Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/32ddcdb3-12e2-3ff2-819f-85e6abb57e5e.roa
File:                     32ddcdb3-12e2-3ff2-819f-85e6abb57e5e.roa (raw, json)
Hash identifier:          LJBp+rJQeKef2zYeBKfppw2Z15qjwKPANRlgSSexizU=
Subject key identifier:   99:DD:16:8F:B5:9B:22:0D:DA:EA:22:75:FC:15:41:2F:FD:5B:F7:CE
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584E3A2F38E74D0341125DB8A940
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/32ddcdb3-12e2-3ff2-819f-85e6abb57e5e.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     396347
IP address blocks:        198.241.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:38:e7:4d:03:41:12:5d:b8:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=0b33290a-6228-43e1-88eb-775124ba11c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:26:8d:a1:b1:13:d2:32:1e:37:4e:51:7f:
                    a0:e2:f7:d7:d6:78:d0:fd:12:f5:7c:83:d8:81:5f:
                    d7:aa:b2:cd:d4:fb:49:2d:e7:f0:73:ef:bc:54:ef:
                    84:2d:77:7c:3c:3b:b8:68:06:2b:c3:6e:e1:7b:55:
                    5f:62:90:97:f6:07:28:0d:6f:cc:1b:26:cd:aa:34:
                    ed:57:fc:41:d6:46:6d:13:a9:23:e3:9e:0c:42:76:
                    dd:73:ee:3b:f6:a6:49:be:12:30:01:aa:e4:c1:7d:
                    e4:01:aa:b1:7a:c7:1f:db:e7:c0:bd:a3:a2:c9:8b:
                    44:87:0d:c1:40:47:67:72:38:b3:27:52:fb:4a:03:
                    6c:f7:a9:25:05:e0:96:62:c0:8b:70:3e:02:05:c1:
                    a1:39:57:dc:50:5c:2a:16:fc:ba:0c:4e:f3:19:24:
                    0d:76:27:01:c9:b8:e4:32:51:fe:78:0a:d2:a6:cb:
                    e9:42:96:00:9d:0a:3d:7d:d2:c9:e5:15:87:00:b0:
                    df:cd:cd:34:d5:ea:fa:e5:c2:e6:2c:52:7e:51:71:
                    72:bb:b1:1c:93:c6:cd:b5:2e:1d:ee:bb:8e:ff:ab:
                    83:45:ed:c9:cd:c8:31:41:2b:67:96:56:b6:46:cc:
                    d7:a4:4e:44:ef:2f:12:5c:51:d8:de:57:ba:a0:39:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DD:16:8F:B5:9B:22:0D:DA:EA:22:75:FC:15:41:2F:FD:5B:F7:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/32ddcdb3-12e2-3ff2-819f-85e6abb57e5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:4d:67:45:65:d3:9a:64:9e:ff:40:4a:e1:34:40:eb:7a:
         e5:36:13:df:1e:46:19:0d:ed:d2:67:97:73:05:06:ef:68:93:
         23:02:76:49:41:ad:0d:18:fc:5f:6a:3a:21:f9:2e:b5:7d:a0:
         b8:da:09:d4:42:c1:40:f5:88:da:90:35:11:a6:1f:ef:d0:36:
         8e:7a:e1:32:98:dd:e1:e5:b9:58:03:03:ae:03:99:4d:f6:a9:
         3f:e8:64:3f:b9:cc:8a:b5:3f:a6:48:58:1c:74:dd:40:ac:e4:
         24:cc:ce:96:2d:fc:19:aa:96:ba:e3:8b:ff:d7:74:63:7e:2e:
         ba:39:bf:49:89:75:44:94:d7:56:d8:be:25:f5:54:e5:ce:9d:
         1f:15:bc:ba:23:52:15:08:04:f6:3b:77:1e:59:3f:17:cb:59:
         23:1c:b6:6c:4c:6c:5c:4e:99:67:3a:73:ed:a2:32:08:f1:72:
         86:ba:2d:cf:f7:ef:87:50:11:dc:08:0b:56:00:5d:01:db:d8:
         c3:b1:dd:93:05:6e:5c:2c:68:42:16:46:a8:8d:d8:aa:c6:f6:
         9d:bb:74:0c:00:4c:51:3c:04:14:cc:2b:47:5c:38:45:95:b8:
         f0:4d:39:9e:bc:17:f0:b4:02:07:bc:ee:3d:4d:ab:bf:86:7b:
         c5:d5:2a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:19:53 2026 by rpki-client