Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f095ee73-e6d9-3941-a991-5ed95dff1c5b.roa
File:                     f095ee73-e6d9-3941-a991-5ed95dff1c5b.roa (raw, json)
Hash identifier:          gm9xh6L79WZmXBEc5ysquZyF6e0a1QfGA7CbxCugsNA=
Subject key identifier:   3C:B7:35:44:21:08:2C:AD:5F:AC:1E:CC:61:F5:AE:14:B2:46:FB:76
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F2EF8A1516D1DF92B06E0A4C0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f095ee73-e6d9-3941-a991-5ed95dff1c5b.roa
Signing time:             Tue 15 Sep 2026 13:23:36 +0000
ROA not before:           Tue 15 Sep 2026 13:23:36 +0000
ROA not after:            Mon 14 Dec 2026 14:23:36 +0000
asID:                     401362
IP address blocks:        198.1.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:f8:a1:51:6d:1d:f9:2b:06:e0:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Sep 15 13:23:36 2026 GMT
            Not After : Dec 14 14:23:36 2026 GMT
        Subject: CN=d894b0be-49db-4a45-bdda-7fbd631e6694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:8d:27:f6:31:51:d8:cf:3d:51:c0:3d:e3:
                    a1:7f:ce:27:fe:75:37:2a:b6:1a:b8:90:e4:09:c8:
                    ad:ea:7f:74:a0:bc:6a:9e:d4:e8:2e:34:b7:c8:37:
                    82:4f:bd:1b:13:9c:c9:93:cd:5a:17:b6:4e:66:4c:
                    8a:e7:38:03:91:2d:67:44:ba:e3:90:c8:79:24:63:
                    6f:ca:66:e0:cc:c8:28:8d:9c:30:2d:ad:20:d4:98:
                    c5:4b:cf:60:13:32:9a:5a:48:aa:9c:70:b7:ef:e2:
                    cd:00:26:bd:f5:3f:6c:d4:dd:a1:13:32:7f:0e:0f:
                    b3:ca:fd:fa:41:ae:22:08:c6:a4:ed:cf:a3:00:84:
                    79:45:7b:bb:cc:2a:e4:63:e3:01:9c:5f:98:40:d2:
                    01:01:6f:4a:cf:22:c4:7a:47:37:1b:0f:14:02:12:
                    b9:1c:02:f8:bb:b1:42:94:6e:ce:e2:98:bf:19:75:
                    19:ed:c5:20:05:ba:7b:36:65:fb:57:a4:43:b0:c5:
                    59:54:ec:27:1d:fe:96:91:77:58:84:3f:e4:ff:e4:
                    77:47:7c:78:cf:7b:c0:ec:f4:79:9a:0e:b7:06:03:
                    be:4f:60:c5:52:88:90:6f:5e:31:04:f0:b8:c0:0c:
                    bc:ba:b8:2e:b9:d3:5f:db:e0:d2:76:a2:34:3d:d9:
                    13:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B7:35:44:21:08:2C:AD:5F:AC:1E:CC:61:F5:AE:14:B2:46:FB:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/f095ee73-e6d9-3941-a991-5ed95dff1c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:13:7c:5a:08:44:76:9a:9f:ea:88:1c:c2:c5:9b:67:f8:
         a5:f2:56:6a:90:84:25:e2:f0:87:56:4c:57:2e:bd:9b:6c:61:
         c8:88:8b:c9:08:e0:1b:71:08:df:99:64:64:81:7c:08:41:cf:
         d8:9b:87:55:26:d5:42:3d:3a:27:42:ff:e9:28:61:2a:c9:2f:
         05:ed:68:44:07:e8:f1:a4:2c:58:72:3e:19:98:53:42:e4:6e:
         9c:53:57:ad:75:7c:8e:06:fd:a9:e3:4a:1e:f9:9c:62:95:8a:
         1e:3d:57:d9:50:1e:71:03:ee:98:45:89:43:28:c6:c2:75:03:
         99:41:0a:02:92:17:c4:5c:13:e0:7a:1b:28:61:db:ed:81:81:
         26:84:5b:9c:38:43:dd:96:1c:99:88:ae:71:86:cb:e0:89:af:
         22:e1:a4:d1:4e:8b:e4:91:02:fe:18:b0:9f:d6:aa:41:b0:db:
         bc:6a:69:a5:00:59:65:7d:64:2a:f8:bd:72:9a:85:7e:84:50:
         99:aa:ae:d1:15:bc:b6:f2:ab:97:72:5f:09:88:aa:ef:c9:17:
         5c:8a:1b:e1:ea:d6:43:6c:99:99:1d:2b:3d:8b:27:45:42:87:
         2e:21:37:50:5c:23:18:71:90:e7:92:11:86:73:8d:e5:c8:db:
         ed:c2:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:11 2026 by rpki-client