Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f925b585-cac7-38a2-b727-438cb5b1ce22.roa
File:                     f925b585-cac7-38a2-b727-438cb5b1ce22.roa (raw, json)
Hash identifier:          cbwFN1D8S2WdrnCE78N8bzINAgAlco0OjMHwp1/fiwA=
Subject key identifier:   03:D2:1D:CE:CC:4D:25:F1:60:FF:47:8B:04:17:C6:B4:9E:72:59:AB
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584DDBBB127AC2BB610C1FD3F33C
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f925b585-cac7-38a2-b727-438cb5b1ce22.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     2559
IP address blocks:        198.241.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:12:7a:c2:bb:61:0c:1f:d3:f3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=9f101782-c48e-4bd3-98c3-c2026c959014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:d7:2d:00:bb:19:21:ce:a3:67:1d:fc:f2:
                    01:22:d8:19:8b:77:df:4e:49:d0:f3:cd:17:89:07:
                    77:be:46:d6:0e:de:79:e0:ef:2f:e7:b5:f4:96:d0:
                    5d:ba:4e:c2:52:e2:31:c4:54:65:bd:23:48:64:1e:
                    59:ed:d8:71:60:0e:a8:a8:45:aa:63:a1:1c:ee:d1:
                    62:bd:61:77:66:73:dc:c7:f6:d7:fa:f8:c2:fd:cc:
                    bc:c1:50:08:68:68:47:d5:3f:2b:30:f8:43:0a:f7:
                    f6:4a:1d:c8:44:56:94:6e:1a:f1:37:3c:36:4d:9e:
                    83:6d:54:6e:72:fe:7b:00:18:71:f4:29:4e:13:70:
                    bd:0c:53:bd:4a:db:98:d3:2d:3c:df:eb:50:20:28:
                    b8:1a:c4:57:08:d6:54:2a:e2:13:39:ec:31:83:3d:
                    ef:5a:07:6f:9c:1a:fa:e2:b6:5a:e7:b6:18:31:fa:
                    1b:38:85:cd:1a:6a:b3:b8:ee:fb:f2:24:e6:13:e3:
                    9d:8f:24:9f:a5:e5:40:85:ac:10:e1:d7:2a:ff:98:
                    6c:31:a3:cd:d9:61:48:c7:f0:73:e0:fe:82:e1:43:
                    2c:5d:f8:f2:e4:fe:b2:a1:df:66:8b:13:97:75:91:
                    b0:2a:c7:53:da:8d:8d:a3:14:db:ed:96:78:f4:df:
                    b1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D2:1D:CE:CC:4D:25:F1:60:FF:47:8B:04:17:C6:B4:9E:72:59:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/f925b585-cac7-38a2-b727-438cb5b1ce22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:47:c1:93:6e:d3:51:ec:3a:09:36:b9:9d:05:5c:39:c3:79:
         0e:b9:53:00:00:f9:00:4a:f6:c1:02:61:08:6f:42:84:7f:e0:
         83:2d:9a:2a:a2:d3:c4:3e:20:5a:02:da:8b:c7:2d:8b:72:91:
         11:e7:fb:4a:2b:fe:5c:98:36:d7:04:65:03:09:7c:bd:5d:1b:
         a4:89:c9:76:e2:1a:87:a4:66:87:1e:38:82:09:0e:2f:1a:f4:
         cf:ce:cb:c9:95:14:b6:ac:14:8f:0b:bc:d1:76:88:86:05:00:
         69:0c:28:b1:4e:e1:84:5e:d3:10:4d:02:82:1f:5d:06:0c:51:
         58:5b:1f:6a:d7:07:a1:46:88:8d:df:32:d8:d3:c1:7a:40:1c:
         84:2b:b2:79:5c:f5:b0:2a:98:d0:c8:6f:70:12:df:eb:ab:10:
         dc:64:8e:ef:97:44:dd:2d:9a:90:4f:15:71:8f:28:3b:ec:c5:
         c9:15:e3:b6:e6:70:4f:08:ca:9a:d6:f7:d0:2f:c7:97:4b:14:
         ee:99:f3:49:93:b8:28:21:93:89:7d:60:82:5c:d8:d8:fa:67:
         85:a2:f2:50:b4:4a:75:2e:9f:63:20:45:ac:30:4a:a8:d5:fb:
         00:84:11:0f:fd:63:d9:6b:c0:06:24:12:d1:34:4c:58:76:9d:
         23:0c:29:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:01:40 2026 by rpki-client