
                    eb:a0:00:b2:fb:a4:94:df:c7:74:fd:01:74:21:19:
                    36:6d:61:6e:0f:da:9f:05:f3:a2:51:ab:ba:05:9a:
                    c7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CA:6F:3C:69:AC:52:3C:3E:20:05:27:B1:71:44:25:61:B0:B6:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4280c96f-e83c-3483-a3d8-84f727a16bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:b6:7c:5e:3e:f0:c1:b3:27:9e:78:49:91:fa:63:15:4c:a0:
         89:ec:cd:f1:c5:be:70:ba:8b:7e:6f:3b:d8:93:17:2a:a7:32:
         f7:47:d2:3d:cb:c6:2d:73:47:9b:69:45:08:64:be:45:a6:1f:
         ee:99:3a:b5:3d:d9:e1:75:78:04:91:95:71:7c:56:6c:92:67:
         f7:38:85:32:6b:02:ce:fc:f6:0c:dd:f7:d5:3f:c7:10:fa:72:
         69:73:6f:0c:5c:bf:e0:ad:9c:50:ee:75:78:53:f2:27:6a:2a:
         68:09:81:97:f9:a7:84:fa:6e:65:28:4c:56:41:c1:60:fa:7f:
         15:b1:f7:48:7d:86:26:55:5a:38:95:91:3e:65:0e:c9:bd:77:
         b1:d8:ab:49:b4:ee:0f:6b:98:83:a9:7e:49:ae:19:3d:d1:68:
         fb:57:ae:28:93:ac:2f:ad:f1:c2:3a:3f:7b:69:64:19:cf:25:
         9e:37:2b:25:56:f9:43:b6:51:1b:ab:5f:25:05:d4:df:40:58:
         7e:28:58:b9:49:cb:ed:3b:7a:ed:2f:60:a5:72:0e:3d:d5:4d:
         3a:fb:76:76:7c:72:4e:35:4b:e1:2b:73:88:b6:48:4b:48:52:
         5a:7b:c9:04:5d:d6:12:f0:27:8d:20:89:37:08:5c:c2:fe:da:
         01:9f:af:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:51 2026 by rpki-client