Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7fb7998-8d85-472e-9f9c-cb49fca54803/0b953450-3fed-381c-bb18-67a095951db7.roa
File:                     0b953450-3fed-381c-bb18-67a095951db7.roa (raw, json)
Hash identifier:          KErGDcu/76K+WlTKmv8pXvIFfSsuCPt2Yeb4iWkIQSw=
Subject key identifier:   E7:44:FF:C0:85:19:D4:45:FB:DD:0F:C1:95:85:18:71:EB:9B:4F:86
Certificate issuer:       /CN=b7fb7998-8d85-472e-9f9c-cb49fca54803
Certificate serial:       010D0C9F4328584F03A76D114DA8A86BAE493500
Authority key identifier: 0A:A2:B3:33:B7:44:97:2E:72:D0:E5:E4:04:5B:A8:D0:FE:61:C5:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7fb7998-8d85-472e-9f9c-cb49fca54803.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7fb7998-8d85-472e-9f9c-cb49fca54803/0b953450-3fed-381c-bb18-67a095951db7.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     397744
IP address blocks:        198.135.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7fb7998-8d85-472e-9f9c-cb49fca54803/b7fb7998-8d85-472e-9f9c-cb49fca54803.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7fb7998-8d85-472e-9f9c-cb49fca54803/b7fb7998-8d85-472e-9f9c-cb49fca54803.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7fb7998-8d85-472e-9f9c-cb49fca54803.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:6d:11:4d:a8:a8:6b:ae:49:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7fb7998-8d85-472e-9f9c-cb49fca54803
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=bfc972fc-fe09-4fa0-87ee-ebefe8a61cf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:49:e6:87:1b:5a:b6:a6:f0:30:24:6d:fb:b7:
                    aa:ca:8c:13:87:07:d9:4d:36:d3:fa:5d:f4:e4:b2:
                    8e:a9:eb:30:e8:22:ac:1b:f2:21:b7:a7:2c:76:0e:
                    d6:b0:70:cb:51:13:e3:88:c5:2e:fb:3b:5d:b1:be:
                    fb:e6:03:7f:35:f8:c2:9b:d4:ba:a4:e4:13:bc:46:
                    7b:44:09:8e:46:b1:42:9b:7f:8b:6c:29:da:01:33:
                    27:b9:94:73:5d:c3:d1:b3:16:39:c0:b8:74:29:e4:
                    06:c6:f4:4d:80:a9:53:07:be:88:70:0a:7f:03:82:
                    7f:df:71:ce:83:3e:d9:e7:da:b6:ef:7f:68:2c:93:
                    de:fa:9f:ac:f7:a5:3a:4e:63:58:ec:08:37:c5:bb:
                    1e:2e:e0:2a:1c:c7:00:77:39:4f:f8:ae:ab:c2:c0:
                    c6:e3:08:61:b7:af:cc:ce:e6:fb:58:0b:81:bd:de:
                    69:19:72:f8:14:d3:e7:7d:58:d6:ac:1e:30:81:0c:
                    a9:80:3b:84:7a:aa:15:08:f8:92:4b:30:86:dd:9e:
                    92:17:44:bc:09:3b:7d:88:ad:ff:e0:22:58:c3:03:
                    1f:29:0a:fc:bf:51:c3:2d:3a:6b:99:c8:f8:7f:44:
                    04:bc:e8:97:00:c3:fc:e6:d0:e8:c8:f6:e7:11:75:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:44:FF:C0:85:19:D4:45:FB:DD:0F:C1:95:85:18:71:EB:9B:4F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7fb7998-8d85-472e-9f9c-cb49fca54803/0b953450-3fed-381c-bb18-67a095951db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7fb7998-8d85-472e-9f9c-cb49fca54803/b7fb7998-8d85-472e-9f9c-cb49fca54803.crl

            X509v3 Authority Key Identifier:
                keyid:0A:A2:B3:33:B7:44:97:2E:72:D0:E5:E4:04:5B:A8:D0:FE:61:C5:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b7fb7998-8d85-472e-9f9c-cb49fca54803.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8b:a1:1b:93:81:eb:68:51:69:12:87:29:bd:92:53:bf:dd:
         9b:fe:e1:f0:42:69:85:cc:66:dd:03:21:c3:58:9f:b1:54:99:
         96:e3:9d:14:a7:af:89:b8:d8:3f:24:06:a7:ba:e7:8b:43:cd:
         44:ec:7d:78:ea:01:fe:31:b7:01:57:04:2b:10:15:51:b8:c9:
         21:3b:7b:3c:a6:72:9f:33:30:19:d6:ae:25:47:e1:10:6f:45:
         b0:eb:a1:5d:10:75:06:87:38:36:0c:d7:87:43:42:d6:75:17:
         6d:0c:c4:94:56:60:c6:91:11:42:25:88:72:74:80:d2:39:53:
         db:58:9c:c8:ed:9e:96:b8:4e:70:f8:6c:83:b8:42:73:48:c8:
         83:3d:07:34:9e:ba:3a:b7:71:c3:bd:ff:dc:79:6f:9e:f1:a7:
         04:76:76:cf:f5:6c:21:61:51:4a:89:66:f3:c7:53:63:ee:15:
         ef:0a:6e:60:db:3b:90:0a:46:fa:d8:27:27:0a:af:bd:26:1d:
         3d:cb:c5:1a:c1:60:02:3f:a4:01:34:bb:4d:82:2a:b4:3a:52:
         88:27:1c:d2:39:23:f7:58:b9:43:68:82:ea:56:61:8d:c9:44:
         bf:db:cc:aa:06:d1:6f:c0:e0:c4:29:d8:94:04:0c:62:0f:19:
         a4:b7:03:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:50:56 2026 by rpki-client