Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/431c2044-6c0f-3303-9c68-047ad228e587.roa
File:                     431c2044-6c0f-3303-9c68-047ad228e587.roa (raw, json)
Hash identifier:          POK8x9NmbsLF4ONoJ7pfTr5tSV5FtpnBpqxljAmbMVs=
Subject key identifier:   0B:E4:C0:15:16:3E:A2:BA:15:D8:E2:0E:4A:0B:5D:8E:9F:D0:1F:11
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584E059BB78060B7AE678D796D40
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/431c2044-6c0f-3303-9c68-047ad228e587.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     7155
IP address blocks:        198.45.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:b7:80:60:b7:ae:67:8d:79:6d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=cee49add-c909-4658-87df-0da792b93fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9b:65:48:00:21:99:d9:e5:f6:b6:1f:a3:8d:
                    a0:86:9e:48:b1:5b:40:2c:63:f8:00:fd:ec:99:ca:
                    b0:65:6b:3a:f6:f4:fa:d1:d3:00:4a:4f:ae:fe:07:
                    02:fa:f6:01:0c:e3:2a:37:1a:24:96:5f:dd:5a:c5:
                    54:53:7c:f8:9e:2a:d5:a3:e5:a4:43:55:f8:a9:a9:
                    d0:39:b4:6b:ba:8f:34:5b:f1:58:53:56:aa:20:51:
                    cb:f8:ca:3b:42:07:c5:8a:75:c4:2d:a0:8c:91:7a:
                    3f:96:05:d6:bc:3f:f6:9b:8e:e6:05:ba:30:3c:45:
                    83:30:26:94:de:c8:aa:08:80:79:98:d5:af:89:58:
                    12:34:7b:40:95:f9:3e:e3:b8:1c:ba:9c:b0:f1:0f:
                    fc:ff:fe:9b:1c:1f:b1:68:bf:bf:80:e4:45:77:6a:
                    b3:b7:e2:45:5d:04:5a:4d:ad:b4:b3:ed:60:bd:83:
                    4c:4e:28:66:e9:0a:18:de:d7:7e:e9:12:f0:ce:91:
                    88:79:ef:e9:c4:ae:2e:55:84:1f:c4:40:a9:91:f7:
                    fd:d4:d6:3e:cf:69:78:f3:91:09:fe:62:20:7d:3a:
                    d2:da:cf:a7:3d:8d:6e:e3:da:62:75:71:56:8d:bf:
                    46:3d:f0:fe:c7:c6:6a:90:89:e8:8a:37:81:3b:2a:
                    80:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E4:C0:15:16:3E:A2:BA:15:D8:E2:0E:4A:0B:5D:8E:9F:D0:1F:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/431c2044-6c0f-3303-9c68-047ad228e587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:c3:0c:99:81:e3:3f:d7:c6:e1:5a:c4:27:ce:f7:9e:6c:3c:
         b9:0f:ff:58:09:3a:d6:95:3a:07:11:84:83:3f:9f:40:82:cb:
         2c:ae:1b:7f:6b:1c:e4:66:93:d8:89:e6:0d:41:57:a5:2c:85:
         2b:87:da:9d:28:15:76:61:37:32:08:a3:aa:a5:6b:75:e4:68:
         7e:c6:9c:b6:9c:89:99:d6:1b:c7:b7:ff:ba:b0:ca:56:f2:5c:
         13:d4:32:d6:5e:7f:0c:1b:ee:33:39:e4:5a:6c:bc:e1:44:09:
         9b:c8:e0:b3:4d:63:49:75:b8:8c:a1:72:cf:1b:ba:ca:30:2f:
         2e:f3:66:85:ba:69:c1:e1:09:ad:97:7e:4f:b2:f2:33:68:14:
         be:d4:b2:02:fa:df:f3:fa:ce:a8:03:39:0f:27:20:50:77:51:
         7b:e0:77:1f:ca:d7:35:9d:c5:12:98:69:55:75:a1:28:43:4c:
         b7:2f:1b:a5:89:3e:af:3b:6a:6c:1a:76:ef:35:d8:c9:d8:8e:
         a2:e8:1c:2c:7e:a8:cb:9b:5d:cc:01:56:db:09:53:2d:30:c9:
         35:73:bb:26:f4:bf:43:82:66:75:1e:86:56:79:9c:55:b1:b2:
         e5:3c:30:94:84:9c:05:ec:32:19:a4:72:b7:9c:6b:0e:36:9d:
         26:84:b4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:27:21 2026 by rpki-client