Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/b8c9c2ba-c1d4-37d7-a2dc-48680af87650.roa
File:                     b8c9c2ba-c1d4-37d7-a2dc-48680af87650.roa (raw, json)
Hash identifier:          er7q035vf44TYluSlfTdUJNuSjdtDjcbfrk4hVSeNT0=
Subject key identifier:   FA:D0:58:AC:BB:70:E0:13:82:52:88:AD:83:D3:7A:19:28:40:A7:8E
Certificate issuer:       /CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
Certificate serial:       010D0C9F4328584F23C28425015529473B33DD9C
Authority key identifier: EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/b8c9c2ba-c1d4-37d7-a2dc-48680af87650.roa
Signing time:             Fri 11 Sep 2026 13:00:12 +0000
ROA not before:           Fri 11 Sep 2026 13:00:12 +0000
ROA not after:            Thu 10 Dec 2026 14:00:12 +0000
asID:                     2675
IP address blocks:        198.103.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:23:c2:84:25:01:55:29:47:3b:33:dd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fea95c9f-c5c1-4a36-a73f-df548116ba56
        Validity
            Not Before: Sep 11 13:00:12 2026 GMT
            Not After : Dec 10 14:00:12 2026 GMT
        Subject: CN=50749fd8-8583-4d73-af06-7de3001dc7c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f7:fd:e9:33:22:65:a1:3a:f6:35:91:26:c8:
                    16:e1:85:b9:79:e5:ae:92:cf:db:c7:d1:7f:4c:2f:
                    d8:1a:f5:78:c4:76:f8:08:0d:b7:1a:4f:27:58:aa:
                    57:79:c0:14:76:47:59:64:04:7b:f6:6c:78:df:85:
                    9d:3c:04:a0:ab:49:2b:cf:4f:fd:e3:cb:20:f6:07:
                    03:5a:40:4c:90:ca:83:f8:e7:ea:d2:1e:26:46:c8:
                    c5:4b:23:aa:b2:be:2c:a9:3c:a4:9e:e9:58:a4:cd:
                    6e:11:e9:7a:1f:f5:ca:42:1e:9e:fa:72:b0:4e:b8:
                    a8:e5:32:f4:db:42:e4:b3:fd:45:f3:6d:7c:a7:09:
                    90:7e:b1:1b:26:c4:94:e0:12:00:33:08:72:14:81:
                    a9:cd:2a:c8:d7:24:a9:f2:d1:13:47:3b:a6:d6:dd:
                    37:7d:a9:71:4b:51:26:1a:70:68:f3:e6:7e:8c:34:
                    64:fd:e1:80:7f:5c:31:cc:37:71:10:2a:2e:f3:66:
                    66:c5:02:e5:cf:a1:92:be:2e:d0:35:3d:33:9d:a3:
                    59:87:45:4a:3a:d4:0e:b7:d6:1e:b1:f2:10:1f:05:
                    a3:a4:ae:ac:cb:70:b9:4e:4e:c9:9a:55:d4:3f:e2:
                    b2:67:ab:1b:08:84:d3:f1:90:1f:a4:b8:b3:db:c3:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D0:58:AC:BB:70:E0:13:82:52:88:AD:83:D3:7A:19:28:40:A7:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/b8c9c2ba-c1d4-37d7-a2dc-48680af87650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56/fea95c9f-c5c1-4a36-a73f-df548116ba56.crl

            X509v3 Authority Key Identifier:
                keyid:EC:82:56:C9:51:D2:88:E8:7D:FD:F9:87:94:97:5C:75:7A:CB:66:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fea95c9f-c5c1-4a36-a73f-df548116ba56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.103.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:8c:0e:fb:07:76:c2:6c:0a:82:fd:12:45:b5:7c:84:a2:
         b3:94:25:7f:a4:80:50:06:de:97:da:21:aa:49:df:de:d1:6f:
         d2:9a:7b:26:88:bf:06:06:7f:04:f9:cb:55:22:56:3d:e4:93:
         73:ff:a7:81:3f:b9:fc:1e:7d:12:43:37:9e:46:1a:b6:e0:38:
         ab:3a:5c:a1:33:5a:fe:9e:12:a1:9d:38:fe:12:99:c1:01:27:
         70:97:79:73:2f:b8:39:8b:1a:56:b6:c0:1d:b5:72:5e:aa:51:
         af:0f:3e:e9:96:47:31:66:ee:83:00:c4:a0:cd:84:fc:ce:a3:
         66:e4:71:cd:61:88:11:65:c1:20:12:4a:d4:26:3d:5a:ea:2f:
         c6:95:3b:02:06:5e:00:a3:bb:3e:18:84:f1:f8:54:cd:4e:49:
         15:22:d8:43:55:bc:61:1f:de:23:1e:71:d4:34:e7:b1:41:b7:
         74:11:50:3b:f9:31:ba:73:86:73:74:a2:b6:d8:f6:2c:61:fa:
         1d:08:5e:7c:b6:74:52:9d:b7:26:b0:7b:b0:cf:08:6d:a2:28:
         32:78:d3:8d:07:24:ab:00:78:8d:61:ee:06:27:08:d2:51:e0:
         b4:c3:01:61:5c:9d:4c:cf:57:dc:93:5e:ca:98:fc:96:32:fc:
         57:ec:cd:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:38:54 2026 by rpki-client