Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/88c1449a-ffa6-4248-945c-c70034aef246/7ab18f55-9b45-3eca-9778-84f6a9362f23.roa
File:                     7ab18f55-9b45-3eca-9778-84f6a9362f23.roa (raw, json)
Hash identifier:          iAZP1HKmVELBL986FAw/K71zj7aYg86jQK4muuOu4bs=
Subject key identifier:   FD:E1:B2:8F:7B:37:34:AF:E3:CD:60:02:1B:44:D6:2C:02:B3:18:6B
Certificate issuer:       /CN=88c1449a-ffa6-4248-945c-c70034aef246
Certificate serial:       010D0C9F4328584EE46C05613065ED3DB1072400
Authority key identifier: AC:7F:1D:C2:12:3D:A8:80:96:75:4F:E1:28:D1:18:A0:E3:18:DE:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/88c1449a-ffa6-4248-945c-c70034aef246.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/88c1449a-ffa6-4248-945c-c70034aef246/7ab18f55-9b45-3eca-9778-84f6a9362f23.roa
Signing time:             Wed 19 Aug 2026 20:30:28 +0000
ROA not before:           Wed 19 Aug 2026 20:30:28 +0000
ROA not after:            Tue 17 Nov 2026 21:30:28 +0000
asID:                     36315
IP address blocks:        198.212.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/88c1449a-ffa6-4248-945c-c70034aef246/88c1449a-ffa6-4248-945c-c70034aef246.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/88c1449a-ffa6-4248-945c-c70034aef246/88c1449a-ffa6-4248-945c-c70034aef246.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/88c1449a-ffa6-4248-945c-c70034aef246.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:6c:05:61:30:65:ed:3d:b1:07:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88c1449a-ffa6-4248-945c-c70034aef246
        Validity
            Not Before: Aug 19 20:30:28 2026 GMT
            Not After : Nov 17 21:30:28 2026 GMT
        Subject: CN=60e8b5e6-919d-4e6c-97d5-c44d68d2d58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:a8:85:4d:ed:89:24:6c:41:a6:6b:87:1b:
                    67:b0:82:cc:d7:55:c5:70:a8:1b:f3:84:46:f4:0a:
                    01:5d:20:5e:96:bd:63:d4:16:68:b4:0c:15:aa:6f:
                    c6:69:a1:bf:c8:f5:68:1f:86:c4:3b:31:b0:f4:e0:
                    61:03:ee:c2:95:34:a8:ef:00:d0:97:eb:35:d6:59:
                    a6:15:b5:e6:73:1a:6c:f2:bf:a8:18:b0:8e:3b:ca:
                    96:ad:35:dc:86:a2:ff:c8:23:60:49:28:31:8f:0e:
                    9b:16:cb:05:3f:08:87:6c:ff:85:00:98:f8:ef:4c:
                    6c:51:dc:d6:84:18:63:54:ad:62:fb:df:1d:c4:a5:
                    1a:1d:e4:84:51:77:db:0f:c0:58:ca:2a:07:df:fa:
                    36:3f:a7:35:ed:de:4e:24:5c:d0:de:ec:09:0c:55:
                    84:f4:5f:9e:35:4e:15:a7:c3:76:99:21:55:60:e9:
                    58:be:03:7a:ed:d8:c8:98:94:f9:e1:12:23:4a:b8:
                    8e:74:f8:21:d4:0e:33:c4:8e:b8:1d:ad:5b:0a:4d:
                    5d:f4:db:ed:e3:7e:60:85:cd:52:5f:95:34:e4:92:
                    47:cf:50:b5:69:2b:0b:c4:c3:a5:a3:fd:b9:ea:89:
                    38:64:95:44:21:9d:c5:ee:b8:93:da:83:ee:e4:e4:
                    6b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:B2:8F:7B:37:34:AF:E3:CD:60:02:1B:44:D6:2C:02:B3:18:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/88c1449a-ffa6-4248-945c-c70034aef246/7ab18f55-9b45-3eca-9778-84f6a9362f23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/88c1449a-ffa6-4248-945c-c70034aef246/88c1449a-ffa6-4248-945c-c70034aef246.crl

            X509v3 Authority Key Identifier:
                keyid:AC:7F:1D:C2:12:3D:A8:80:96:75:4F:E1:28:D1:18:A0:E3:18:DE:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/88c1449a-ffa6-4248-945c-c70034aef246.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1d:a1:12:ea:fc:9e:b1:bd:37:50:e9:5a:35:ce:a5:f2:ad:
         e1:8e:ed:32:90:61:c4:ef:aa:50:a2:ef:89:f9:bf:ca:e0:16:
         89:72:5c:d1:f8:67:6f:de:38:6c:eb:b2:1d:4b:b9:9e:d6:db:
         ca:6c:dc:2e:46:a2:b3:1e:af:a5:a7:82:11:17:07:f0:cd:af:
         ec:cb:47:85:06:4e:b2:19:43:5c:e1:32:05:eb:88:5c:2e:b1:
         be:e7:ba:16:1a:21:2e:09:0a:43:8c:14:01:eb:91:db:5d:5f:
         7a:43:7b:6c:b1:5e:0b:f8:77:07:77:f1:d5:34:be:f4:f0:32:
         1a:a3:e9:7c:f8:a6:91:7f:04:d4:a1:85:17:ef:9a:c8:01:72:
         24:47:2d:c5:9d:fe:d0:52:10:1b:2e:c8:bc:5f:b0:0a:fa:81:
         31:ef:7c:ec:d7:85:bf:ee:95:ff:8f:13:75:5a:9f:51:8f:f0:
         9c:64:69:b3:8a:84:65:77:8d:bd:be:c3:6b:97:61:8f:6f:1e:
         fa:aa:70:57:1e:86:af:29:e1:96:6b:54:cc:ae:13:09:69:cc:
         7e:f5:b9:47:42:93:22:9c:4b:69:da:85:ce:84:f8:c5:04:dd:
         0b:f7:bb:6a:32:eb:c6:ba:df:42:c3:f6:d7:d8:a5:09:c6:d8:
         1c:31:54:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:33:52 2026 by rpki-client