Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/76e29080-1ced-3a9c-8b38-7095879ff568.roa
File:                     76e29080-1ced-3a9c-8b38-7095879ff568.roa (raw, json)
Hash identifier:          z+Ekb6MmCWF7HO6KPdYA1BBZYPDXrXiWccqUdbO9yn8=
Subject key identifier:   D6:E8:53:C2:87:8B:6F:E9:F5:9D:3F:97:06:B0:CB:95:ED:1C:B0:2C
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F103799677EBFC527EDDC4600
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/76e29080-1ced-3a9c-8b38-7095879ff568.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     64267
IP address blocks:        198.1.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:99:67:7e:bf:c5:27:ed:dc:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=ddc4515c-d43f-4805-b800-c331719d24ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:ec:8f:56:a1:65:14:45:87:5f:df:70:2b:
                    81:7a:f0:96:53:c8:7a:36:69:d0:94:3c:82:08:da:
                    3f:63:15:87:48:ea:4e:a3:cd:ba:8c:0a:ed:21:2a:
                    f7:a2:3d:cc:0c:1b:70:91:2d:7c:14:4b:80:70:8f:
                    3a:44:4b:f2:64:51:d3:55:81:22:0d:a4:8a:a4:f4:
                    27:3b:4b:3a:06:6d:30:2c:4c:34:7b:2c:ae:5c:b1:
                    a5:6d:6c:05:d0:60:7e:c4:19:5e:18:64:f0:3c:0f:
                    15:00:52:27:24:ab:89:26:be:2e:61:a1:6f:d8:e9:
                    85:01:6e:c4:d8:3a:02:99:c1:2d:13:fc:58:1c:32:
                    66:65:82:0c:8f:f0:c1:f1:0f:c5:4a:d8:18:b0:52:
                    72:f8:c6:4e:3c:f3:69:71:8f:59:7b:7c:3f:0c:31:
                    9d:a1:94:3c:c0:b1:4d:29:be:b4:ce:ce:46:ea:f5:
                    71:4d:e2:71:b2:c8:c1:d9:60:e0:fa:fd:b0:7a:3c:
                    7d:18:0e:16:90:20:f1:b1:3a:30:06:ca:19:8b:69:
                    0c:40:c7:4d:fa:68:0d:9d:c8:ba:69:9a:65:71:e6:
                    d5:39:91:cc:98:05:ef:02:18:89:2c:ad:5d:ee:ee:
                    d7:a0:c8:bc:30:60:6e:01:5b:14:8e:b3:6a:9b:9c:
                    21:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:E8:53:C2:87:8B:6F:E9:F5:9D:3F:97:06:B0:CB:95:ED:1C:B0:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/76e29080-1ced-3a9c-8b38-7095879ff568.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:ff:d1:61:b3:c9:7c:2f:10:49:94:12:9f:73:1b:72:ee:
         39:fe:40:d2:c2:8b:8d:90:ca:96:f2:07:82:43:00:68:e5:75:
         c5:e8:48:62:6d:66:22:56:ac:1c:0c:d4:b1:b3:da:f8:77:40:
         a8:ff:fb:10:9e:de:a6:24:b4:f7:ed:1c:5d:97:92:7d:04:78:
         95:22:72:30:a0:3d:9c:9d:21:13:2b:1f:a5:a5:62:2b:97:74:
         72:da:d8:b2:80:6e:3b:02:df:cd:46:75:f1:c2:e1:f6:4c:9e:
         05:28:b9:b0:0a:d7:8c:ef:6b:10:63:c2:f1:2b:7c:fb:e3:1a:
         18:b8:5b:e3:9f:8b:92:ef:e6:9b:36:00:9e:91:03:83:1e:da:
         c6:0c:73:60:ea:04:71:5e:d4:de:45:0f:e9:e1:ef:04:20:84:
         bf:ee:14:9d:cd:47:95:b1:e5:76:42:09:1b:c2:b4:65:d9:a9:
         49:b1:fe:7e:5c:10:c2:c2:8f:43:7e:4a:b1:ad:e9:42:c1:bb:
         e0:04:2f:ed:ea:8f:ae:38:df:61:66:c0:d1:37:9f:39:3a:5b:
         03:af:25:e4:b8:2e:96:1c:0b:76:b0:d6:19:1f:97:3b:18:f3:
         1d:7b:8a:57:83:59:b7:de:63:43:95:64:56:0c:c0:c6:fe:65:
         f4:fc:65:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:53:08 2026 by rpki-client