Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/7aafed82-3826-3290-8d65-ec161bdf63f4.roa
File:                     7aafed82-3826-3290-8d65-ec161bdf63f4.roa (raw, json)
Hash identifier:          mzIGlnwhJDGSLBn4R7MmcITXrqwtZxn6luhAf6WB8U8=
Subject key identifier:   A9:B6:39:9B:C1:C8:8A:0E:7D:D1:57:B8:19:AA:CC:05:1C:12:3D:31
Certificate issuer:       /CN=47dcd76c-a53c-4746-b38d-ab33e0246341
Certificate serial:       010D0C9F4328584F67445618CBAE825C95308D40
Authority key identifier: 47:9A:DB:BC:9D:33:3A:BC:5C:4C:34:7C:99:5D:61:18:93:6A:6C:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/7aafed82-3826-3290-8d65-ec161bdf63f4.roa
Signing time:             Mon 05 Oct 2026 17:21:24 +0000
ROA not before:           Mon 05 Oct 2026 17:21:24 +0000
ROA not after:            Sun 03 Jan 2027 18:21:24 +0000
asID:                     17215
IP address blocks:        192.189.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:67:44:56:18:cb:ae:82:5c:95:30:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47dcd76c-a53c-4746-b38d-ab33e0246341
        Validity
            Not Before: Oct  5 17:21:24 2026 GMT
            Not After : Jan  3 18:21:24 2027 GMT
        Subject: CN=0a9d5dc8-dd05-43cb-bcd4-7cc0d9c32ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:90:50:11:ff:c9:94:17:b2:6c:c6:f9:91:58:
                    a4:3d:b4:38:11:9d:45:b6:49:b9:01:60:1e:8b:13:
                    b4:2a:a8:0c:e5:ff:fb:63:08:11:81:ca:37:ac:29:
                    33:3c:c1:60:d2:6f:d8:58:4b:fa:a2:81:30:a5:6b:
                    18:cb:ec:7f:41:51:27:9d:c7:a9:8b:14:ef:d3:b4:
                    19:6a:0a:db:1c:9e:73:e6:25:4c:81:21:3a:3d:54:
                    bf:1b:5c:e6:24:8b:24:d9:87:ed:75:ec:e5:0e:92:
                    92:d1:c5:cc:ef:0a:80:8a:e7:a0:c5:76:a0:ad:c6:
                    a0:b4:b1:dd:08:a4:69:c4:47:a9:88:30:98:c0:75:
                    08:7c:7d:1a:4d:59:28:7c:be:cf:4d:cf:b5:67:94:
                    d4:21:30:fe:09:4a:72:59:ce:d3:fc:c8:9f:ca:85:
                    71:71:ed:a0:73:e1:b3:60:c7:c1:86:a6:7f:39:f0:
                    62:2f:d6:e9:ad:78:30:6d:b0:b8:9a:88:6b:b4:6b:
                    55:7a:b0:d4:60:d1:3c:bb:25:3e:ff:15:c9:45:2b:
                    97:01:41:30:9b:3d:92:75:9d:70:12:34:22:75:50:
                    63:2b:b6:68:4b:f5:7e:48:30:6c:ac:9f:8e:7d:01:
                    69:44:85:0b:38:18:84:6d:b6:03:94:c0:f9:f9:e6:
                    28:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:39:9B:C1:C8:8A:0E:7D:D1:57:B8:19:AA:CC:05:1C:12:3D:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/7aafed82-3826-3290-8d65-ec161bdf63f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341/47dcd76c-a53c-4746-b38d-ab33e0246341.crl

            X509v3 Authority Key Identifier:
                keyid:47:9A:DB:BC:9D:33:3A:BC:5C:4C:34:7C:99:5D:61:18:93:6A:6C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/47dcd76c-a53c-4746-b38d-ab33e0246341.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:bf:71:d0:d1:5b:a7:8a:6d:75:d2:81:b0:d9:e4:94:0c:33:
         b8:fe:d6:13:28:cd:29:42:22:15:fc:ae:6f:ea:a2:8b:56:6e:
         09:51:78:fd:04:73:bd:b9:b8:3c:db:50:43:6d:4a:a7:1d:c4:
         90:55:c5:ce:0a:2c:e5:34:66:35:2c:83:42:a4:56:1c:cc:bd:
         ea:b5:d7:42:92:75:a2:b2:41:b6:77:eb:76:23:78:02:eb:4c:
         2f:70:a4:72:53:29:ec:1f:9b:ce:96:15:69:fd:45:63:0b:61:
         35:df:fe:7e:c4:7e:26:d7:22:0d:46:7f:73:05:67:1b:34:ea:
         97:9a:62:cf:b3:7a:4a:d0:78:96:f6:72:03:7c:8a:93:f0:0e:
         5a:06:dd:ef:f3:54:2b:e5:77:c1:18:a4:7e:a8:09:14:53:62:
         74:3b:bb:9a:be:77:2b:53:76:0b:f5:1c:33:51:75:35:0a:64:
         a9:0f:a0:bc:b2:b4:a6:d9:90:aa:67:74:53:36:75:e1:17:79:
         20:0b:92:fd:41:ef:d9:98:01:8a:a5:f5:da:db:61:e8:f3:c5:
         d3:ee:aa:d5:95:bc:f7:a0:96:e9:5c:9e:43:3f:92:5e:26:9a:
         84:21:cb:8a:09:0a:6a:df:f8:c9:40:a5:d0:d1:c1:cb:fb:c5:
         7c:af:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:45:29 2026 by rpki-client