Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1c0d7381-86d9-3edd-ad16-6ad5907b707b.roa
File:                     1c0d7381-86d9-3edd-ad16-6ad5907b707b.roa (raw, json)
Hash identifier:          fwQOHGUrabkMjpOT8qjjlrOF6XMo4tWVi449Wdjwbtk=
Subject key identifier:   2F:EB:9D:97:98:5F:04:37:8D:46:F6:6B:BF:B5:4D:B3:6E:ED:4C:91
Certificate issuer:       /CN=38e671ad-3e19-48ff-801c-f18f3c194278
Certificate serial:       010D0C9F4328584EA78774857C4252E232A69180
Authority key identifier: D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1c0d7381-86d9-3edd-ad16-6ad5907b707b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     62563
IP address blocks:        198.57.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:74:85:7c:42:52:e2:32:a6:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38e671ad-3e19-48ff-801c-f18f3c194278
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ed1e4bce-995e-4981-b158-7d3bb57a6ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a2:0b:2c:e8:b3:8a:b2:4b:e5:67:9a:9e:91:
                    5f:e7:bb:e5:78:8a:8d:c0:90:27:ce:e5:c5:ce:53:
                    29:5a:90:8a:e4:a4:1a:d7:84:b2:b5:52:e4:50:2b:
                    f6:55:bd:98:c4:ac:18:37:5b:9e:f5:52:62:f4:d9:
                    89:83:e2:b0:4a:48:8f:d7:64:68:f9:2e:05:7f:59:
                    6a:94:62:55:ca:34:ad:89:e7:e2:81:1b:4b:a4:4d:
                    ce:5d:6a:6f:ec:b1:30:0d:e3:b5:77:c4:f7:12:ef:
                    47:91:16:db:f2:e4:0f:54:f3:9b:ee:89:20:0f:20:
                    05:2a:15:a0:f4:aa:07:cf:b0:33:20:b7:45:60:90:
                    b3:7d:f4:1e:78:11:b2:49:b2:f1:8a:09:4d:6e:b7:
                    35:ce:87:c2:1b:ef:31:4a:5b:82:eb:8d:f0:3a:56:
                    86:40:18:ce:ba:ef:8c:7f:95:ac:89:55:45:cd:e2:
                    c7:2d:95:c3:d2:b3:91:c9:f6:5b:8f:85:85:59:a6:
                    70:e2:6f:6c:0a:eb:78:7c:ca:27:c9:1d:b3:b4:ce:
                    b5:9e:f2:d7:2c:dd:1b:3b:d9:52:40:4a:e7:b8:38:
                    49:a2:4b:48:20:a8:f8:b7:bd:de:1b:b4:ac:d2:53:
                    9b:88:bb:7a:06:13:8a:d1:a5:a5:53:2a:c3:7f:c6:
                    fb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EB:9D:97:98:5F:04:37:8D:46:F6:6B:BF:B5:4D:B3:6E:ED:4C:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/1c0d7381-86d9-3edd-ad16-6ad5907b707b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278/38e671ad-3e19-48ff-801c-f18f3c194278.crl

            X509v3 Authority Key Identifier:
                keyid:D1:CF:F5:CE:46:C1:96:A2:5D:CA:E0:03:28:62:05:08:08:F3:EC:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38e671ad-3e19-48ff-801c-f18f3c194278.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.57.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:20:89:ba:73:bb:bb:04:3b:50:05:ca:fb:03:c7:d9:ef:
         c2:ff:d0:88:38:84:5c:3e:31:98:a8:5a:fb:d2:18:4e:5c:3e:
         ad:00:fa:41:65:bf:b5:91:7f:32:59:8b:b4:fc:80:cb:5c:77:
         da:f6:1e:97:85:99:f4:56:34:19:b4:0c:d7:8f:cc:43:97:62:
         78:ec:c5:a3:ec:70:28:03:45:b8:f8:37:78:4e:ab:29:f5:1d:
         bd:ab:2d:cf:64:52:c2:98:5d:52:66:e9:f0:c4:0a:05:37:0c:
         43:cb:bb:a2:f1:1c:77:c8:b7:ca:d0:c5:1b:36:cd:d8:b1:0e:
         72:5c:7a:9f:d6:05:e0:a9:72:78:57:a3:df:f7:39:f9:76:4d:
         be:f2:64:a6:56:f0:7c:b3:34:dd:67:21:ba:bf:c2:0e:36:d1:
         87:06:67:e2:99:61:d9:6c:fa:78:3d:e2:72:51:c0:3a:0b:71:
         cf:33:b6:0a:a4:bd:62:0e:b6:23:02:96:af:91:22:b9:1d:6f:
         17:6f:40:cb:14:83:de:d9:72:fc:18:89:ca:83:e3:f1:9e:49:
         28:6f:6d:1b:a0:cf:dd:60:1e:98:7c:ae:3f:0c:78:5f:50:27:
         40:a3:95:8c:26:77:74:60:95:60:c1:03:e7:27:59:37:94:a3:
         88:c7:a7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:08:07 2026 by rpki-client