Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/6b114035-9678-3077-b3c1-d882a147c347.roa
File:                     6b114035-9678-3077-b3c1-d882a147c347.roa (raw, json)
Hash identifier:          kwoQi5BhxDlP+BQdi7d1ArY6cRzZ/WqMJMM5xIcdlxQ=
Subject key identifier:   85:BD:42:34:37:22:CC:22:F6:D6:6D:FD:25:5C:C4:89:93:51:9B:D4
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584CCE71F029D9553CC6CA7D6DA0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/6b114035-9678-3077-b3c1-d882a147c347.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     834
IP address blocks:        198.1.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:f0:29:d9:55:3c:c6:ca:7d:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=eb3937af-a34a-41c2-8c5a-c3bb1cb2684f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:14:db:58:8d:bf:9a:3a:41:28:51:b6:70:08:
                    4d:ab:49:d8:fa:15:2e:0f:17:6e:70:51:8c:10:f1:
                    a2:f8:47:76:6b:8e:75:5b:78:4e:c5:7e:00:5d:c4:
                    10:c2:2a:62:ee:ca:9c:7f:2f:1b:db:10:03:96:b3:
                    4a:ab:0d:3c:29:c1:b9:cd:b4:79:e2:82:eb:b3:09:
                    5d:2c:94:a0:3f:72:3f:af:a1:2b:0a:22:08:9a:31:
                    7b:ab:87:ac:d9:96:0e:5e:a0:bc:55:f0:c9:4a:ce:
                    c8:34:35:de:37:c2:6a:95:df:ca:18:61:7c:6e:cb:
                    ec:81:15:f7:5f:7a:0c:16:49:00:8c:e0:c3:3c:67:
                    39:19:74:03:89:c6:6c:31:d3:2b:c8:a8:bc:75:b8:
                    d6:82:53:0c:7d:80:0a:f5:23:0a:f4:12:d2:23:8a:
                    6f:e0:2c:dd:67:60:80:d5:4d:a5:80:36:5e:3d:44:
                    cc:a6:cb:dd:56:4b:22:d9:b7:49:72:3c:e8:3f:78:
                    cf:eb:cc:f2:c3:2b:07:e6:3d:24:89:f3:43:d5:42:
                    7c:b8:35:e2:54:27:9a:31:68:a4:05:e9:26:1c:a0:
                    38:8a:6e:c7:c7:3f:92:5d:ec:43:63:4b:89:c5:53:
                    90:c9:e1:24:d5:13:92:db:11:38:8e:94:b4:13:b0:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BD:42:34:37:22:CC:22:F6:D6:6D:FD:25:5C:C4:89:93:51:9B:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/6b114035-9678-3077-b3c1-d882a147c347.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:46:e8:70:49:be:b5:a7:a8:35:2e:42:45:28:ef:27:21:d3:
         85:16:e7:3e:92:0a:d2:3b:e9:60:ab:b3:77:c9:5a:31:16:4d:
         5e:06:89:89:84:5d:5a:45:f5:9a:7b:30:32:9e:07:59:23:d5:
         a1:fd:c6:5b:e7:2a:ae:62:7a:42:69:9d:96:3d:1d:2e:17:4c:
         4b:1e:8e:29:0e:c1:ab:6c:e3:51:86:85:b6:d6:ec:39:47:ae:
         9c:d9:b0:fb:fb:eb:8f:c6:0c:ba:3e:fc:a8:25:98:d9:d5:a5:
         5e:f2:95:0b:9c:fa:68:49:d2:18:0d:40:13:c3:b1:c7:ce:6f:
         03:2f:7c:de:e3:db:7f:ac:ed:62:11:ec:9b:d4:8f:53:42:77:
         e2:a9:c8:06:e3:f2:a6:fd:62:cc:9f:e3:e5:66:20:97:70:14:
         21:c7:ba:e9:de:dd:96:70:9c:67:31:68:0a:00:e2:d6:a7:e2:
         ef:26:a6:e4:e1:13:02:52:f8:d1:e8:1c:1d:a5:bb:d4:08:de:
         5f:dd:90:2e:db:46:7a:da:c1:21:a5:f0:18:63:01:4b:9d:2d:
         93:0f:b4:7e:7f:82:79:6f:9a:22:d2:2e:c8:8d:1a:09:27:01:
         73:18:f8:a0:35:7e:05:a3:ac:f4:5d:1d:2e:98:4b:5a:19:7e:
         53:ab:5a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:22:52 2026 by rpki-client