Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/98d649d9-c1a9-30c6-b37c-542d4d58aaab.roa
File:                     98d649d9-c1a9-30c6-b37c-542d4d58aaab.roa (raw, json)
Hash identifier:          UniiAVIqCDLIM3LYtxqww2ufruePQ/IkOHh5ffx1CCA=
Subject key identifier:   EF:74:3B:A3:FA:10:FF:A8:45:CB:6D:68:3D:92:DA:67:54:B5:D5:87
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F4328584D84170A247F6A4AB2312AC680
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/98d649d9-c1a9-30c6-b37c-542d4d58aaab.roa
Signing time:             Wed 15 Apr 2026 15:34:42 +0000
ROA not before:           Wed 15 Apr 2026 15:34:42 +0000
ROA not after:            Tue 14 Jul 2026 15:34:42 +0000
asID:                     51852
IP address blocks:        128.254.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:84:17:0a:24:7f:6a:4a:b2:31:2a:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Apr 15 15:34:42 2026 GMT
            Not After : Jul 14 15:34:42 2026 GMT
        Subject: CN=431efc1a-8f46-4dc8-bea7-ea9b8474866c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:55:0f:7d:8b:1f:69:7f:bd:c9:a2:10:9f:97:
                    cf:58:a4:be:78:d1:06:45:b5:10:c4:c9:6d:f2:bb:
                    fe:6d:ac:e4:8e:dc:b9:b2:eb:8d:c2:70:cf:3c:86:
                    ef:d6:5a:85:42:04:2d:07:87:e2:35:96:be:fa:46:
                    fe:4d:54:78:cd:a1:08:65:ec:3c:23:5f:10:f2:90:
                    bd:19:cd:e3:bc:43:9e:9a:bc:dd:91:b5:c4:43:54:
                    14:65:af:19:c8:34:1b:82:40:72:ac:ff:f1:6a:8f:
                    6e:1e:c1:ad:c5:1c:37:bb:e1:d8:da:de:70:af:b1:
                    e8:9e:8a:75:67:28:05:18:87:ec:97:ea:0c:22:d5:
                    b0:ce:2b:97:28:17:27:bd:ab:8e:82:ff:3c:6b:89:
                    4b:8b:60:ec:6c:32:cb:01:47:2e:c0:82:ad:5f:92:
                    23:4c:c8:62:86:56:ed:28:0e:6f:2b:2e:07:f2:61:
                    f6:f0:15:c8:2f:cb:e2:ef:51:2d:c4:bb:12:5d:47:
                    10:f9:35:ab:40:14:4f:1b:2d:c3:c2:8b:52:38:89:
                    54:97:2a:f6:69:9b:15:df:79:f4:44:db:48:9d:66:
                    26:dc:43:10:bf:97:74:81:4c:98:fe:1d:5d:ad:d0:
                    f5:00:ec:39:c9:07:77:e0:22:c3:38:0a:fe:64:ad:
                    6d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:74:3B:A3:FA:10:FF:A8:45:CB:6D:68:3D:92:DA:67:54:B5:D5:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/98d649d9-c1a9-30c6-b37c-542d4d58aaab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:1c:95:4c:18:4b:ec:56:b0:e7:b7:73:f7:92:f4:1e:1e:c4:
         b1:35:d8:8d:16:62:b5:1d:47:8f:89:8f:e9:fb:54:04:80:73:
         90:60:84:ca:fb:5f:16:da:40:55:ae:51:92:1d:bc:70:e2:d3:
         76:db:2d:9b:84:c5:21:79:fa:59:3e:2f:06:fe:10:ea:32:58:
         83:ce:c7:c5:9b:02:ef:69:7a:bf:9a:fb:69:8c:7b:35:90:01:
         63:08:84:93:99:3e:c9:59:69:d9:83:c7:2c:7e:02:f9:9c:6f:
         60:ea:d9:d3:0c:eb:1f:f0:63:12:0a:2d:b8:d9:15:f3:82:d9:
         8c:9b:a5:c7:cf:5a:50:85:56:35:03:c1:f0:80:e9:2f:f3:f1:
         19:24:32:c9:91:38:88:22:b7:3f:b7:c0:3f:07:e4:b6:ef:48:
         ad:55:36:0d:ac:08:b7:ea:41:f2:18:b0:1c:2c:a7:26:13:33:
         eb:0f:6a:62:d1:2d:40:92:2e:09:0c:2c:be:29:71:f0:75:68:
         49:4b:a9:8f:01:d7:3f:f7:05:65:ea:c1:22:d1:e8:6f:2e:4a:
         96:11:b8:c3:cc:26:9d:fa:fa:04:86:c7:19:ac:d6:c3:2a:5a:
         c7:45:8c:ae:45:6d:48:b8:49:65:28:0d:a5:c6:52:a3:d8:42:
         76:00:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:34 2026 by rpki-client