Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5668edcd-c21a-41de-8a9d-61ee202b8512/92546774-17f8-3f8e-8ace-19beb6d20106.roa
File:                     92546774-17f8-3f8e-8ace-19beb6d20106.roa (raw, json)
Hash identifier:          pimODr2JnkY+iVq1RLEkHEVakiVArf/BVjGcBmm/vks=
Subject key identifier:   1C:83:B2:1D:2D:57:09:4A:6C:D7:7C:6E:74:84:ED:A5:C0:53:86:5D
Certificate issuer:       /CN=5668edcd-c21a-41de-8a9d-61ee202b8512
Certificate serial:       010D0C9F4328584ECB0DC0ED5C4E2160B9FEB280
Authority key identifier: 7F:C7:EE:22:7F:EF:E3:A5:F4:F7:C2:C7:BB:FD:B1:FB:48:EA:22:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5668edcd-c21a-41de-8a9d-61ee202b8512.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5668edcd-c21a-41de-8a9d-61ee202b8512/92546774-17f8-3f8e-8ace-19beb6d20106.roa
Signing time:             Mon 10 Aug 2026 18:25:19 +0000
ROA not before:           Mon 10 Aug 2026 18:25:19 +0000
ROA not after:            Sun 08 Nov 2026 19:25:19 +0000
asID:                     11714
IP address blocks:        198.133.244.0/23 maxlen: 23
                          198.133.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5668edcd-c21a-41de-8a9d-61ee202b8512/5668edcd-c21a-41de-8a9d-61ee202b8512.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5668edcd-c21a-41de-8a9d-61ee202b8512/5668edcd-c21a-41de-8a9d-61ee202b8512.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5668edcd-c21a-41de-8a9d-61ee202b8512.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:0d:c0:ed:5c:4e:21:60:b9:fe:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5668edcd-c21a-41de-8a9d-61ee202b8512
        Validity
            Not Before: Aug 10 18:25:19 2026 GMT
            Not After : Nov  8 19:25:19 2026 GMT
        Subject: CN=f7472967-9bcf-45d3-9f76-27a0d39c63ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:69:69:d8:9e:95:7d:67:f1:fd:94:57:8f:
                    65:36:73:9a:cd:4f:bc:a9:93:c0:89:4a:37:7f:f4:
                    1e:80:7d:58:06:b6:91:22:87:22:c6:d9:91:f4:a4:
                    8e:8f:5f:1d:5d:ea:5e:9c:bd:6e:bb:be:c7:8e:cd:
                    bb:e4:5c:39:69:2a:c6:8e:b4:c8:e6:82:7a:83:8d:
                    15:f3:95:b1:b6:53:71:d8:07:78:7b:ff:9b:bf:fc:
                    69:6f:75:1f:e3:1f:dc:36:cb:a3:49:d3:b1:84:d9:
                    e5:b4:93:3e:65:19:df:c5:f5:77:9b:a3:06:c7:e4:
                    cd:09:6c:d8:e9:37:4b:7c:11:a7:07:4e:45:43:ad:
                    80:92:c9:e6:63:f0:f8:f2:0f:e3:ac:9b:85:bd:d8:
                    f3:3f:bf:08:77:9d:7b:90:41:40:45:b9:cf:8c:21:
                    8e:a6:93:48:10:f2:b0:1d:f1:c3:24:62:ec:21:94:
                    75:ab:f5:b1:34:76:54:79:03:f4:7a:b3:86:36:03:
                    10:2b:7a:61:68:c0:6e:9f:a4:47:88:d1:33:76:4a:
                    19:af:7e:80:d6:30:01:71:70:18:31:79:3d:93:0a:
                    b5:7d:0c:64:c6:ae:6f:fb:1a:ef:db:21:e9:1f:f9:
                    f1:76:27:36:81:3d:c0:ef:9e:bd:7b:79:45:20:8a:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:83:B2:1D:2D:57:09:4A:6C:D7:7C:6E:74:84:ED:A5:C0:53:86:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5668edcd-c21a-41de-8a9d-61ee202b8512/92546774-17f8-3f8e-8ace-19beb6d20106.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5668edcd-c21a-41de-8a9d-61ee202b8512/5668edcd-c21a-41de-8a9d-61ee202b8512.crl

            X509v3 Authority Key Identifier:
                keyid:7F:C7:EE:22:7F:EF:E3:A5:F4:F7:C2:C7:BB:FD:B1:FB:48:EA:22:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/5668edcd-c21a-41de-8a9d-61ee202b8512.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.244.0-198.133.246.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:30:78:44:26:5d:bb:61:9c:8e:48:1d:7d:b5:12:24:fc:ac:
         23:96:ad:bf:14:3b:3b:75:fe:e8:95:8f:84:d8:63:3c:1f:1a:
         bd:17:1f:c4:f7:a0:94:79:45:d6:94:a9:c5:b9:12:65:88:4f:
         c0:25:d9:ea:db:13:2c:22:d3:69:eb:42:eb:2c:01:2d:47:09:
         d6:f2:1f:17:0f:93:56:d0:37:84:b5:5f:f1:c7:fc:db:c8:e1:
         cd:ae:fb:76:81:5a:bc:3d:40:61:42:63:10:9a:98:7e:f8:ea:
         43:9a:6d:a0:7e:b4:c0:80:a0:55:0d:1e:1d:f4:aa:7d:91:08:
         b1:52:f2:db:3b:23:90:2c:39:44:d7:42:ad:39:f4:78:7c:f4:
         e3:07:f8:c8:cb:77:cc:ea:34:76:b7:0f:6e:8f:c3:32:09:b5:
         4a:dc:ec:52:c7:68:f0:2e:fe:15:8f:29:38:c6:8e:63:e6:4b:
         96:23:04:63:67:62:4a:69:2d:b2:fd:c1:53:b4:55:e0:70:f2:
         76:cb:9e:4c:3e:df:b4:fc:76:5e:95:51:ae:f4:5e:2a:fc:f5:
         1a:21:4f:4f:78:09:5a:eb:b4:8f:e1:49:f9:7d:24:fe:9f:2f:
         ea:4a:3e:71:6f:86:ff:ec:2c:26:1a:c0:83:11:cc:0a:f9:8c:
         4e:b4:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 23:28:17 2026 by rpki-client