Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/8798fb32-a617-325e-86bf-5ce5ec48e881.roa
File:                     8798fb32-a617-325e-86bf-5ce5ec48e881.roa (raw, json)
Hash identifier:          Z/Fqvmksyp0CyPn7+4ZNlxs5Sly8w63CHCBkGIelE4U=
Subject key identifier:   1F:62:C6:D3:0E:3D:85:9B:88:DE:0F:DF:1B:87:A1:9D:7C:C2:34:A8
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584F549DA5F13376206BE3A87880
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/8798fb32-a617-325e-86bf-5ce5ec48e881.roa
Signing time:             Tue 29 Sep 2026 01:00:12 +0000
ROA not before:           Tue 29 Sep 2026 01:00:12 +0000
ROA not after:            Mon 28 Dec 2026 02:00:12 +0000
asID:                     13998
IP address blocks:        198.215.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:54:9d:a5:f1:33:76:20:6b:e3:a8:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Sep 29 01:00:12 2026 GMT
            Not After : Dec 28 02:00:12 2026 GMT
        Subject: CN=4726b7da-46e5-4f94-8857-1584e577d412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:71:2a:29:0f:8c:6a:e5:c0:d6:e6:45:77:01:
                    55:b5:4a:52:76:ac:4a:ae:ac:0e:d0:51:83:1a:dd:
                    87:f0:19:ba:32:37:e0:d1:bd:d2:8c:04:f8:3a:34:
                    fa:a4:46:c6:1b:ba:33:17:1e:51:da:c1:d3:f3:91:
                    13:cd:1e:d3:29:f6:c3:db:bc:df:39:88:57:4c:d9:
                    58:c3:84:ba:86:5b:24:c5:60:1f:de:a0:ee:b2:d0:
                    15:b4:bb:2b:ee:f1:44:fa:cf:39:32:a5:84:a1:77:
                    6c:af:c5:5d:a4:ea:8f:27:ab:9e:92:9f:59:05:fc:
                    91:2f:65:d4:a5:63:0f:cd:d1:00:07:35:f1:86:28:
                    c6:a5:8b:f3:db:c5:6b:66:60:2c:9e:4d:ca:df:10:
                    54:ea:25:d8:44:a8:bf:89:a5:78:7f:ea:cc:df:4e:
                    a1:e2:f3:7f:35:04:fe:ca:5f:9a:81:9c:ce:e6:66:
                    c0:43:ca:9c:0c:b5:4d:ff:60:5a:12:28:61:80:19:
                    77:68:a7:8f:77:74:e2:a5:dd:db:57:a4:e0:5b:be:
                    4c:d1:f5:f4:11:7d:17:00:b4:ce:5a:88:00:15:d6:
                    f3:94:96:cc:28:d6:4d:13:2f:91:1a:87:04:bb:7b:
                    bd:eb:7e:6f:dc:4c:ca:96:ef:2b:25:b0:19:25:06:
                    6f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:62:C6:D3:0E:3D:85:9B:88:DE:0F:DF:1B:87:A1:9D:7C:C2:34:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/8798fb32-a617-325e-86bf-5ce5ec48e881.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:7c:fa:36:da:4b:6c:7d:8b:1b:11:25:5b:6e:7e:d8:1a:67:
         32:e2:32:21:13:dd:7c:50:bb:e2:ed:50:e6:95:39:f8:8f:29:
         43:50:49:52:8d:b5:39:a3:29:49:ee:21:bc:af:1b:f2:53:ca:
         6a:fb:5b:61:59:63:4d:5d:40:cd:4e:28:06:2a:a2:ae:ed:a9:
         8e:8b:8a:75:97:c0:7b:5c:e9:d6:75:15:49:04:2b:51:c0:6c:
         0f:e9:d0:d5:e6:c6:3a:d4:33:3a:e3:dc:c6:60:cd:54:e1:80:
         93:9d:f5:22:58:c7:6b:44:e5:3a:b9:6e:cc:16:ee:f9:94:60:
         79:e6:58:95:dd:8d:e4:bc:d6:bb:b3:e8:b1:12:33:3e:e0:c8:
         7c:f1:de:e4:94:76:8d:d0:d2:91:fa:f9:22:f9:6e:18:5c:0e:
         07:91:be:58:b1:ff:73:a5:6a:2c:1d:0b:23:fd:6f:03:bf:2e:
         61:69:a4:d1:88:4c:32:d7:6a:5d:ad:ba:68:4d:62:e9:59:75:
         84:30:27:b4:fe:e1:42:e3:98:94:1a:80:ab:7c:6b:97:d6:a7:
         7e:ea:27:6e:86:11:79:ca:d1:51:a8:48:82:94:29:5a:b1:d5:
         cb:54:4c:89:f3:bf:28:bf:64:81:4a:80:59:2e:27:52:59:6e:
         42:57:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:31:05 2026 by rpki-client