Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e3097ac4-0467-3459-9e40-4787274b1015.roa
File:                     e3097ac4-0467-3459-9e40-4787274b1015.roa (raw, json)
Hash identifier:          WwrhuiZxu/AUyJWqyt5/LmqFFAtodUJuDSBM/iX/0hs=
Subject key identifier:   7E:56:8F:12:D4:E4:65:73:F2:26:3A:BB:C7:43:D1:17:44:B3:C1:3C
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584F497709EA08C529BB7DC59A00
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e3097ac4-0467-3459-9e40-4787274b1015.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     2559
IP address blocks:        198.241.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:77:09:ea:08:c5:29:bb:7d:c5:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=dca65ccc-5134-4016-aa75-abec5d5b9ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:58:cd:c4:78:66:da:c6:aa:50:d1:dd:38:
                    6a:30:21:56:58:b7:56:c3:b7:2a:01:e1:48:23:09:
                    e5:87:60:19:f7:a2:49:9a:31:32:15:61:32:7e:7e:
                    96:c8:9f:1b:35:c8:76:05:e1:e3:db:6f:93:27:20:
                    6b:ff:d7:9e:d6:20:39:a3:99:ab:f2:d7:4d:f6:5d:
                    ba:08:b3:e5:1b:05:b5:6e:6d:8f:e0:34:73:16:a4:
                    2d:40:a4:60:89:33:13:37:62:bd:c4:bb:1e:77:65:
                    14:36:7d:a2:2e:f3:55:df:3a:19:ef:0c:e8:f5:e3:
                    79:e8:79:02:24:1c:56:16:8f:54:45:88:71:b0:66:
                    2b:91:68:76:74:e6:cb:51:ad:cb:aa:f4:82:30:c5:
                    ac:9a:c8:a7:65:55:d4:28:80:c2:76:61:f1:94:13:
                    06:75:d5:a9:9e:27:61:ac:1b:a1:1a:ff:9b:6f:45:
                    53:0d:09:94:28:32:8c:8b:ad:87:66:22:d7:d4:ec:
                    29:c7:e1:aa:0b:4e:4c:a0:59:66:df:40:ff:ab:90:
                    bf:76:f9:66:4d:26:1d:ae:01:f0:cc:04:0e:74:cf:
                    ec:1a:cc:21:cc:f0:81:c8:ef:e7:42:cb:7a:12:e8:
                    44:b1:51:9a:59:67:39:37:6f:82:ac:dd:72:75:af:
                    18:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:56:8F:12:D4:E4:65:73:F2:26:3A:BB:C7:43:D1:17:44:B3:C1:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/e3097ac4-0467-3459-9e40-4787274b1015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:bb:22:1f:d3:77:ec:93:c6:0c:72:23:f9:46:e4:2a:c1:40:
         d4:37:9d:b7:a1:47:df:50:a3:71:0d:77:cd:eb:e5:f2:b5:bb:
         e7:41:db:6d:55:2c:4e:38:a9:71:d5:8c:3a:49:17:f0:17:ab:
         fd:4b:48:bf:7e:69:49:f4:3d:02:15:71:8b:6a:38:50:7f:3b:
         db:59:55:e3:61:2a:50:5f:90:c1:52:1e:39:ec:51:0f:e5:74:
         f1:1e:e6:36:a2:2d:d1:dd:e0:7a:8b:38:9b:7a:1d:da:f0:4b:
         08:62:26:ff:11:ed:14:d3:95:6f:78:a3:0b:76:81:67:d2:d6:
         26:de:9a:4c:ca:4a:9f:28:97:f3:25:4f:08:d2:68:c8:34:04:
         8a:50:21:8b:18:7a:9e:6d:f1:3c:ab:5e:b4:8f:e1:f8:e5:8a:
         0b:4d:c1:d2:8f:61:18:90:5b:f6:ae:62:52:71:68:07:f7:d2:
         1d:81:62:77:34:4c:e9:25:96:18:c3:50:6c:e8:05:89:48:2d:
         f0:f6:a7:33:2c:db:4b:79:94:37:99:97:ca:f8:fe:e7:8e:62:
         f4:4e:67:87:80:00:9b:a6:81:a7:63:cb:8e:31:5a:3b:fb:4d:
         37:c3:9d:95:f6:48:b2:ba:33:74:26:1e:05:7a:02:1c:8b:e6:
         cd:7e:ec:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 22:30:25 2026 by rpki-client