Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/1a00eadd-416e-3ddb-899c-fc71fa1458d3.roa
File:                     1a00eadd-416e-3ddb-899c-fc71fa1458d3.roa (raw, json)
Hash identifier:          M7K9PKiK6OAnVBfnqQYzYQqFu4LihgK5viXNgNcVEds=
Subject key identifier:   4C:B1:ED:72:3A:63:1D:20:6D:3C:46:CE:C7:CF:71:D5:13:03:92:A5
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F4328584F119CEF769F05359FFF51D300
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/1a00eadd-416e-3ddb-899c-fc71fa1458d3.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     2701
IP address blocks:        198.248.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:ef:76:9f:05:35:9f:ff:51:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=0e1591eb-a310-40ec-a523-e2e79d4d3d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:38:22:87:94:d6:b9:37:68:0f:96:f7:a7:35:
                    0c:32:be:eb:2e:44:4c:7c:f1:3e:40:c2:25:e5:4c:
                    a0:99:9b:42:0d:92:e6:80:82:a7:22:4a:10:2d:c5:
                    8b:25:80:3a:9a:aa:a2:86:38:3a:19:c0:f5:82:1d:
                    9a:36:12:ed:c3:32:63:60:5f:cb:80:e3:24:ed:d6:
                    1a:14:55:61:ea:fa:1b:08:0d:d7:fd:0f:00:70:14:
                    ae:22:c7:87:b4:b4:76:b4:7e:a3:a6:c0:39:e4:14:
                    b9:bc:d4:37:23:af:66:b5:1e:aa:16:26:cd:b8:54:
                    1e:07:e9:1d:cd:3c:fd:11:38:92:11:0b:b1:c4:91:
                    7d:bc:53:12:f8:19:20:3f:e5:cf:07:a3:7e:18:99:
                    96:dd:f0:23:8f:ac:e4:ea:42:c2:70:a4:de:ea:82:
                    4f:4c:5f:2c:c1:4f:01:07:81:b4:0a:cd:d6:ce:1a:
                    53:80:b1:d8:07:1f:6e:36:62:ff:a8:e7:25:33:dd:
                    28:b6:38:6a:aa:e9:fc:09:51:de:40:ec:f0:4b:aa:
                    c9:12:ea:e8:50:c9:9d:a3:8d:c9:78:d2:92:b0:db:
                    18:6a:10:8c:7c:f4:be:2b:2a:79:8d:c2:c7:4b:3c:
                    73:f6:ad:f8:f8:7e:b5:3a:17:fc:d7:8f:b8:13:fc:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B1:ED:72:3A:63:1D:20:6D:3C:46:CE:C7:CF:71:D5:13:03:92:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/1a00eadd-416e-3ddb-899c-fc71fa1458d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.248.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:79:b0:03:51:52:cc:ee:47:c2:a7:0a:8b:02:4f:a5:52:45:
         8c:61:8a:5e:fc:7c:de:09:c9:3b:48:bb:63:27:54:e3:1e:b0:
         40:dd:ab:b9:a7:93:b2:11:9d:47:b4:15:55:de:f3:68:a4:b1:
         77:05:d2:19:20:2d:40:05:82:97:fe:bb:8c:16:2e:86:47:ef:
         24:9a:ef:55:b1:a3:a4:23:49:48:c6:67:80:f7:e5:1e:c9:a9:
         26:98:95:db:62:12:12:d4:6c:22:c3:0e:02:d3:1f:48:f8:6f:
         e3:80:51:18:20:5f:da:b5:d6:5b:68:91:45:f5:c4:3d:b7:bc:
         6d:cf:ef:a8:18:7b:30:8a:d7:6f:ca:52:76:75:43:5c:e8:84:
         0f:3e:db:9d:d2:c1:33:e8:d9:8a:39:4d:34:c9:fd:a9:f5:d8:
         0d:ce:72:60:74:9e:d5:3f:09:3c:2e:75:06:ae:02:95:72:e3:
         e5:d1:06:af:d7:98:be:04:0a:40:6d:4e:92:47:96:3f:bf:a6:
         da:f4:ca:b9:3f:d6:49:9d:64:a0:8d:58:4e:33:20:0e:d7:52:
         5b:e9:0c:56:c5:fb:48:5e:2e:c0:5f:f8:c4:be:a2:5d:46:a9:
         7b:b6:58:41:17:99:54:0c:92:6c:bd:89:44:8e:d6:79:bd:b2:
         86:d8:1d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:46:28 2026 by rpki-client