Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd/8f02ac3b-2198-3171-a034-c649bc951500.roa
File:                     8f02ac3b-2198-3171-a034-c649bc951500.roa (raw, json)
Hash identifier:          G+aIUNaKVWXZWti/JQvRzlyQdIFVwEVrUfiJ9Kb9J+c=
Subject key identifier:   1D:09:B8:0D:88:9E:7A:F5:E9:66:4F:60:6C:3D:AF:54:40:8C:BA:06
Certificate issuer:       /CN=036ec135-26c9-463e-9dac-65b2c44082cd
Certificate serial:       010D0C9F4328584EC0A765697DA21C174CAB2280
Authority key identifier: C1:22:08:8D:54:FF:DA:C4:AF:B3:2D:4D:C1:43:D5:F6:22:30:DD:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd/8f02ac3b-2198-3171-a034-c649bc951500.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     21666
IP address blocks:        198.246.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd/036ec135-26c9-463e-9dac-65b2c44082cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd/036ec135-26c9-463e-9dac-65b2c44082cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:65:69:7d:a2:1c:17:4c:ab:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036ec135-26c9-463e-9dac-65b2c44082cd
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=5c6b7bde-c629-433c-aeaa-055b38037f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4e:3d:fc:8e:a0:69:5b:54:cf:1a:08:4f:d1:
                    af:0c:c4:e2:3c:9b:26:b5:e3:2c:86:19:a4:c6:33:
                    01:10:e0:c1:95:2d:2e:94:32:91:16:b2:58:45:21:
                    8a:ad:2d:10:ca:06:8d:7f:29:63:11:af:3f:a2:0c:
                    34:9d:62:56:f1:8d:66:36:b5:51:08:86:c8:11:5c:
                    ca:8e:a5:da:55:e0:1a:f8:ec:f6:5b:d8:da:82:9a:
                    81:b0:2e:b5:72:7b:de:2e:93:62:68:05:e0:ed:ff:
                    d1:3f:67:02:ff:11:b3:2c:49:71:75:67:c8:34:7d:
                    84:3c:4f:77:a4:78:c5:41:70:32:2f:81:67:94:21:
                    ef:96:5d:88:b8:bb:55:8e:17:99:30:f8:00:5e:59:
                    e2:31:05:92:11:7c:b9:64:3a:47:85:d2:5f:fe:27:
                    7c:18:64:21:24:ec:20:ad:e6:57:0f:67:9a:5a:0d:
                    e7:32:f5:a7:c0:65:7d:90:37:9b:87:90:86:cc:1a:
                    cf:08:8d:72:cd:69:f6:45:d5:e5:4f:68:b3:89:30:
                    14:73:a7:1d:b6:6c:14:0d:37:fe:43:e5:84:00:85:
                    d9:d2:9c:72:54:3d:cf:fd:28:51:7b:10:81:8e:aa:
                    63:4d:d9:78:41:2b:0b:49:e9:77:a2:e9:b1:b0:4b:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:09:B8:0D:88:9E:7A:F5:E9:66:4F:60:6C:3D:AF:54:40:8C:BA:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd/8f02ac3b-2198-3171-a034-c649bc951500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd/036ec135-26c9-463e-9dac-65b2c44082cd.crl

            X509v3 Authority Key Identifier:
                keyid:C1:22:08:8D:54:FF:DA:C4:AF:B3:2D:4D:C1:43:D5:F6:22:30:DD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/036ec135-26c9-463e-9dac-65b2c44082cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.246.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e8:00:2d:51:4e:94:46:c3:5f:2e:c8:bf:0d:34:28:b6:13:
         57:6e:22:2e:61:f2:1b:b7:73:ad:64:7e:a0:e5:03:56:51:fa:
         53:85:49:a5:93:77:73:23:4e:5f:68:83:53:a1:3a:e9:5d:49:
         47:66:3d:8b:35:6b:c3:94:39:c8:3b:94:02:52:97:37:1d:cb:
         41:a8:96:8c:69:16:bb:53:fe:c3:35:1b:ba:b6:1a:74:f0:b6:
         dc:8b:ad:f9:01:e4:72:36:70:b6:4c:8a:fd:e4:fa:f7:83:40:
         3f:56:d6:02:ed:b4:12:7e:97:c3:77:ad:a0:50:c6:ed:fa:e6:
         4a:67:c5:f1:af:cc:97:b9:10:f1:60:3f:9f:b6:8b:3f:b5:b3:
         e8:f4:20:49:ad:af:76:78:f3:0f:1d:8d:c2:7a:f9:2f:ee:b3:
         bb:3b:e3:20:a3:2e:09:93:e8:6e:ef:2b:cd:1a:14:b0:75:0e:
         76:b5:8f:7d:c1:e5:54:de:0d:0c:8b:0b:c3:01:ac:6d:e1:f3:
         2b:1c:2e:27:2c:28:bc:ec:ef:c8:0e:d2:b9:5c:04:cd:dd:2a:
         dd:95:78:9a:27:c6:ad:1e:4c:bd:da:eb:5d:11:3f:de:5a:3d:
         9e:92:fd:a6:3f:a9:57:fb:11:a6:2b:47:4f:b8:53:6d:8e:51:
         54:3b:8e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:58:57 2026 by rpki-client