Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0fd115d-9db8-3931-bf12-ba20d49063b5.roa
File:                     e0fd115d-9db8-3931-bf12-ba20d49063b5.roa (raw, json)
Hash identifier:          nvEuNrcY4wK5aC7KmT0hrxyek+nRObJ2Hoyzwonp5w8=
Subject key identifier:   7F:11:68:AA:3F:11:53:28:D9:E7:70:E5:77:59:B9:C9:23:65:75:10
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584F49733AE9E46E7E7D468BB3C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0fd115d-9db8-3931-bf12-ba20d49063b5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36626
IP address blocks:        198.41.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:3a:e9:e4:6e:7e:7d:46:8b:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=0b4d13a9-779d-4aac-b01d-679aee0353e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:a3:3c:aa:0d:a1:7b:fd:76:0d:93:63:17:
                    ce:74:65:7d:28:bd:c1:f5:f0:d3:77:3e:4f:aa:41:
                    2d:8e:c0:d6:c0:7e:08:3e:7f:ed:63:36:bd:14:0d:
                    62:f8:1f:b0:b1:26:c4:fc:2d:87:d6:c9:6a:1c:44:
                    75:95:fd:43:2a:6f:9c:15:99:72:75:c3:46:e4:1a:
                    e6:ac:04:cb:01:ca:31:e3:2c:63:59:5e:54:6b:59:
                    cb:11:3c:6c:18:fa:76:83:8a:f9:6c:b0:9d:df:8c:
                    82:9d:bf:a3:4c:76:72:0f:d3:0f:28:6d:f6:d5:bc:
                    a2:4c:17:ec:2d:16:ee:36:78:b8:bd:25:7e:d9:32:
                    6b:27:32:86:0c:06:af:a6:6b:59:b5:24:3c:44:70:
                    c2:86:18:ea:e9:32:89:98:f7:12:37:7f:84:38:79:
                    e9:27:df:ee:6d:11:68:02:14:fb:ed:28:59:61:de:
                    a6:31:16:6c:2d:59:17:32:e4:28:0c:8f:bb:d8:d2:
                    3f:8e:bd:77:c1:eb:b7:04:e5:ca:7e:e0:40:9d:8b:
                    94:40:3d:95:48:21:d5:0a:47:e5:c0:db:2c:bc:7a:
                    a1:b2:b4:ef:aa:37:34:99:fa:35:d9:ff:eb:53:fd:
                    e3:d2:9e:39:e6:cd:f0:59:a8:a5:c2:10:c2:7c:65:
                    75:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:11:68:AA:3F:11:53:28:D9:E7:70:E5:77:59:B9:C9:23:65:75:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/e0fd115d-9db8-3931-bf12-ba20d49063b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:de:51:d3:da:9d:76:65:66:46:fc:9f:0c:72:0e:1e:e3:90:
         1d:41:ff:dc:e7:7b:cf:2a:56:b8:dc:47:91:c1:7a:f0:b9:05:
         6f:0f:97:87:ac:ef:37:ab:2e:ab:f0:79:7d:77:40:30:0e:b1:
         58:f2:6c:89:4d:93:14:af:58:74:c8:d4:cf:9d:39:b2:69:0e:
         f5:ea:ec:28:12:59:9c:51:e8:8b:c9:c2:5f:ba:5c:a4:9b:57:
         6d:a9:aa:fd:76:b0:6c:9e:e0:3f:5c:15:c9:5f:df:23:f3:e7:
         3f:7f:5f:18:90:35:67:4a:8d:b6:4f:d7:b5:07:37:8b:92:87:
         47:2d:97:98:38:67:d9:05:47:3a:1c:93:79:19:7a:af:bf:70:
         e3:14:c2:74:24:0a:68:31:b6:9d:ba:aa:e3:63:12:df:aa:d8:
         37:2e:6a:fc:fb:4e:72:11:13:46:ae:42:7f:4b:30:f0:db:72:
         64:07:1b:d3:8f:56:fc:41:bd:ce:5a:58:91:1f:4f:2f:2d:5a:
         9e:8d:1b:17:19:b1:c3:dc:2b:80:d3:a8:10:6d:0a:f2:59:e9:
         11:03:86:12:c6:20:c0:70:1f:1a:5d:6c:1b:bb:c7:74:c4:80:
         7f:ac:05:ff:36:f7:82:55:94:cf:b2:c1:54:4f:44:77:3b:cd:
         f4:b6:86:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:42:47 2026 by rpki-client