Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa
File:                     dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa (raw, json)
Hash identifier:          USgoegGTc7m5RuMX0EjpP++SR88lzHbLZ97sE76X9mE=
Subject key identifier:   32:A9:FF:48:4E:65:18:FC:78:77:96:DA:01:87:3A:7C:AC:AB:24:05
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F4328584E227445D5144CA72F01F93300
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     11032
IP address blocks:        198.168.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:45:d5:14:4c:a7:2f:01:f9:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=5fd99c37-7a0e-4282-b3dc-387542a517cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:43:b4:58:33:63:14:a0:af:6c:b3:fe:20:2e:
                    41:a9:0b:11:11:a0:a2:a8:de:f4:48:bc:7f:18:04:
                    7c:dd:94:c8:3f:f0:e2:41:10:f0:69:30:9a:b8:3c:
                    e9:81:e7:31:d4:b8:3d:2c:30:4e:31:df:f7:72:b1:
                    0d:db:9e:8f:aa:8e:87:fa:d7:f8:01:be:e3:1d:45:
                    a0:f3:ac:cf:45:4d:f4:6e:2a:75:a7:fa:22:19:a1:
                    52:65:82:e7:a2:e4:24:af:95:76:5d:88:42:c1:23:
                    dd:2e:b7:bf:5f:3f:61:df:27:4e:76:9c:e1:9a:26:
                    a3:0a:a0:d9:22:c1:c5:a3:80:73:be:d7:33:df:fa:
                    5f:7b:f3:de:2c:26:e4:95:86:43:dc:9a:19:3f:ba:
                    f6:1d:64:d7:67:a1:25:c5:b9:db:2e:67:3d:98:9e:
                    6c:3e:53:07:da:62:b6:6b:ff:42:6a:42:e7:39:35:
                    2a:ba:cf:34:8e:05:68:96:37:86:5c:40:0e:1f:85:
                    64:4b:ac:7e:fc:55:1e:ef:eb:fb:ff:84:49:c6:65:
                    9a:1b:a6:9f:9e:b6:9e:e8:fc:c8:d4:28:bf:53:57:
                    22:a2:e5:18:f2:88:8b:63:1d:79:e9:f9:e4:d0:88:
                    a6:2b:bc:ef:d2:c0:db:78:a4:f5:d7:86:f8:c4:7d:
                    54:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A9:FF:48:4E:65:18:FC:78:77:96:DA:01:87:3A:7C:AC:AB:24:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/dc42bf38-a183-33bf-8ffe-05da2c7a8836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.168.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:bc:16:54:07:4b:6e:85:5f:8b:5c:83:2d:b8:68:49:57:bd:
         4f:7f:04:fa:8b:b2:a6:79:e9:15:27:48:d1:b6:da:02:06:08:
         27:8f:97:88:7d:c1:90:18:64:25:2c:80:c1:98:7d:85:08:d9:
         b1:f2:1e:ec:09:30:e9:32:47:a7:7f:22:54:c3:d2:b9:c9:fa:
         96:2b:89:12:c3:80:f1:9a:34:d7:4e:66:b3:0e:3a:32:1a:f1:
         0b:4e:b4:e0:d5:a0:b9:16:00:3d:01:a6:2b:4b:18:f2:99:66:
         90:dc:13:b1:df:9f:f6:c1:82:31:6e:22:07:e5:2e:30:1e:8e:
         5d:60:30:43:76:51:de:34:48:d7:3a:ee:34:0b:03:8c:84:cc:
         33:08:eb:15:fc:8f:4b:18:10:5c:5b:6c:b9:15:77:31:b2:25:
         70:91:69:0b:7e:b9:02:c6:f5:28:ab:5a:3f:dc:ce:b3:c5:3c:
         63:57:d9:9f:33:9d:d2:fb:96:77:e8:3c:75:19:a6:ed:6c:5f:
         60:e6:0f:1a:e7:a5:47:85:b1:b8:e6:56:80:44:56:2e:a2:07:
         9a:f5:43:1c:a4:ed:02:b5:80:de:30:e6:4f:1f:8c:03:47:33:
         13:b3:cd:b2:f5:70:e0:09:88:5c:48:61:74:79:3f:e2:45:cc:
         96:ed:6b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:34:05 2026 by rpki-client