Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/968a3a68-f5c5-3f4a-88bb-f2c30cfab1a1.roa
File:                     968a3a68-f5c5-3f4a-88bb-f2c30cfab1a1.roa (raw, json)
Hash identifier:          vUe1/Re1B4SRIKT95FyG33NZQOc19ZTP1ynXpJ3/2xc=
Subject key identifier:   85:98:C9:4C:89:45:39:D4:07:CC:67:3D:21:35:F6:72:CE:F7:5C:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ECBD1C08176A01567BE697000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/968a3a68-f5c5-3f4a-88bb-f2c30cfab1a1.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     396541
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:c0:81:76:a0:15:67:be:69:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=8ce565c6-0c45-4554-acfe-de9880e74b29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e1:9a:e4:70:cd:d9:58:ef:f4:ca:42:89:61:
                    82:29:fb:d8:26:16:36:6f:39:57:98:c3:35:43:d1:
                    97:75:7e:70:5b:76:13:3d:95:b6:ff:1c:01:5a:40:
                    fa:23:36:83:62:f5:41:b9:a1:77:51:b8:63:c5:09:
                    5e:cd:1f:8a:e5:ce:0f:18:40:9e:d6:1e:fa:4a:e0:
                    49:bd:29:c1:e0:d2:98:71:f9:25:88:e0:04:07:9a:
                    c2:3e:2c:e6:12:20:bf:50:a1:88:33:f0:02:49:d3:
                    d5:ee:28:55:f4:49:2a:e2:cc:cb:98:85:53:e7:30:
                    e8:11:86:95:0c:e4:c6:71:d7:64:07:14:9d:51:89:
                    bd:31:86:5b:52:ad:43:a7:c6:ab:4b:fc:43:95:79:
                    ed:18:f9:e9:22:8c:f2:7c:44:f5:6d:3b:89:5e:54:
                    fe:4e:1f:21:ad:a9:62:38:fe:a2:54:08:e5:06:13:
                    b2:26:19:33:49:fd:6a:a1:fd:b7:03:c9:16:06:7b:
                    41:51:c8:76:c7:49:14:6b:14:ab:2f:e3:bf:24:fc:
                    02:0c:b8:41:1d:76:7f:80:c5:22:61:86:b7:d4:5f:
                    f3:26:a9:31:e6:39:60:8e:b4:6b:60:83:ac:d7:cf:
                    82:aa:6f:eb:25:2b:53:f1:82:8d:44:c9:2b:d8:82:
                    f7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:98:C9:4C:89:45:39:D4:07:CC:67:3D:21:35:F6:72:CE:F7:5C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/968a3a68-f5c5-3f4a-88bb-f2c30cfab1a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:4c:89:fe:f7:c1:a3:d4:8f:f4:08:57:1b:e2:ba:2a:17:08:
         1f:6a:c7:79:ef:2c:8e:9f:81:c4:82:eb:a2:58:dc:a0:ac:f2:
         9d:ac:aa:34:6e:1e:e8:48:63:c9:48:fb:17:45:e8:29:2d:1e:
         47:62:d0:38:72:02:5f:f1:0f:eb:a5:f3:f1:5e:ba:7f:08:3c:
         36:d5:eb:98:98:13:cc:98:14:15:89:29:00:a1:65:41:52:1a:
         59:37:d9:1b:ee:23:0f:48:84:13:c0:59:6f:bb:aa:d4:95:77:
         01:35:5b:18:50:a2:03:73:68:4f:79:26:b0:fd:92:68:5a:b5:
         51:d3:53:a3:05:5a:dc:bf:87:39:f0:68:f2:b8:a4:e7:6c:1d:
         b0:9d:b4:64:8f:74:88:c3:20:38:22:cd:c2:b7:87:cd:a6:15:
         5c:e7:fd:ad:aa:69:8d:13:01:52:ef:59:50:c5:fe:25:df:78:
         b4:13:05:e5:b0:b6:2f:76:67:0f:52:4e:a4:f9:a3:99:0f:0e:
         b6:01:01:ad:9d:12:ce:09:32:a2:a5:4e:02:dd:83:65:cd:15:
         77:bf:68:5b:55:f7:ad:c7:3c:34:22:51:2a:51:38:6e:2b:87:
         ce:84:f6:0b:dd:6c:a2:fa:86:d2:06:b8:66:ca:ee:1b:98:25:
         21:66:80:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:47:43 2026 by rpki-client