Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888/80c51c78-d860-3f71-9412-e6eb885e18ba.roa
File:                     80c51c78-d860-3f71-9412-e6eb885e18ba.roa (raw, json)
Hash identifier:          fL5CNDOdYhmWc2+q88BPQ+us94tQ1cvfLKFIZV9f3N4=
Subject key identifier:   6E:BA:9D:D2:BA:25:C9:C2:53:47:64:E9:84:59:90:51:1E:99:61:8B
Certificate issuer:       /CN=8e4e3399-63fe-44ac-8683-bec0b82b7888
Certificate serial:       010D0C9F4328584E059C868C55B74F759B4C9080
Authority key identifier: CA:63:9F:3A:9E:98:27:B8:20:FB:C1:1F:49:8B:31:68:0F:3F:B3:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888/80c51c78-d860-3f71-9412-e6eb885e18ba.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     32425
IP address blocks:        198.181.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888/8e4e3399-63fe-44ac-8683-bec0b82b7888.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888/8e4e3399-63fe-44ac-8683-bec0b82b7888.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9c:86:8c:55:b7:4f:75:9b:4c:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e4e3399-63fe-44ac-8683-bec0b82b7888
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=faa1240b-e8a4-4b69-94e9-e4abe5f83c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:3c:5e:1c:65:db:3e:94:80:6e:f4:67:51:
                    64:80:d3:fb:81:99:64:43:b8:66:f3:0d:11:5b:f9:
                    bc:25:0f:63:76:88:e9:6c:0a:0f:a1:d3:91:1c:a6:
                    2f:55:dd:b9:b3:0b:f1:c3:10:0d:ba:94:8d:68:0a:
                    76:54:6d:64:22:ec:bf:83:98:93:6f:ae:5f:3e:28:
                    a1:0f:97:96:c0:03:09:00:2f:25:8c:3f:a3:b3:34:
                    ef:ae:f7:6d:ff:2f:ed:1e:30:d3:56:1a:59:2e:f2:
                    c9:7a:f0:44:90:1c:55:1c:51:48:8c:e6:6d:59:87:
                    8f:37:42:1b:f0:95:ca:31:91:a5:e2:9d:5b:93:23:
                    a6:2d:f4:35:54:2c:c2:33:2d:09:13:7a:fe:32:a1:
                    c5:29:a2:20:75:1c:42:c5:fd:7b:77:6e:8f:0e:90:
                    fb:77:03:f6:47:a7:e7:f6:34:a2:11:50:93:a1:d5:
                    f6:cb:71:10:f8:39:ec:d9:10:4a:9b:61:45:21:23:
                    84:a2:68:37:62:d1:24:a6:52:c4:96:bb:38:09:ea:
                    8a:0c:ed:4a:9b:be:20:f2:94:d5:20:2c:56:f3:f3:
                    1c:a1:22:cd:77:95:10:dd:1f:94:5a:f8:f3:4e:8b:
                    03:06:fb:5c:25:69:8a:52:f0:c5:f9:f0:84:7f:3c:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BA:9D:D2:BA:25:C9:C2:53:47:64:E9:84:59:90:51:1E:99:61:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888/80c51c78-d860-3f71-9412-e6eb885e18ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888/8e4e3399-63fe-44ac-8683-bec0b82b7888.crl

            X509v3 Authority Key Identifier:
                keyid:CA:63:9F:3A:9E:98:27:B8:20:FB:C1:1F:49:8B:31:68:0F:3F:B3:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.181.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:34:2c:37:99:e0:3b:e2:b9:80:9e:bb:5a:8b:ae:92:19:3d:
         a8:89:56:89:df:ae:97:5e:b7:de:b8:2d:0c:3d:2d:9c:75:a7:
         10:9e:22:80:0a:ca:fe:c9:2e:18:e5:01:8f:e0:27:3b:e4:d5:
         99:c2:c3:3f:74:12:56:f2:15:57:33:56:f7:4a:c0:94:06:01:
         a2:b7:93:f2:9b:c7:38:63:35:f8:9f:99:b6:4c:e1:8c:96:28:
         db:36:10:25:33:29:70:e3:50:3e:c5:6d:c8:35:20:6d:00:cf:
         b5:95:5b:97:65:8d:dd:ff:5c:bd:56:57:c3:4b:a6:a1:81:4a:
         4c:5c:24:8c:30:55:a0:78:b2:0d:c2:b4:a2:ff:5b:c1:ea:d6:
         82:ae:20:e7:ac:6f:61:50:9a:db:ea:94:86:01:89:72:b5:4f:
         d3:dc:d9:8d:67:c7:d8:49:65:86:f9:34:c0:b2:69:03:c0:35:
         15:08:d4:01:25:92:6d:9a:db:43:b0:34:43:64:cf:d8:84:51:
         d9:db:26:c6:fa:0c:8f:d1:03:ad:a9:ce:93:95:91:18:2c:d4:
         ea:90:3b:b2:d6:c6:29:80:52:b2:c8:b0:7c:9c:88:01:24:64:
         cb:0f:aa:5b:eb:b3:d9:0d:42:a3:6a:3e:f0:c7:6b:0d:81:92:
         3b:5b:5c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:20:26 2026 by rpki-client