Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/d998a6bb-1899-3bae-9bd8-566373d838a1.roa
File:                     d998a6bb-1899-3bae-9bd8-566373d838a1.roa (raw, json)
Hash identifier:          ErTQwzBW41EixHsYmGzhojfpXDj3cV1D6WNKSI4cdoo=
Subject key identifier:   06:C8:99:DC:9C:2C:DC:50:00:CB:BE:F3:40:21:CF:64:0B:05:E2:B5
Certificate issuer:       /CN=aa9d650e-309d-4772-a1ee-ed762e147583
Certificate serial:       010D0C9F4328584EA7881F05D4B84A1347A47180
Authority key identifier: 7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/d998a6bb-1899-3bae-9bd8-566373d838a1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53813
IP address blocks:        149.117.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:1f:05:d4:b8:4a:13:47:a4:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa9d650e-309d-4772-a1ee-ed762e147583
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c5184443-2720-4e55-b7d2-380e82f3f362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:45:d8:1b:d5:c8:97:18:f7:82:e5:81:7d:59:
                    63:08:67:bc:ea:2c:81:69:6b:d5:df:d7:e7:27:87:
                    8b:eb:d6:e2:17:a3:d9:ec:6f:b2:e9:84:98:75:ff:
                    08:da:aa:3c:44:3a:0f:8d:c7:b3:a7:88:06:79:95:
                    1d:03:cf:e0:5e:64:31:9c:40:70:18:08:f8:97:d5:
                    2f:2c:17:19:16:0f:89:9a:0c:55:61:e3:ed:58:2f:
                    ee:ec:69:4e:5f:c2:f4:4e:c9:ed:d5:20:9f:83:c0:
                    35:1e:82:01:cd:9c:26:fc:bc:be:79:c6:b7:ac:04:
                    b4:1f:68:1f:03:2c:8e:66:03:56:a9:e0:03:2f:39:
                    f0:20:5f:13:c2:62:4b:30:68:3c:99:95:de:39:c8:
                    50:2a:e6:66:74:8f:88:ab:06:f6:62:0d:70:65:e5:
                    5b:2f:29:31:df:2b:a7:db:a8:4a:66:3e:ab:33:9a:
                    c1:6e:85:cc:dc:e6:43:53:c6:bb:02:66:53:f4:fd:
                    6e:d3:bc:54:96:0c:e7:b6:d7:e8:01:1a:b3:b2:fb:
                    d1:c1:a9:64:44:3f:cc:22:df:60:eb:29:c0:e4:5b:
                    63:d5:09:21:1b:60:40:95:c1:c4:21:85:13:09:77:
                    21:07:9e:e3:e6:50:03:83:a5:c9:f5:a6:c5:65:b5:
                    30:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C8:99:DC:9C:2C:DC:50:00:CB:BE:F3:40:21:CF:64:0B:05:E2:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/d998a6bb-1899-3bae-9bd8-566373d838a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583/aa9d650e-309d-4772-a1ee-ed762e147583.crl

            X509v3 Authority Key Identifier:
                keyid:7A:77:02:87:F0:CD:88:51:31:68:DA:6A:E2:D0:F5:72:58:4E:3A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/aa9d650e-309d-4772-a1ee-ed762e147583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.117.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:bd:0a:0d:7e:d0:e8:73:00:a3:14:41:9a:f1:9f:5b:7c:90:
         23:2c:a0:61:55:e9:60:e8:58:25:86:3d:7a:63:69:da:c2:5b:
         18:cd:ee:14:be:18:e0:29:99:30:25:4c:94:d6:66:f8:75:52:
         16:7e:cc:af:d9:41:38:ae:98:ab:96:86:9a:46:15:3a:26:b6:
         31:d6:39:2e:b4:81:15:56:78:85:7b:04:3c:a8:aa:f2:74:4f:
         55:7c:60:c9:d8:6a:87:51:d5:68:5f:4a:09:0b:7a:ca:48:0e:
         cb:30:d5:92:b7:11:79:db:23:52:8c:ef:91:ea:35:ad:61:ec:
         6a:86:b5:ff:05:fe:30:75:25:e8:5f:6b:19:4e:26:e3:a6:5e:
         ba:e6:05:64:bc:63:4a:cf:1b:8b:08:63:42:cd:b7:08:9d:55:
         cb:2c:a2:d3:a3:84:57:8c:da:b1:52:e6:19:ec:bf:5c:3a:85:
         fc:5a:8e:c2:24:1a:b2:d2:11:ab:c7:12:71:80:b1:37:5a:d4:
         2e:ae:d9:be:e5:cb:c5:b1:b3:b6:17:5e:aa:aa:7d:4a:a1:9c:
         b0:e5:b0:08:14:34:91:af:c4:96:e3:2b:48:6d:d7:fd:39:7e:
         82:7f:ff:70:8e:90:57:eb:a9:ce:a9:08:3b:8c:a1:d4:0c:55:
         65:fc:3f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:22:18 2026 by rpki-client