Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa
File:                     0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa (raw, json)
Hash identifier:          goBUr6j+0I+eDucYPW0OwPpdJhLJlakkiNhcQGObmtw=
Subject key identifier:   D4:12:B4:6F:5C:DC:15:57:18:89:BF:19:D5:99:20:B2:59:DA:F1:BD
Certificate issuer:       /CN=6431aabe-7ca9-4420-b394-80fd03294bc7
Certificate serial:       010D0C9F4328584EF2E76A09C96B2F2CB6582E00
Authority key identifier: 1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     393906
IP address blocks:        198.153.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:6a:09:c9:6b:2f:2c:b6:58:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6431aabe-7ca9-4420-b394-80fd03294bc7
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=ee88377e-2a0e-4535-9612-611fc8734d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:b0:77:cd:19:6a:9f:2f:c8:9e:22:f5:04:
                    7e:67:50:86:d0:f7:cc:8d:6f:0e:76:6f:a3:c2:d4:
                    90:d0:be:74:5c:b1:d3:41:e9:0a:71:c9:08:62:58:
                    5f:f7:ce:77:5d:6d:b3:c4:3b:5f:c0:54:1b:72:e0:
                    bf:e0:bc:83:a9:34:25:39:f5:3a:39:1b:f9:95:a6:
                    7b:12:9e:83:03:85:fe:9e:bc:70:68:49:0c:cb:a6:
                    c7:9e:24:82:3d:7d:e4:a8:ea:db:67:06:a6:6c:97:
                    a7:65:11:23:0e:44:61:d9:82:d5:27:74:62:54:da:
                    a6:c7:8a:3e:2e:d9:f0:a1:66:cc:81:0e:25:35:8c:
                    c9:43:68:a5:4e:83:c0:0c:44:ed:42:ad:bb:9b:a1:
                    4e:bb:b9:d7:95:c8:6f:f4:76:dd:45:45:76:9b:9f:
                    a7:10:03:43:4e:f9:39:85:28:e5:d0:fb:e8:ee:6e:
                    0d:9d:9f:9a:07:76:45:6d:88:11:d0:07:02:d1:fb:
                    07:b5:a7:97:93:1e:b5:df:50:1a:78:f9:99:50:4c:
                    84:97:3c:48:9f:cf:3c:5d:58:f6:1d:27:45:3d:e1:
                    8d:f8:dd:d6:1d:cb:31:2b:4e:11:e1:f2:7b:e8:d8:
                    55:60:7f:29:ad:e3:74:c6:79:ac:dc:45:96:2f:43:
                    ec:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:12:B4:6F:5C:DC:15:57:18:89:BF:19:D5:99:20:B2:59:DA:F1:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/0f077ebf-a908-3a65-a95b-41ea6fec67cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7/6431aabe-7ca9-4420-b394-80fd03294bc7.crl

            X509v3 Authority Key Identifier:
                keyid:1C:44:BD:33:A8:D3:0A:CB:84:B6:7C:92:7B:23:4D:21:F2:2B:53:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6431aabe-7ca9-4420-b394-80fd03294bc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.153.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:e2:9c:d7:da:b9:88:ae:36:cd:b0:3b:0a:02:cf:98:7e:
         96:a0:5c:92:f8:84:44:bd:f3:34:0a:de:45:7b:f5:46:a5:e8:
         61:02:6d:7b:98:b5:41:72:fa:26:65:dd:50:3f:41:34:00:6e:
         6f:92:34:98:c4:b6:b0:92:02:3b:0d:a6:d4:c6:14:7a:88:63:
         6b:9d:a0:7a:aa:4e:25:b2:fe:de:f6:a9:dc:06:fa:e7:9e:d3:
         db:47:26:0c:d1:db:16:da:f7:8a:da:83:ff:41:a8:a0:d6:9d:
         0d:6c:4e:e4:54:f3:46:5e:e7:4e:78:9a:c0:f0:1e:bc:1b:76:
         fe:38:02:13:8e:71:e6:fc:8c:2d:7b:1c:ad:f1:f4:03:1e:7f:
         0f:33:87:87:5a:cd:15:70:e1:64:23:ce:90:fe:16:a2:68:87:
         68:80:f3:1a:b1:16:8e:eb:9e:5c:87:e0:ea:46:f6:f4:04:b6:
         d9:45:de:4b:0a:b8:f2:2b:9a:7b:ca:04:57:90:cb:93:94:aa:
         7a:5e:6d:39:69:f5:d9:58:f9:86:11:57:32:33:3c:20:a0:13:
         a1:72:95:ef:49:6b:72:50:77:96:5a:47:d0:35:28:19:05:b1:
         0d:5a:af:e4:3f:ae:1b:f1:49:2a:1f:08:ef:eb:26:4c:c1:50:
         8d:ed:94:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:25:44 2026 by rpki-client