Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/98660227-2a07-3bcb-be9d-791b87d54c07.roa
File:                     98660227-2a07-3bcb-be9d-791b87d54c07.roa (raw, json)
Hash identifier:          s61jLE6qBgqXEt+5lp06RxOvH4qWlgJtYXCUQ1daOTE=
Subject key identifier:   8D:99:08:C4:23:24:60:99:DF:6E:FE:DF:4F:C9:A4:A3:A7:C2:69:14
Certificate issuer:       /CN=f7122567-6c69-4de3-adf9-2d514f567960
Certificate serial:       010D0C9F4328584F6A201321F0D0189E7ED31E80
Authority key identifier: 81:1D:5C:C9:AD:0E:B2:CC:07:CA:FD:81:D0:22:52:96:2A:4D:63:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/98660227-2a07-3bcb-be9d-791b87d54c07.roa
Signing time:             Tue 06 Oct 2026 17:55:46 +0000
ROA not before:           Tue 06 Oct 2026 17:55:46 +0000
ROA not after:            Mon 04 Jan 2027 18:55:46 +0000
asID:                     8103
IP address blocks:        150.176.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/f7122567-6c69-4de3-adf9-2d514f567960.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/f7122567-6c69-4de3-adf9-2d514f567960.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6a:20:13:21:f0:d0:18:9e:7e:d3:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7122567-6c69-4de3-adf9-2d514f567960
        Validity
            Not Before: Oct  6 17:55:46 2026 GMT
            Not After : Jan  4 18:55:46 2027 GMT
        Subject: CN=71723ac6-d968-4277-96de-6769f8b722ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:6f:06:27:cd:bd:73:e7:45:b6:f4:08:45:
                    df:f8:94:94:58:40:05:dc:74:79:42:73:d8:3c:33:
                    27:f0:de:a4:49:2c:cc:70:9c:f6:bb:04:d2:31:44:
                    ec:9e:56:b3:97:95:7f:ba:a1:a6:ef:59:46:00:d0:
                    c8:ca:20:6d:d4:c9:e6:eb:84:8e:66:69:e8:18:93:
                    9b:75:04:7a:69:33:96:8c:e7:2d:f2:44:4c:06:fb:
                    04:86:b5:a4:f1:45:d2:3f:d5:59:28:52:d6:84:e5:
                    af:38:3f:bc:d4:b0:c4:a8:0b:5a:b0:6b:20:1e:3b:
                    45:aa:33:08:69:a5:93:45:2b:38:fb:c8:5c:c7:9d:
                    64:7d:5e:b0:cd:52:d8:06:3c:e6:d0:78:79:fb:32:
                    1e:32:83:9e:df:f5:73:ab:cb:14:ee:bc:82:73:76:
                    b9:32:53:64:d4:e7:0c:33:9a:49:3f:3d:3c:10:94:
                    0d:60:43:03:39:d8:c8:20:4b:a6:c4:8a:43:f6:d1:
                    48:7f:76:3f:78:97:9f:c0:0b:00:43:f3:62:70:71:
                    85:87:b2:1b:53:7c:e6:31:8d:a2:77:93:1b:4b:ff:
                    84:75:7c:85:cd:c7:25:67:fb:26:ac:56:41:a5:23:
                    b8:c0:f9:36:e8:6c:4f:dc:b9:8c:60:09:8a:ef:be:
                    bd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:99:08:C4:23:24:60:99:DF:6E:FE:DF:4F:C9:A4:A3:A7:C2:69:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/98660227-2a07-3bcb-be9d-791b87d54c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960/f7122567-6c69-4de3-adf9-2d514f567960.crl

            X509v3 Authority Key Identifier:
                keyid:81:1D:5C:C9:AD:0E:B2:CC:07:CA:FD:81:D0:22:52:96:2A:4D:63:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f7122567-6c69-4de3-adf9-2d514f567960.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.176.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:32:c2:83:30:3d:88:2a:42:45:72:09:a1:47:9f:25:30:fe:
         68:6d:c6:a9:28:8b:c9:74:3d:64:d6:6a:18:2c:24:2a:c5:55:
         92:65:3e:31:f8:05:28:32:a6:2e:d8:c3:c9:4d:6e:d4:50:fd:
         6c:b2:c6:c0:e6:ca:44:8b:63:b4:a9:10:2b:0f:56:9b:6d:57:
         5a:7b:d8:ad:e1:cb:d0:2f:2b:21:5b:8b:6a:d0:78:3c:4a:1f:
         a9:39:77:54:75:76:c4:b5:7b:57:bc:4b:76:75:f7:24:dc:5f:
         d3:0b:ae:05:f2:7f:b9:e6:15:fa:74:61:6c:fb:14:9f:24:7c:
         59:3a:35:30:b6:89:76:39:0e:de:28:cd:30:fa:2b:8e:f6:c0:
         49:af:16:ba:73:df:61:2a:b7:d7:91:9e:39:d4:42:31:77:18:
         d2:11:1e:d8:05:59:bf:fe:d9:48:ba:7a:be:a1:5f:f8:60:b3:
         ca:e7:89:2a:09:98:fd:bd:73:63:ea:a9:9a:69:e0:5a:44:0f:
         bd:be:a3:49:29:ad:6b:4b:71:2a:5e:ad:73:82:46:cb:71:0a:
         a9:3a:eb:84:ad:d4:82:ff:61:cd:09:27:0f:de:4d:5c:97:16:
         03:be:36:a1:42:76:d0:99:30:bb:34:f6:67:96:ee:cd:6b:b1:
         78:66:87:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:21:20 2026 by rpki-client