Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa
File:                     74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa (raw, json)
Hash identifier:          TAcBF3Aa154FxG/Ut7J4//Wbqy6bZNomwtuVtesYDnw=
Subject key identifier:   D6:A8:CC:D0:CD:24:5B:7C:1B:8E:9D:BA:91:F2:B2:81:A7:90:40:65
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584D1172661E9FB65F73893D91C0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa
Signing time:             Thu 05 Mar 2026 14:00:40 +0000
ROA not before:           Thu 05 Mar 2026 14:00:40 +0000
ROA not after:            Wed 03 Jun 2026 13:00:40 +0000
asID:                     198949
IP address blocks:        198.135.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:72:66:1e:9f:b6:5f:73:89:3d:91:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar  5 14:00:40 2026 GMT
            Not After : Jun  3 13:00:40 2026 GMT
        Subject: CN=b6c4907a-8247-41bd-bbeb-34c0dff91ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d9:15:d0:65:c4:e1:1e:01:28:2e:60:c8:2d:
                    57:79:76:fc:cf:c7:18:bf:a8:d6:94:8d:f9:fe:a1:
                    42:59:ea:ef:84:16:79:ec:23:27:7d:0f:0d:0b:8c:
                    6a:ef:aa:7c:3c:5c:61:1e:16:ee:f9:b9:dd:07:da:
                    4d:e7:07:c0:a6:1f:fd:47:e1:35:5f:56:c7:db:f8:
                    93:fb:3d:80:6e:8a:78:48:d1:72:db:2b:fb:f5:81:
                    c3:73:1f:15:1d:6b:9b:93:ff:4e:6f:3c:8d:f1:f7:
                    ed:2d:a1:46:b4:ac:63:9e:88:75:d6:5c:cf:de:bf:
                    3a:e8:2e:7d:4a:86:db:2e:e0:f2:72:67:b9:7f:c3:
                    09:0f:15:7c:89:3f:77:4d:2e:d7:70:ce:49:8a:68:
                    d7:d7:74:05:35:78:36:60:9c:e1:59:0b:61:b2:05:
                    cc:69:c2:ab:9c:51:f5:9b:e1:bf:f5:e9:92:86:ba:
                    a8:8a:74:cf:96:f3:79:18:82:f5:c9:08:38:1c:44:
                    86:4c:cc:dd:f9:ca:e6:d0:6d:2d:17:df:98:9a:ec:
                    e0:4d:c5:ea:b3:b5:0f:9f:8a:26:2b:8d:78:a3:4c:
                    9f:80:17:09:9b:47:be:b9:c5:01:0a:9b:e3:05:72:
                    90:66:91:2e:5e:c5:2f:00:6a:5f:cd:17:7b:31:2d:
                    c2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A8:CC:D0:CD:24:5B:7C:1B:8E:9D:BA:91:F2:B2:81:A7:90:40:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/74d3fb1d-cdb0-384f-8c14-4dd405cd991c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:00:36:68:50:d8:77:f8:85:2f:15:35:c7:4c:30:18:fa:45:
         d4:cc:d9:80:9e:a6:aa:ae:e3:63:30:bb:d1:c3:3d:de:a2:8e:
         cc:90:e8:72:f4:4a:c9:53:bf:ee:31:5a:d6:2b:f2:89:48:d4:
         7b:4d:40:40:c6:4c:2e:3b:0c:ca:3e:de:2a:a7:f0:93:d0:42:
         9e:61:5c:28:bb:9c:21:3f:f0:fc:ee:81:ae:a4:fa:b7:05:80:
         d2:74:8f:e4:6a:90:b3:27:dc:5c:f7:72:72:af:1e:41:67:e5:
         78:d1:d4:5b:45:15:a6:b5:71:a7:a3:72:a7:8a:6b:2d:ae:e5:
         e7:fd:e5:4e:c7:d9:25:d0:24:2f:22:15:31:a8:a1:c4:58:05:
         a1:e8:1c:74:c9:ce:d1:4e:ec:a0:27:cd:7a:0c:1b:17:ef:e5:
         a5:de:8b:07:b8:5c:df:1c:ac:d9:98:0b:8f:18:62:00:ff:56:
         1d:32:82:be:9d:d9:ec:b4:0d:b3:29:e7:ff:4e:69:75:8b:f3:
         23:ee:59:60:96:96:f8:c8:30:83:b8:c7:bf:2d:21:58:d6:af:
         b4:94:40:1c:0e:cb:ac:76:7f:d7:ce:ce:f3:1c:bc:7f:e0:a0:
         a1:75:4e:5f:2b:bb:3f:1c:62:ba:c4:2c:ab:c8:6f:af:60:4a:
         09:6c:e4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:41:43 2026 by rpki-client