Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa
File:                     eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa (raw, json)
Hash identifier:          SZvn4PiV0SELe6dfxm0cznzc+XA2TJcqBJMVqp+Ohe8=
Subject key identifier:   0A:95:EB:79:56:1A:FD:55:38:BF:46:4F:9B:47:F3:06:0B:06:25:FB
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584E4559F8E9A0DC3826487F7CE0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     202623
IP address blocks:        198.41.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:f8:e9:a0:dc:38:26:48:7f:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=fb02bee4-aa14-46e0-b7e6-853fb6b9f3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:25:e3:32:06:1d:49:9d:4f:55:b6:ab:3f:
                    e0:e0:4e:13:0e:52:03:aa:7c:cd:84:c6:6e:aa:e4:
                    43:23:38:52:5c:52:b1:09:06:dd:e1:95:60:31:f2:
                    8a:b3:3f:84:fb:11:02:88:63:7a:05:05:48:f2:54:
                    7c:ff:d8:a4:5a:10:af:85:ff:f9:8c:1d:bd:26:7f:
                    f0:69:e8:c5:74:dc:e2:2d:64:5d:f7:da:60:8f:0e:
                    f3:3e:2a:2a:0c:2c:7e:9a:84:72:55:3c:ab:ea:0b:
                    6d:29:29:c6:06:73:07:20:22:f9:f5:36:fe:6c:d0:
                    9e:8d:68:aa:28:a8:83:07:62:96:8b:ac:78:6e:52:
                    ec:31:26:22:8f:a4:cc:12:b3:7c:c6:cf:18:fb:b7:
                    20:74:f9:67:41:f1:e9:a0:ec:33:af:94:96:b0:c1:
                    e0:59:97:66:0e:e0:38:43:53:c9:8a:0c:c2:ca:9d:
                    d8:fc:09:7b:6d:79:99:b1:23:04:31:77:6d:c7:72:
                    42:0d:ae:17:cc:28:50:bc:dc:23:f8:bf:80:2e:35:
                    87:0a:bc:92:d7:ef:d8:6b:9b:b5:6d:c1:ab:2d:e3:
                    1b:8e:4c:d8:df:ec:7e:1b:f1:95:9a:4d:7e:aa:59:
                    e8:06:fc:00:ce:e1:b3:b1:f8:ce:c4:18:ae:22:10:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:95:EB:79:56:1A:FD:55:38:BF:46:4F:9B:47:F3:06:0B:06:25:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/eec1e84e-aa9e-3b44-88db-c802bf8a7ebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:ba:13:6e:17:21:a5:f1:ee:0b:36:b6:3b:49:81:09:57:a3:
         80:90:ac:a2:1f:17:d3:aa:e7:9b:ec:16:a8:98:2f:9c:88:97:
         a9:9c:3f:c9:96:29:29:ff:89:9c:59:93:41:87:f2:7b:4f:cc:
         91:8b:be:4b:73:06:c5:70:64:ea:68:78:44:06:73:fd:07:94:
         46:9d:71:d5:0b:94:dd:5e:be:05:7a:03:7a:3c:f5:74:ff:0a:
         bd:7c:52:1b:1a:05:8a:04:f3:3a:96:41:12:09:19:cf:b7:a7:
         f1:ea:82:ad:51:44:6d:8b:65:eb:3a:5b:f5:c0:67:19:89:e0:
         41:21:f8:9d:f6:19:d0:14:51:c0:c1:bc:8e:1b:c7:9d:12:e8:
         39:64:e2:8f:ac:8e:cb:59:34:53:5c:e2:b6:9c:e4:53:4d:ef:
         05:ae:6e:73:e6:41:29:dd:0f:65:0a:2b:7e:06:06:69:a9:c0:
         6a:6b:87:64:98:81:e0:ea:1c:2f:18:08:01:41:d2:1d:08:2f:
         be:6b:eb:15:06:70:72:82:bd:58:c6:d2:b2:01:f5:87:f0:0e:
         19:3a:41:13:7c:79:46:2a:a6:f1:89:30:12:7b:1a:57:01:b3:
         76:e8:ae:13:3f:5c:0a:d9:65:64:49:1f:12:4c:df:80:b7:d4:
         df:d9:d2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 23:18:07 2026 by rpki-client