Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa
File:                     c93aa5cc-9725-3304-9f64-6159a1070c5c.roa (raw, json)
Hash identifier:          Pn2dO9N7ar5ZDxB8ofNejmSo+B3YM62usOmBtQ8pjCk=
Subject key identifier:   FC:22:63:47:DC:0A:49:8A:57:C6:A3:FB:C8:99:28:BC:BB:9F:F3:1E
Certificate issuer:       /CN=64c213c7-4c1a-4187-a879-90c9062e05d4
Certificate serial:       010D0C9F4328584EC0A725979F79325830775060
Authority key identifier: B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        198.252.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:25:97:9f:79:32:58:30:77:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64c213c7-4c1a-4187-a879-90c9062e05d4
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=f532aaed-216a-46ae-8bcf-051554e56674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:07:69:f8:92:6e:38:b2:d7:df:18:00:30:b1:
                    d1:bd:00:03:a0:37:47:50:3a:28:0c:cd:fc:59:30:
                    df:fb:e7:d8:02:fe:be:43:ee:8b:28:10:8a:f3:46:
                    9c:eb:f0:46:07:76:f0:be:4b:5f:73:1e:21:8f:63:
                    c3:eb:06:25:d1:5f:c7:a4:8c:df:1a:6f:93:54:71:
                    49:0f:25:00:32:ae:86:48:c7:e1:66:39:fa:6f:88:
                    5a:26:fa:45:5c:e7:c6:dd:0b:0e:35:7c:f8:31:42:
                    60:80:a4:4b:5e:df:d7:c7:bd:6f:95:a5:5b:13:07:
                    a0:7f:9b:89:ee:d6:58:eb:84:ed:35:6c:b7:4e:f7:
                    25:fd:97:9e:81:d0:0e:ca:35:6c:c3:c9:f7:4c:d0:
                    16:8f:96:b4:15:f4:7c:1c:63:74:29:1e:76:0a:20:
                    bb:be:72:a0:57:1e:6a:d9:4e:10:f2:19:2a:68:c1:
                    b9:2f:05:9c:e9:37:34:f0:15:4d:94:49:f9:5b:1f:
                    67:96:c3:36:eb:94:e4:d2:e4:ab:67:42:37:e9:6a:
                    27:17:b1:95:61:63:fb:3b:84:45:42:f4:21:14:08:
                    17:eb:8b:94:1a:46:1d:12:57:91:24:b9:08:dc:e4:
                    2e:16:bf:71:5b:89:db:b6:1f:d0:95:cf:7f:c5:60:
                    5f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:22:63:47:DC:0A:49:8A:57:C6:A3:FB:C8:99:28:BC:BB:9F:F3:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/c93aa5cc-9725-3304-9f64-6159a1070c5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4/64c213c7-4c1a-4187-a879-90c9062e05d4.crl

            X509v3 Authority Key Identifier:
                keyid:B3:85:5A:3D:68:5C:E2:2C:82:25:29:3C:F2:08:EF:89:03:C0:8A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/64c213c7-4c1a-4187-a879-90c9062e05d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.252.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:54:67:90:3b:ef:32:61:7d:eb:55:f1:c7:b2:79:5a:2a:c5:
         02:e2:2a:51:6f:e0:b7:c5:96:88:03:b7:1f:b9:0b:19:1d:ee:
         47:bd:69:43:10:07:14:61:03:27:4c:5d:db:8f:1c:89:a8:de:
         83:47:2f:33:cb:03:07:94:fb:0e:5f:a9:ce:66:e6:47:db:66:
         49:aa:3b:ec:db:43:bc:13:7e:eb:0b:c7:62:ee:ff:58:4c:d9:
         68:24:69:3c:83:f6:48:46:a4:35:e6:a2:cb:be:cb:bb:cd:58:
         50:8a:8a:c8:a7:f9:5c:1f:cc:a7:09:f4:8d:74:56:d2:b3:95:
         2f:28:49:c1:d0:a2:f0:8c:e4:5a:8f:55:fe:2b:6c:9c:53:f8:
         e4:e2:85:3c:0c:a1:20:65:40:b5:c0:c5:ee:3b:0b:dd:52:a5:
         7f:e1:eb:0a:b8:e4:d5:7d:88:a7:88:ca:31:e7:60:c5:30:0a:
         01:af:d8:4b:05:79:5e:b1:62:c9:1d:18:d4:ad:4d:ff:28:65:
         b4:06:b4:0c:c9:ec:43:49:91:26:d9:b6:9a:e4:27:83:e6:7d:
         c5:56:e1:63:b3:68:b5:6f:37:f4:eb:3e:f9:aa:f0:f7:9a:a8:
         20:45:8c:81:64:da:04:bd:75:bd:85:77:86:c0:cb:d1:63:31:
         19:29:34:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:02:45 2026 by rpki-client