Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa
File:                     c43498db-1a52-317c-a01f-d3f059ca3df1.roa (raw, json)
Hash identifier:          nvgvKROkZIZVnCcdk3JgBEuH+Gt+vnIoyNyc/IQd4iQ=
Subject key identifier:   F8:4E:2E:9B:83:50:95:38:59:C1:0E:96:5F:1B:3A:1D:38:3D:61:56
Certificate issuer:       /CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
Certificate serial:       010D0C9F4328584EA78FB6FE33DBEFFBE887DC00
Authority key identifier: 58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20473
IP address blocks:        199.255.148.0/24 maxlen: 24
                          2602:fd1e::/36 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:b6:fe:33:db:ef:fb:e8:87:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccb6a98a-09f4-4e29-9406-bc0cb1661dfc
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e13d2616-968c-4828-82fa-5801ddc7c5ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:99:d0:bb:65:94:42:87:69:eb:f6:42:46:
                    6b:ae:bb:9a:b0:ee:7a:f8:22:34:ac:b1:f4:7e:cd:
                    b4:6a:e6:1d:fa:86:2f:57:38:13:40:bb:fe:70:96:
                    82:39:41:f4:ce:de:54:a9:c7:0d:da:af:08:92:67:
                    be:97:18:9f:98:7b:04:37:13:a0:06:97:d7:3c:71:
                    07:8e:d0:44:fe:39:64:76:a8:be:ac:44:57:e3:4a:
                    cd:9e:6f:ff:ed:aa:31:07:5a:f7:da:d9:6b:a3:3c:
                    04:5a:3c:c2:6b:9f:32:28:13:9f:3a:4a:00:f1:4d:
                    f5:28:c6:13:99:a2:ea:53:64:85:02:e2:52:15:e9:
                    28:b1:1d:a6:24:0b:fa:39:89:89:a9:53:64:a3:6a:
                    86:64:98:ca:33:35:72:6a:be:be:d3:b4:5a:c7:3b:
                    63:a5:f9:ec:1e:54:9a:52:c8:11:a9:3a:3d:1c:12:
                    4b:45:7b:e0:b5:18:40:30:23:06:36:e4:1d:12:09:
                    7f:b4:35:97:93:c2:6a:54:b6:a9:62:46:f0:8d:d9:
                    af:fa:a8:d6:56:fa:8b:2d:3a:1c:fc:e9:a3:46:61:
                    1a:47:da:ec:20:ae:01:8d:83:3a:1c:8f:b2:d6:6d:
                    81:6a:ca:b1:b0:1e:02:e5:74:08:42:eb:6f:40:bc:
                    58:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4E:2E:9B:83:50:95:38:59:C1:0E:96:5F:1B:3A:1D:38:3D:61:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/c43498db-1a52-317c-a01f-d3f059ca3df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:8B:8A:D7:D2:BF:71:D8:C2:07:5C:12:9D:84:4E:DB:90:6D:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccb6a98a-09f4-4e29-9406-bc0cb1661dfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.148.0/24
                IPv6:
                  2602:fd1e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:18:a3:ac:35:ed:e5:bd:43:94:40:8f:3a:ec:4a:1a:40:ec:
         c7:0c:af:3e:b7:a4:91:6f:50:17:3a:81:3b:ca:8a:90:64:8b:
         0b:c9:29:d3:f7:46:24:d0:b6:b7:e4:3a:0a:48:bc:92:eb:63:
         be:fd:06:e9:0f:c8:43:01:e2:bd:1b:6d:f4:92:82:2c:d6:22:
         35:ac:5b:76:b1:a1:31:0c:04:9c:7c:4a:a1:21:65:1e:f6:18:
         b5:f2:4c:42:24:60:c9:72:e2:3b:61:83:bd:8f:9d:6b:b3:1d:
         b8:87:1d:8a:6e:26:a8:c0:d9:dc:4b:3e:03:12:68:a8:ba:f9:
         11:b2:fa:5a:75:62:88:56:e7:04:77:14:c6:dd:6d:ae:ae:fa:
         f3:8f:bd:a4:ba:db:92:bf:6d:38:cd:f9:50:7a:ac:bd:6e:49:
         8f:6a:c3:13:65:38:a0:05:07:c5:f0:17:83:51:e2:2d:ab:1e:
         fd:7d:7e:a3:dd:27:2a:67:7a:69:b8:1d:00:54:78:f3:66:28:
         e9:24:4f:c8:bb:12:97:7b:ee:7f:1d:85:d4:2c:6d:0e:23:79:
         71:35:cf:db:e7:0f:91:e5:6c:d4:fe:37:33:4c:f5:51:5c:ca:
         db:ce:69:b6:5f:2e:4a:0f:37:1c:a0:29:10:6b:64:98:00:45:
         7d:85:8b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:08:42 2026 by rpki-client