Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be96b7e5-94af-357e-b42b-06756e4de524.roa
File:                     be96b7e5-94af-357e-b42b-06756e4de524.roa (raw, json)
Hash identifier:          plLMH0XDZEtK6VXhJg0wqstVmUViLs+v50e2Zl64k9Q=
Subject key identifier:   9D:66:BE:00:AC:23:49:01:64:19:AA:F3:F7:DA:38:9A:7C:D1:66:B3
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584E4129C7C847AA7C9D5A06B680
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be96b7e5-94af-357e-b42b-06756e4de524.roa
Signing time:             Mon 22 Jun 2026 09:00:11 +0000
ROA not before:           Mon 22 Jun 2026 09:00:11 +0000
ROA not after:            Sun 20 Sep 2026 09:00:11 +0000
asID:                     30036
IP address blocks:        198.40.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 25 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:41:29:c7:c8:47:aa:7c:9d:5a:06:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jun 22 09:00:11 2026 GMT
            Not After : Sep 20 09:00:11 2026 GMT
        Subject: CN=996bdb73-57fd-4589-9384-9317b417a25f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:42:bb:da:67:0f:75:32:c3:da:2a:aa:9d:cf:
                    de:23:be:aa:44:73:16:69:20:c6:4e:4d:f7:e3:57:
                    5a:d5:93:d7:39:a6:a7:ff:a5:60:9e:6b:dd:5e:af:
                    85:99:de:2d:d5:55:50:ca:e3:08:d7:4b:54:d7:48:
                    4e:13:71:05:3d:14:e4:0c:b2:96:d8:f3:15:1d:86:
                    f8:90:3b:96:c5:60:8c:73:52:54:13:ce:44:40:46:
                    22:ce:f8:8c:10:12:09:b0:10:46:3a:20:71:6c:59:
                    6c:d4:8a:63:e6:e2:38:66:1e:a8:c5:7f:21:10:95:
                    a4:b0:fd:08:ad:9f:7f:87:cf:a7:8d:b6:89:39:96:
                    9d:dc:a6:f4:c1:a0:d3:b5:73:d6:0c:58:10:1a:03:
                    f6:0a:9e:99:3c:ee:58:1a:1a:a6:33:86:82:dc:b9:
                    f3:f1:56:45:59:e5:ee:36:9e:59:da:28:08:9a:c9:
                    8e:16:50:3f:0d:80:f9:21:99:66:a1:50:55:62:f8:
                    4e:31:89:0b:70:da:d7:65:18:9f:7f:33:6f:a8:38:
                    2d:89:5a:84:b6:52:dc:4b:4e:02:bf:07:39:59:f0:
                    b3:44:8f:e1:62:24:64:c2:88:47:91:03:d0:af:9e:
                    89:db:86:8a:c3:7c:5d:59:4b:89:7b:5b:e0:d8:6f:
                    03:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:66:BE:00:AC:23:49:01:64:19:AA:F3:F7:DA:38:9A:7C:D1:66:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/be96b7e5-94af-357e-b42b-06756e4de524.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.40.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4e:97:28:9e:3b:85:33:84:fa:98:92:05:71:11:c2:1b:bc:
         33:40:20:d9:bc:e3:bf:cf:68:3e:6d:92:4b:d5:cf:0d:61:88:
         79:c1:5a:7d:e8:4f:0a:8e:11:b6:31:c5:33:70:00:a9:10:43:
         1d:d1:75:ce:63:ff:02:43:a9:69:70:98:44:42:1e:be:4f:61:
         35:61:43:f6:10:61:94:91:76:df:7c:2a:c7:d5:7c:92:89:dd:
         dc:e0:cf:02:7e:fc:de:05:7e:b4:8e:c3:9a:f4:b6:32:2b:61:
         5b:43:6a:64:ba:f6:8f:39:36:21:24:07:10:88:23:ed:1d:38:
         8e:78:1f:9b:a4:b9:b8:ca:b2:c7:c1:04:03:8a:b4:6b:36:a3:
         14:10:b8:43:4c:2f:47:b9:2d:2c:df:60:56:bb:4b:26:b1:bf:
         a3:e0:05:ec:60:65:45:b0:72:6c:38:41:7f:cc:9a:df:7c:67:
         2e:73:53:d9:b8:79:7a:b8:6d:8d:b1:6a:05:80:25:f6:38:69:
         40:4c:6c:5d:e2:b0:62:1b:5b:01:17:7f:b3:b0:d7:22:92:5c:
         a9:0b:65:1e:6d:80:a0:09:02:ba:86:c4:c4:29:c9:9a:61:00:
         94:4b:42:12:fd:0b:57:f2:4a:b0:c6:fb:e9:47:f1:d6:b6:b0:
         70:a5:c1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 03:19:11 2026 by rpki-client