Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3bae7e7-4277-39c5-9a64-87855a736d74.roa
File:                     a3bae7e7-4277-39c5-9a64-87855a736d74.roa (raw, json)
Hash identifier:          PUswZl/XRx83PLLd58Z/lnqtnNGj75SleQj0oQ3+iQo=
Subject key identifier:   AA:BD:09:14:B9:00:E5:D5:52:96:5C:4F:A0:37:42:23:3B:4F:2C:AD
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584CD99D114388C2E4C5C421FA80
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3bae7e7-4277-39c5-9a64-87855a736d74.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22516
IP address blocks:        198.1.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:11:43:88:c2:e4:c5:c4:21:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=339ae066-8484-406a-88e7-264c70a55131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:b6:23:ba:5e:42:86:07:a4:1f:b6:db:09:
                    fc:28:77:ce:54:14:b8:e3:d1:ce:83:5a:01:17:eb:
                    02:fe:21:8c:c2:09:f0:e0:f0:ed:de:5b:4d:34:2f:
                    8f:4a:68:63:d6:d4:5a:31:04:a0:67:88:7a:e3:0c:
                    7b:40:fe:03:db:d1:ee:60:98:34:fe:6c:2c:8e:52:
                    22:d6:af:ee:13:90:ad:d0:18:42:8e:3e:7b:b4:16:
                    9f:97:b1:7e:3b:90:2c:76:50:03:b3:62:4e:cb:be:
                    bb:36:48:4e:27:d1:c0:5c:ea:65:32:2e:55:63:15:
                    2a:66:75:e0:5e:b0:d2:c5:09:2c:bb:ad:af:de:85:
                    6b:90:8e:bb:5c:aa:44:8e:4e:ac:f9:95:06:6b:79:
                    9c:67:0a:14:b9:81:4d:4d:f1:06:86:ff:36:af:1b:
                    52:44:e0:f4:cb:c3:c8:c0:a0:c9:0f:4b:dc:61:c5:
                    37:37:fe:c0:f5:23:1c:cf:9c:33:58:6a:a8:39:58:
                    e9:c6:76:cb:b2:47:87:a1:2c:27:b4:fa:6a:d2:68:
                    ea:6b:19:3f:f5:fd:a4:1d:ce:b4:56:be:6e:46:8d:
                    39:0a:b9:b6:20:1f:3b:90:47:d5:99:a6:9b:4e:6d:
                    28:0a:7c:98:23:e6:1c:54:d4:71:a1:99:21:c9:30:
                    2d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BD:09:14:B9:00:E5:D5:52:96:5C:4F:A0:37:42:23:3B:4F:2C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/a3bae7e7-4277-39c5-9a64-87855a736d74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:0e:06:ec:c0:94:99:fc:d3:e0:55:ed:13:3f:5e:ec:c4:97:
         01:b1:6e:fe:52:12:94:98:1f:4c:fd:e8:8a:15:2c:71:76:f2:
         99:b9:5a:d3:b4:19:be:14:cf:fd:5a:30:e4:f0:eb:a8:75:eb:
         bb:ff:55:09:b0:4a:6e:fe:e5:c0:21:63:ca:00:aa:0b:78:21:
         d6:55:8e:b9:2f:7a:0e:9b:f2:b3:7a:f8:3e:45:da:5b:15:b0:
         4d:2d:45:9a:e8:ca:e0:38:84:80:be:98:a4:f6:49:8a:2b:2e:
         97:2b:30:36:52:0e:a9:2f:e8:c5:9f:27:c9:69:ea:c4:17:29:
         aa:6a:a6:97:d7:7c:35:c7:57:0e:b5:18:5a:4d:2e:75:f7:04:
         a9:c2:70:69:6a:42:56:59:9f:0e:65:6c:2d:bb:30:75:b6:f5:
         ac:47:a0:05:5c:24:0a:e9:07:b2:fa:36:93:49:d5:6e:dc:a1:
         ff:fa:07:dc:d8:17:26:a6:8b:a3:22:7c:5a:3c:16:13:8b:61:
         e7:d8:6e:17:97:68:04:65:4a:f8:d0:bb:2f:3e:ca:24:1d:26:
         40:91:79:35:85:42:49:fb:69:fe:47:70:d6:5c:5e:fe:25:f5:
         9c:c7:70:84:8f:7c:68:0b:f3:96:50:78:e7:7c:f8:b2:32:97:
         9f:3c:95:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:27 2026 by rpki-client