Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/d60d8d38-d845-34b2-a1e2-4daa09ae6933.roa
File:                     d60d8d38-d845-34b2-a1e2-4daa09ae6933.roa (raw, json)
Hash identifier:          eVljM3C+rg0Q5j2VyJUXbDFptQ+LIg8BopbBGlr1fGI=
Subject key identifier:   F7:A8:9B:0C:FE:79:D1:CB:A8:19:4A:A6:C9:61:A5:8A:F5:63:37:59
Certificate issuer:       /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial:       010D0C9F4328584EFEBCCCAF2CF9BAF0DD695300
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/d60d8d38-d845-34b2-a1e2-4daa09ae6933.roa
Signing time:             Sat 29 Aug 2026 06:44:14 +0000
ROA not before:           Sat 29 Aug 2026 06:44:14 +0000
ROA not after:            Fri 27 Nov 2026 07:44:14 +0000
asID:                     198566
IP address blocks:        162.218.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:bc:cc:af:2c:f9:ba:f0:dd:69:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
        Validity
            Not Before: Aug 29 06:44:14 2026 GMT
            Not After : Nov 27 07:44:14 2026 GMT
        Subject: CN=d88d988a-337b-4a61-aa72-3a563890509a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:6c:a1:d0:34:8d:8e:17:92:2c:be:9b:17:
                    6e:ec:51:c0:39:ed:3c:69:1c:19:5c:27:d5:f9:3f:
                    05:0c:8b:8e:2f:ae:e2:16:ee:aa:95:6c:b1:22:a3:
                    72:e6:d5:3b:1a:fc:67:a8:7f:77:b4:64:e4:4c:5e:
                    32:c8:e0:23:95:62:5c:29:b0:3f:ba:4b:d1:35:01:
                    0e:c1:a3:83:1a:82:7f:9c:ec:87:5c:b9:e6:bc:f4:
                    14:92:92:cb:2c:41:5d:c3:71:06:7f:e4:a5:24:0b:
                    a9:c1:82:86:d8:30:c3:15:80:65:cd:4e:98:9c:d0:
                    1e:8e:7c:0d:ea:af:a4:ee:61:9f:10:c3:35:fc:45:
                    c5:08:3e:3f:4f:87:38:fe:4b:9c:60:4c:0b:50:c7:
                    a3:6a:28:57:db:1a:98:7d:10:49:6c:cc:11:e7:3b:
                    19:23:f4:97:6b:fc:45:9f:d1:ce:d9:71:88:cd:87:
                    e2:45:e8:a9:fd:e3:9a:d1:91:ce:f4:9a:9a:cb:f4:
                    cf:fe:1c:21:9c:c8:b4:bf:b9:43:5b:1c:06:aa:d4:
                    b8:d5:13:a1:b6:4e:56:d9:d2:ba:20:f4:8c:6f:a1:
                    be:a6:c3:01:d2:7e:ab:bd:8c:6a:b6:2d:02:33:80:
                    46:5e:45:5c:ad:c9:7a:a1:76:e4:72:da:e8:6f:44:
                    fd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A8:9B:0C:FE:79:D1:CB:A8:19:4A:A6:C9:61:A5:8A:F5:63:37:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/d60d8d38-d845-34b2-a1e2-4daa09ae6933.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl

            X509v3 Authority Key Identifier:
                keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:23:42:de:14:8d:fd:58:7b:2a:9a:71:bc:9f:af:73:2d:32:
         9e:c2:a1:71:a7:c6:1f:e5:98:b6:ae:d5:77:d3:46:96:3d:d4:
         39:eb:6f:12:e2:d5:1f:f2:91:f7:ee:24:d5:af:13:eb:38:4b:
         08:ee:45:00:ba:dc:8f:2c:ab:5f:7b:36:1a:85:76:44:62:e8:
         75:97:a6:2d:67:98:1f:1b:7b:ae:90:72:ee:97:2d:5f:dc:6b:
         f2:ab:f5:1b:f6:4c:f6:0c:91:9d:a8:ed:81:92:2a:ad:c9:c9:
         bb:85:e4:6e:60:1d:6f:2d:99:9d:45:2c:c2:24:a4:48:db:8d:
         d4:45:a3:e9:d5:e8:d0:c9:0b:ae:8a:05:73:a9:5d:b8:34:f6:
         e3:a7:29:4c:86:dd:b5:fe:fe:f6:53:84:a4:fb:23:15:6e:33:
         68:d6:ef:96:b2:fb:b1:3c:a3:04:06:c6:fc:2b:67:1e:b3:40:
         71:9f:23:ee:51:1f:94:ec:6d:05:0a:b4:99:6e:35:5e:1b:c6:
         82:3e:6e:3e:70:60:0b:7f:bf:32:c4:09:43:28:a2:4b:86:7c:
         2c:52:34:f6:3b:15:75:2e:04:69:f5:7f:ed:2f:99:92:2d:10:
         80:ea:a0:cd:4d:82:5f:b2:e6:fe:25:6b:3c:01:d0:5e:c9:67:
         e0:12:53:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:16 2026 by rpki-client