Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/695c070b-df2b-32b5-b6d4-09048d5fe6bb.roa
File:                     695c070b-df2b-32b5-b6d4-09048d5fe6bb.roa (raw, json)
Hash identifier:          NJY9Tn0pjwR/2cflBn/U0gFtD+0+aDPfHLPEKjXVWpM=
Subject key identifier:   E1:76:2A:BD:6F:DA:B2:9E:5D:A2:16:AA:D8:7D:A6:9E:E1:AB:13:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E296EF7016230F73FCD9DB400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/695c070b-df2b-32b5-b6d4-09048d5fe6bb.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     19836
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:f7:01:62:30:f7:3f:cd:9d:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=e58bc0e6-16a6-4ab6-b6aa-cb9b94235062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1a:21:b6:b4:9e:b1:98:53:2b:e6:82:7c:83:
                    93:f9:43:bb:a7:2b:6d:ce:68:57:ec:96:c0:f9:bc:
                    cd:8d:4a:11:ba:e7:28:c0:1a:70:53:d9:b7:db:b0:
                    e7:d0:ed:13:66:52:07:d9:5b:e5:e6:04:ff:83:fc:
                    b3:56:c4:d6:8f:d3:b7:25:bf:b1:87:94:64:53:4c:
                    26:12:ea:be:56:ee:18:92:79:3f:69:67:33:32:c2:
                    64:5a:09:ad:91:ba:35:86:0b:2c:67:ad:90:be:28:
                    64:fe:07:b2:b2:cf:07:a9:09:6e:77:ab:21:29:82:
                    77:85:68:e0:a4:55:b9:23:86:b9:dd:14:c4:b6:af:
                    45:50:e4:24:14:da:34:12:9b:74:18:68:6b:67:cc:
                    ca:8a:0a:48:ab:e9:cf:ba:f9:18:42:7d:44:f7:63:
                    e4:ad:75:65:9b:47:95:f9:78:84:19:df:02:c1:64:
                    c0:67:18:00:97:20:79:0f:f4:c5:1d:29:9e:a6:c6:
                    3b:43:7d:4a:ea:34:18:12:46:8d:38:1f:a3:e8:ec:
                    0b:7d:04:f2:46:70:aa:46:bc:d3:53:c6:cf:33:d5:
                    9e:91:7f:9d:87:45:b2:2b:f3:79:7c:02:30:75:46:
                    9e:7b:36:8c:ba:e1:ef:ec:ae:a1:e5:4b:cc:88:0f:
                    4d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:76:2A:BD:6F:DA:B2:9E:5D:A2:16:AA:D8:7D:A6:9E:E1:AB:13:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/695c070b-df2b-32b5-b6d4-09048d5fe6bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:92:3d:9d:b1:9f:bf:b5:e0:c1:54:a3:f6:92:9d:a3:e6:5d:
         ae:9f:cb:86:7e:eb:ff:55:af:ef:1e:b8:e6:54:35:9a:a8:62:
         55:46:ab:8a:2c:8f:79:19:3c:78:3b:bf:1d:75:4a:b6:b1:5d:
         fa:7f:b2:54:06:7c:45:05:e2:71:99:e6:10:89:d9:cc:c6:fa:
         a9:ab:9a:51:3c:e9:7e:c0:96:a2:39:fd:19:12:d7:e2:4b:38:
         b0:a8:eb:5c:aa:1e:8d:f5:74:28:be:46:08:15:1b:c7:88:93:
         da:de:3f:ba:68:f3:27:fb:27:b6:da:41:30:d2:ab:d7:68:f5:
         81:f4:6a:32:4a:42:a7:ab:78:23:21:68:f4:2a:b6:e0:e4:99:
         a5:43:22:b8:1a:c9:f5:53:f2:13:5a:cb:f7:28:4c:04:c8:3a:
         50:d5:05:65:7e:ed:18:63:e7:60:5b:88:56:09:7a:a3:0d:cd:
         b9:3d:9d:4a:69:39:eb:48:f3:15:d3:a6:01:16:a3:ff:8d:93:
         c9:ea:b9:b5:fc:2d:8c:6b:a1:95:6b:9e:a5:28:b2:ef:4f:ee:
         40:33:a8:8e:fb:70:eb:ec:c1:97:91:49:20:8a:b6:73:0f:f8:
         77:42:72:8b:86:74:3a:4c:78:7f:2f:d0:a7:9a:bd:22:98:10:
         67:9c:b7:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:33:45 2026 by rpki-client