Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7874b7f9-ad4e-3e94-a1df-12131e89227f.roa
File:                     7874b7f9-ad4e-3e94-a1df-12131e89227f.roa (raw, json)
Hash identifier:          k+XmIAKMac6B4gYf3LVt5Qo5SgMJDV0UIUkKPW8dWTw=
Subject key identifier:   EF:90:FF:9B:5E:0E:3D:B4:63:4E:5F:E1:0E:93:09:BA:99:55:61:EF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E296F192975135BEE1A639180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7874b7f9-ad4e-3e94-a1df-12131e89227f.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     396592
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:19:29:75:13:5b:ee:1a:63:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=5622d24d-6f44-4e7b-86fa-223766e5fa95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:60:21:3c:b4:90:21:8b:55:8d:91:90:57:5b:
                    20:5c:fa:bc:e4:0a:4a:66:2c:8d:ab:d6:92:d1:59:
                    e4:26:aa:4e:bd:54:0f:bb:c5:b1:df:fd:dd:0d:a9:
                    b5:67:89:9c:93:48:3e:e0:7f:38:2f:f1:68:8a:30:
                    a7:80:e0:6b:5d:0d:0f:8f:56:c3:f1:84:27:85:4f:
                    76:1c:f4:57:e7:1b:3b:1f:1c:24:76:e4:6e:6a:0d:
                    c1:80:d0:1e:ea:8c:d5:62:65:1d:bf:d5:c0:63:38:
                    70:c5:9e:0b:6e:fc:a1:f1:0f:84:4b:ad:6a:e3:91:
                    6f:9a:d6:02:de:15:e9:4d:09:20:92:2a:52:37:67:
                    d4:81:62:69:0e:8b:0f:32:8b:60:81:82:59:89:bf:
                    88:ea:08:bd:1a:58:bd:61:64:5f:aa:2a:00:97:81:
                    df:9c:38:25:94:d5:1f:22:85:b4:aa:c7:c3:e0:e4:
                    0c:1a:0a:ac:07:d1:15:7e:c3:bc:ca:84:e6:27:4a:
                    08:13:d7:d6:85:cb:21:b7:98:5e:29:b0:5e:28:c3:
                    ea:79:04:7e:6a:3f:f4:27:fa:5a:88:44:4e:3a:9b:
                    81:82:1f:83:56:e8:a6:e8:8f:55:d0:3c:b7:0f:7d:
                    73:fa:6b:01:ad:29:7b:e5:4b:8e:83:af:92:08:c6:
                    6a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:90:FF:9B:5E:0E:3D:B4:63:4E:5F:E1:0E:93:09:BA:99:55:61:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7874b7f9-ad4e-3e94-a1df-12131e89227f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:58:fd:a6:05:c0:6f:2f:97:84:02:ae:3d:7f:59:7a:36:6b:
         b0:3d:c8:a8:f8:3b:f4:87:15:1f:4b:0a:dc:98:e4:6c:19:e5:
         af:ea:9c:73:76:16:99:c8:18:be:b0:72:63:7a:a9:49:7d:34:
         a8:7c:94:d8:08:0b:10:73:9d:fd:9d:c2:aa:78:56:18:dd:8f:
         ff:1e:e0:89:25:74:e6:10:2c:ac:8d:c7:fd:50:8f:00:b6:f5:
         0b:d1:a7:b6:20:32:39:35:4c:e7:6d:07:2a:01:c7:52:14:75:
         a8:50:2c:67:da:04:11:a9:2f:19:7f:9d:42:f1:b4:ff:ad:50:
         63:07:d6:8d:7a:4a:d7:de:95:38:6a:16:5f:28:01:68:14:93:
         e8:27:03:3d:16:53:2b:ac:41:9d:ee:92:3c:49:09:85:c9:39:
         da:07:92:3b:28:e5:21:e5:6f:6f:e1:23:6a:be:39:bc:5e:19:
         fb:01:69:7a:49:d4:24:de:0f:32:b5:25:fe:10:52:5b:18:33:
         38:0d:b1:9f:61:e9:f8:f0:be:cd:79:8f:6e:18:5f:f8:80:bd:
         d7:84:d0:e6:0a:c0:7d:98:96:dd:d8:a1:e2:f4:69:2a:e8:ad:
         a8:42:0e:3a:93:c1:b2:c1:60:c2:c8:31:25:a5:70:c5:b2:7e:
         ab:80:c9:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4pbxkpdRNb7hpjkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYxMzIxMDAxMloXDTI2MDkxMTIxMDAxMlowLzEtMCsGA1UEAxMk
NTYyMmQyNGQtNmY0NC00ZTdiLTg2ZmEtMjIzNzY2ZTVmYTk1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWAhPLSQIYtVjZGQV1sgXPq85ApKZiyNq9aS
0VnkJqpOvVQPu8Wx3/3dDam1Z4mck0g+4H84L/FoijCngOBrXQ0Pj1bD8YQnhU92
HPRX5xs7HxwkduRuag3BgNAe6ozVYmUdv9XAYzhwxZ4Lbvyh8Q+ES61q45FvmtYC
3hXpTQkgkipSN2fUgWJpDosPMotggYJZib+I6gi9Gli9YWRfqioAl4HfnDgllNUf
IoW0qsfD4OQMGgqsB9EVfsO8yoTmJ0oIE9fWhcsht5heKbBeKMPqeQR+aj/0J/pa
iEROOpuBgh+DVuim6I9V0Dy3D31z+msBrSl75UuOg6+SCMZqRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO+Q/5teDj20Y05f4Q6TCbqZVWHvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzg3NGI3ZjktYWQ0ZS0z
ZTk0LWExZGYtMTIxMzFlODkyMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxhHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBY/aYFwG8vl4QCrj1/WXo2a7A9yKj4O/SHFR9LCtyY5GwZ5a/qnHN2
FpnIGL6wcmN6qUl9NKh8lNgICxBznf2dwqp4Vhjdj/8e4IkldOYQLKyNx/1QjwC2
9QvRp7YgMjk1TOdtByoBx1IUdahQLGfaBBGpLxl/nULxtP+tUGMH1o16StfelThq
Fl8oAWgUk+gnAz0WUyusQZ3ukjxJCYXJOdoHkjso5SHlb2/hI2q+ObxeGfsBaXpJ
1CTeDzK1Jf4QUlsYMzgNsZ9h6fjwvs15j24YX/iAvdeE0OYKwH2Ylt3YoeL0aSro
rahCDjqTwbLBYMLIMSWlcMWyfquAyU4=
-----END CERTIFICATE-----
Generated at Sun Jun 28 19:34:20 2026 by rpki-client