Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/b87e72db-0d83-32dd-a5ff-69549176f362.roa
File:                     b87e72db-0d83-32dd-a5ff-69549176f362.roa (raw, json)
Hash identifier:          77By6z8xOINIXnJv2u0GrnqzNQuK0tj7Qi4EIU75Lxc=
Subject key identifier:   FE:3A:5C:A0:BE:78:93:C3:68:A9:B0:AE:6D:81:DE:43:ED:E3:D9:5B
Certificate issuer:       /CN=92db335e-640b-4ae2-9650-c420af83089d
Certificate serial:       010D0C9F4328584F2022FDA7EB50628448467C80
Authority key identifier: 9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/b87e72db-0d83-32dd-a5ff-69549176f362.roa
Signing time:             Thu 10 Sep 2026 05:51:49 +0000
ROA not before:           Thu 10 Sep 2026 05:51:49 +0000
ROA not after:            Wed 09 Dec 2026 06:51:49 +0000
asID:                     40702
IP address blocks:        199.43.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:22:fd:a7:eb:50:62:84:48:46:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92db335e-640b-4ae2-9650-c420af83089d
        Validity
            Not Before: Sep 10 05:51:49 2026 GMT
            Not After : Dec  9 06:51:49 2026 GMT
        Subject: CN=dfa483aa-37f7-44e2-b59d-4e8e8af64ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8e:3c:ab:18:78:84:9a:32:20:ed:4d:c5:44:
                    0a:df:cf:22:71:d1:c6:15:42:0f:d6:22:79:54:0b:
                    fa:5f:47:1a:8f:30:e8:39:fb:e2:19:96:c2:d9:8e:
                    75:56:7d:f0:5a:4a:11:2f:a3:4c:72:4e:45:30:cd:
                    89:46:3c:95:ff:aa:1b:96:59:d2:c8:65:31:eb:4b:
                    8c:df:c2:b4:85:25:77:0a:c3:f8:d6:31:bb:3b:16:
                    3d:ed:67:d4:08:d2:dd:5e:9d:c7:56:bc:f2:c8:74:
                    fc:29:b4:8e:40:c9:7c:f3:8c:0c:ec:dd:e2:59:91:
                    bf:8f:72:25:35:7a:8f:2e:83:e8:c9:68:2b:33:44:
                    40:95:3a:10:26:74:06:c1:9a:7f:22:14:d0:14:92:
                    99:8a:78:b7:d0:31:4e:b9:ad:66:d0:58:4c:8f:d3:
                    b9:18:7a:9f:d7:dc:c7:1b:91:83:99:e7:60:c0:f1:
                    b5:6d:a8:94:32:a8:31:f1:52:98:a5:50:38:df:65:
                    9c:92:30:5c:5d:3d:bd:31:7a:c5:43:9b:c5:20:1d:
                    8f:f9:dd:e1:5b:85:c3:34:7d:9d:af:f3:01:1c:5b:
                    69:0a:83:b0:00:2f:08:c4:9b:91:1b:9e:e8:17:b3:
                    e5:dd:e6:aa:91:66:4d:01:c9:fd:ac:f6:c9:4a:0f:
                    58:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3A:5C:A0:BE:78:93:C3:68:A9:B0:AE:6D:81:DE:43:ED:E3:D9:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/b87e72db-0d83-32dd-a5ff-69549176f362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d/92db335e-640b-4ae2-9650-c420af83089d.crl

            X509v3 Authority Key Identifier:
                keyid:9B:40:34:1F:25:09:26:BA:B6:19:D2:13:62:66:CE:A9:15:AA:29:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/92db335e-640b-4ae2-9650-c420af83089d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:56:a0:27:95:b1:89:39:7f:b6:d0:35:d9:a9:c1:06:5b:
         de:7b:a0:dc:61:ca:26:d6:93:f7:9b:a3:44:e1:8c:55:0b:e1:
         43:a0:dd:34:cc:c2:8f:73:97:db:7a:c8:20:40:c3:b2:23:93:
         f4:ed:85:5e:dd:69:f3:63:6e:6e:a9:1d:e0:e1:ce:74:d5:30:
         e1:65:52:e6:b5:b7:93:be:66:68:54:ac:4a:5c:49:5d:2d:aa:
         07:1e:76:6c:b7:0f:51:79:49:da:1b:94:63:4f:29:4d:86:0a:
         48:39:93:6f:1c:b8:a1:c9:fa:99:0f:e4:fa:92:9b:8b:ef:7d:
         11:8f:82:b7:8d:3f:d3:74:81:d3:0e:eb:61:ab:1d:2c:31:81:
         f7:57:ef:0a:02:f5:3a:15:81:c7:42:ce:3d:bf:e9:c8:e5:1c:
         b4:b9:62:df:36:64:a7:b2:b4:21:21:94:06:76:90:41:d0:0e:
         ff:2c:65:5d:ca:63:4a:98:9b:cb:03:cf:29:d9:92:4a:70:58:
         40:6c:41:83:ca:b4:b3:49:d5:b5:45:6c:b4:8b:e1:06:70:2c:
         d3:97:8e:92:6c:9f:77:d9:77:f6:ad:6f:f5:67:a3:c9:dd:2d:
         0d:c3:22:e2:74:ed:4c:58:72:94:ac:c0:be:df:7d:af:52:10:
         f9:3d:cb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 20:49:03 2026 by rpki-client