Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76a9a844-8a02-3d80-8e14-d6080dfb686b.roa
File:                     76a9a844-8a02-3d80-8e14-d6080dfb686b.roa (raw, json)
Hash identifier:          fFoboGzO3H3Hn9JqXScFO5xWCYiju9CxwM7fsn9gBq4=
Subject key identifier:   40:95:54:83:C0:CE:E6:EF:63:41:6B:1F:10:39:42:10:A3:77:24:CD
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE423494D52C319E45622F3D0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76a9a844-8a02-3d80-8e14-d6080dfb686b.roa
Signing time:             Wed 19 Aug 2026 18:03:55 +0000
ROA not before:           Wed 19 Aug 2026 18:03:55 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     15562
IP address blocks:        198.58.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:49:4d:52:c3:19:e4:56:22:f3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:55 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=6187f253-f3fb-4f3c-9680-e576c4319e2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fd:b5:49:33:2a:4d:f5:1f:3e:03:a9:14:22:
                    d1:54:af:80:95:33:6f:38:64:52:65:8e:18:90:04:
                    7f:c1:20:80:08:25:6f:0f:69:b8:3b:4b:86:fa:ad:
                    19:ea:2c:00:a9:a6:93:04:32:e6:86:61:a0:1c:db:
                    ec:d9:ef:1c:12:57:45:73:04:89:07:93:31:f6:60:
                    eb:1a:11:02:98:7d:64:13:14:ce:15:76:b3:59:02:
                    38:f9:c8:4b:5a:6c:1b:96:6f:1d:7c:ba:61:80:b8:
                    9b:0c:0e:10:c1:2e:67:12:2d:c6:56:b0:02:d0:62:
                    7b:73:02:3e:26:28:d1:63:99:8a:37:0c:86:b8:51:
                    d2:ff:fb:ca:2a:6e:a6:90:f2:d3:e1:e5:6e:ee:fe:
                    e0:28:aa:02:f0:e5:99:bf:15:ec:bd:b5:78:28:1a:
                    82:cc:8c:22:b9:3d:75:29:7f:94:8d:cb:ee:81:bd:
                    1e:89:67:36:fb:bb:2f:b0:6a:03:8c:3d:82:94:d1:
                    d0:85:ae:50:24:33:50:7c:eb:fc:c7:0d:83:17:51:
                    82:c4:ea:b1:91:46:b7:b7:9e:59:a0:e9:47:58:cc:
                    af:17:9d:ab:b9:ee:86:86:56:b7:2e:0d:ff:19:e2:
                    9b:9b:47:cd:93:91:06:c1:9e:ba:0b:9b:29:ed:94:
                    29:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:95:54:83:C0:CE:E6:EF:63:41:6B:1F:10:39:42:10:A3:77:24:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/76a9a844-8a02-3d80-8e14-d6080dfb686b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.58.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:2e:22:5d:74:cf:64:a2:d3:d3:a9:e8:0f:68:1b:fe:8a:d0:
         45:ed:ff:4a:c2:df:d5:0b:5b:80:04:22:5f:25:69:32:99:88:
         13:ba:b5:fb:71:d6:40:77:78:42:92:8a:4e:ba:ae:71:d1:e8:
         67:3e:8f:f3:d5:8e:d1:be:ed:7c:5b:df:50:fc:eb:24:78:7b:
         23:05:9d:b4:02:e2:b7:97:86:04:b3:a8:2f:d8:38:9a:62:2b:
         fc:be:28:0c:97:f6:3e:64:5d:20:bb:75:9e:22:3c:76:fa:da:
         98:6b:5d:44:57:af:70:54:f7:65:5c:d8:d1:86:b2:2d:4e:46:
         74:b7:b5:40:fa:8e:c3:99:98:87:d0:2b:f4:ad:99:31:87:27:
         e9:08:d5:b7:33:f1:4c:14:6e:82:e1:1e:44:6f:a2:5d:cd:93:
         0f:9e:9a:6d:a8:d1:59:4d:3a:ea:60:7a:a5:4f:08:25:ee:c7:
         27:1f:b5:c5:ca:62:d7:56:3c:bf:38:8b:4b:2f:d8:e4:61:b0:
         6a:81:e8:ad:6c:3e:77:81:38:dc:a8:b1:34:8e:29:0d:ae:e3:
         5c:f2:18:20:4a:4e:ad:6b:20:2f:eb:2e:47:ad:c9:72:c3:d0:
         0e:62:dd:42:4c:18:57:7f:e5:49:74:99:c5:c0:5b:46:43:37:
         c5:f6:ba:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:24:31 2026 by rpki-client