Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa
File:                     b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa (raw, json)
Hash identifier:          SDZuOEj1jqpyOdZPJCIx2ZDOItaUsAjyLz2VXD3/wbU=
Subject key identifier:   6C:59:BB:AA:40:09:D8:E7:A4:2C:87:51:2A:5A:3F:EE:53:B3:B7:6C
Certificate issuer:       /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial:       010D0C9F4328584D87FA92AA38BA20708E5AC620
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     26548
IP address blocks:        198.45.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:92:aa:38:ba:20:70:8e:5a:c6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=31b4b3dd-0a3e-4d44-9de6-c194c1dbae4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:aa:5e:bb:b7:b0:bf:fc:c4:f4:02:47:24:66:
                    50:6a:f1:79:dc:cf:f2:81:d7:d3:59:1a:4c:b1:fa:
                    43:6c:24:25:ba:9f:ca:2d:d2:15:93:20:21:41:09:
                    46:f1:e2:e8:3d:4c:5e:ec:27:34:ec:ca:fe:96:70:
                    95:0d:6b:50:89:c6:ab:cf:42:ca:d3:39:02:91:b6:
                    71:1d:3e:08:90:2c:e2:66:90:4e:05:d5:c9:ca:67:
                    8b:67:e9:70:7b:d4:f3:40:34:89:3f:02:29:f2:3e:
                    4d:3b:16:73:17:70:24:dd:29:c8:cf:f9:f4:9e:de:
                    8b:12:7c:2b:98:9e:d1:dd:6e:ab:63:7d:9f:04:7f:
                    37:3c:5f:da:82:7c:a1:b5:69:9f:30:7d:07:ab:d3:
                    4e:7a:ae:e0:0d:3a:86:10:1d:a8:40:0b:25:0c:c5:
                    6f:93:c3:17:5e:f2:b7:da:77:b3:5a:d4:38:4e:2e:
                    42:1d:3a:fc:a7:c3:ca:7d:58:82:15:ab:76:c1:d0:
                    28:ea:7b:c3:c0:5a:25:47:63:5d:99:d7:f4:a2:d2:
                    82:ff:7e:a5:67:75:97:52:b1:9c:14:b7:8d:4b:51:
                    c7:ff:17:4c:1f:28:2d:4e:1c:1b:d3:c7:24:cd:61:
                    42:37:1e:ad:c4:b4:67:c3:4c:cd:e9:01:41:bd:cb:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:59:BB:AA:40:09:D8:E7:A4:2C:87:51:2A:5A:3F:EE:53:B3:B7:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/b04e6f71-3e6f-3df8-9e25-69a7d34037e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl

            X509v3 Authority Key Identifier:
                keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a8:af:c6:95:99:95:49:da:9c:30:fa:71:7a:30:5d:52:bc:
         99:c7:cc:19:41:8f:86:ec:34:2d:d6:a7:dd:6f:41:64:c6:62:
         7e:5c:c8:04:c1:d8:d0:44:e4:ed:41:16:70:00:17:7c:81:57:
         34:02:85:9b:db:ac:df:91:c9:27:78:90:db:6b:78:e8:62:a7:
         77:e7:0a:03:bf:55:d1:03:d5:29:af:34:73:88:00:ca:ba:95:
         ec:3e:3b:7b:1c:3d:15:df:da:06:f8:fe:17:82:e4:ca:a5:74:
         15:a5:3b:2c:8f:1a:b4:ea:96:a7:3d:51:6b:01:db:e2:b4:fd:
         b7:65:e2:03:cc:10:64:97:25:ca:46:d4:d2:d2:35:a1:97:a9:
         57:f5:3a:2f:a9:fb:a4:30:10:8d:fe:83:54:6e:5f:65:da:ca:
         aa:82:82:8e:6f:c2:dd:08:71:ef:9d:d3:45:82:e4:f3:dd:12:
         d5:7d:31:95:f6:37:c6:03:d6:6e:58:30:8e:53:62:1d:1b:22:
         ea:8d:d9:0c:25:ae:a8:00:7d:5c:0a:14:f5:c6:1c:40:38:71:
         14:d6:37:f6:c8:7f:22:e1:e8:21:df:1d:82:18:59:84:95:9a:
         a7:b7:d3:4f:29:1a:2d:a5:13:1e:4d:c2:d9:a8:4e:5b:5e:34:
         ab:eb:eb:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:35:58 2026 by rpki-client