Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585/5a061007-e16d-31a5-a244-4259c744cc68.roa
File:                     5a061007-e16d-31a5-a244-4259c744cc68.roa (raw, json)
Hash identifier:          0uPz4L3y4xP58iyGIW7O6m8lPyjBCY2+xPTGxmy/QcA=
Subject key identifier:   0D:A0:9F:E8:8A:7E:A9:E3:7E:66:F9:AC:74:F8:34:CD:56:95:CF:2D
Certificate issuer:       /CN=f3791260-c6aa-4ddb-bc66-b93e15492585
Certificate serial:       010D0C9F4328584EA796030AF2A87F53D1949780
Authority key identifier: A9:E5:01:48:85:8E:58:6B:E0:5C:84:C5:8C:4C:B3:BD:5F:DE:B1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585/5a061007-e16d-31a5-a244-4259c744cc68.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     25794
IP address blocks:        198.56.8.0/24 maxlen: 24
                          198.56.9.0/24 maxlen: 24
                          198.56.12.0/24 maxlen: 24
                          198.56.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585/f3791260-c6aa-4ddb-bc66-b93e15492585.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585/f3791260-c6aa-4ddb-bc66-b93e15492585.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:96:03:0a:f2:a8:7f:53:d1:94:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3791260-c6aa-4ddb-bc66-b93e15492585
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=754464cb-54d9-4434-86e5-20ff4634adaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3c:53:28:e3:07:7a:29:9b:53:76:58:80:79:
                    3c:24:92:a9:e2:91:83:07:ec:19:13:ac:d9:63:dd:
                    ef:42:53:3a:57:fb:29:ce:fa:a7:34:00:5d:89:f0:
                    39:1a:d9:9c:07:f9:6b:b3:71:54:ac:52:aa:1f:b2:
                    37:3d:23:7b:72:89:5b:02:c2:c5:a1:c7:61:2d:c8:
                    52:64:91:9e:5d:90:be:ca:7c:35:d7:76:fa:80:13:
                    c7:6a:6d:32:88:2e:a9:2e:0b:44:2e:9f:11:30:c4:
                    1d:c1:95:4f:52:92:a3:c9:c9:fd:c3:11:73:76:f9:
                    24:f4:13:66:5a:81:a1:84:eb:be:6f:ed:f0:31:c9:
                    a7:8b:89:c8:2a:0f:52:47:a9:c5:9d:72:57:0e:b4:
                    f7:c6:4c:2d:16:65:96:a8:7b:ee:53:c4:b9:04:69:
                    9c:38:de:d1:90:21:c0:cf:f6:05:b5:b0:e9:48:3c:
                    91:35:48:34:12:27:76:36:4f:6a:0b:43:8c:aa:f4:
                    03:dd:41:6f:66:71:9b:33:41:c1:60:58:43:f1:01:
                    a4:28:4b:e7:d6:94:0d:f3:e7:fc:54:33:69:41:69:
                    51:78:d1:38:a5:6e:cc:31:c7:23:d2:63:95:bc:26:
                    11:7a:e9:11:e5:88:6c:d2:0d:ed:c1:1e:e1:0c:41:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A0:9F:E8:8A:7E:A9:E3:7E:66:F9:AC:74:F8:34:CD:56:95:CF:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585/5a061007-e16d-31a5-a244-4259c744cc68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585/f3791260-c6aa-4ddb-bc66-b93e15492585.crl

            X509v3 Authority Key Identifier:
                keyid:A9:E5:01:48:85:8E:58:6B:E0:5C:84:C5:8C:4C:B3:BD:5F:DE:B1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.56.8.0/23
                  198.56.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:68:d1:9b:df:be:5c:04:06:80:1a:1b:1b:23:de:62:e0:63:
         c2:26:5b:02:c9:f6:c5:8a:23:c6:5b:e0:2d:b5:7e:ce:04:b2:
         c0:6d:6e:c3:2b:2f:e0:db:86:7a:0e:21:4b:72:1f:cb:ec:ce:
         bc:90:ad:0f:41:e7:72:7e:dc:21:ee:8c:12:a0:c1:d3:ab:89:
         02:70:f3:2c:e2:6b:56:c0:c6:ab:94:26:2d:cc:32:d1:56:c5:
         12:c4:e3:23:ca:00:99:cd:86:a0:a4:f4:65:77:e0:9e:48:07:
         ae:34:9c:69:f3:66:09:d4:29:e5:db:78:1d:a9:d9:25:09:95:
         26:97:dc:94:03:54:f0:cb:75:91:dc:ef:e3:8d:8a:63:37:63:
         32:75:48:7e:16:13:70:f2:36:c7:ab:da:f0:82:1b:de:fd:90:
         a7:fe:36:62:86:8d:bb:05:22:b8:8f:1e:59:4a:06:ca:b0:35:
         42:fa:af:26:08:85:73:de:3b:00:95:22:94:ed:3a:a4:58:24:
         37:6a:47:b0:c6:e3:82:28:f7:5c:f9:fe:79:59:01:02:f1:d3:
         d7:37:3e:04:21:b3:47:a5:7f:95:18:f2:47:74:e6:ea:c2:bc:
         60:30:62:93:54:5b:de:11:b8:e0:50:3d:09:6b:d8:f4:a9:d9:
         89:b5:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:27:12 2026 by rpki-client