Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa
File:                     9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa (raw, json)
Hash identifier:          S971AhjbhrRQKCQwkCVazpd9PicOQ5of6BQa69rNmck=
Subject key identifier:   98:33:06:6B:E6:2B:29:18:E0:C2:DC:E1:A1:B8:B9:43:CC:03:CB:E9
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF6409EFB3F6009C4E9E19500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     852
IP address blocks:        198.166.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:9e:fb:3f:60:09:c4:e9:e1:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=b645797b-1079-496b-8784-8daba47b970a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ce:9b:b4:7a:99:ac:6b:fc:0e:da:c2:09:0d:
                    73:8a:be:b5:9a:d1:24:ad:49:d6:35:9f:89:24:2e:
                    8c:08:05:d1:b0:3f:71:d5:60:70:72:5b:55:f8:06:
                    d0:14:62:b7:3d:d1:02:d9:ae:30:87:1f:73:ac:69:
                    76:80:c8:dd:bd:d7:33:cc:5c:ed:1a:4f:4b:70:d9:
                    b2:8a:f6:3c:79:4a:40:f5:91:f8:75:24:b1:9c:d3:
                    30:7a:25:35:99:bb:fe:68:7c:55:5e:79:66:ab:d2:
                    74:b1:b2:49:a8:ef:ee:1d:c9:76:be:c2:3a:2c:75:
                    92:fd:09:a9:77:fc:18:51:ea:22:e0:e1:c4:eb:ab:
                    fc:44:4e:79:bf:db:11:77:d6:53:27:04:4c:48:8b:
                    8d:c5:8e:97:fa:4b:ed:80:ce:dd:79:74:98:11:78:
                    60:12:9c:f5:01:93:57:df:c1:d7:3b:9c:c5:90:68:
                    98:1d:b8:8e:e8:25:df:09:31:40:7a:1e:83:13:73:
                    0e:bf:2f:79:92:4e:78:63:15:17:d1:0e:db:8e:63:
                    08:7f:16:16:99:6f:ea:df:7e:46:fe:3b:21:42:e0:
                    17:41:49:53:32:66:d3:27:62:93:5f:e2:36:2d:0a:
                    f8:c5:4a:7b:1f:3a:51:77:4e:64:90:3d:1e:68:8c:
                    32:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:33:06:6B:E6:2B:29:18:E0:C2:DC:E1:A1:B8:B9:43:CC:03:CB:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/9c143424-4e7c-3bdf-9a78-2e550e7ca7f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.166.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ec:c2:38:54:8f:85:a4:ed:bb:92:58:ea:cb:52:9f:73:4c:6f:
         42:4f:31:77:1f:8b:7b:d8:02:dd:5a:d8:46:5e:95:fc:54:bc:
         21:9f:49:3b:8f:c4:e0:76:08:a0:5b:11:fb:9d:43:3f:d4:45:
         81:bd:19:0e:00:00:63:2d:3b:b5:e6:1c:0a:6f:7f:b5:65:e4:
         d7:58:e3:ba:fe:da:54:dc:39:59:f8:40:a1:ec:a5:88:78:60:
         08:a2:af:55:19:95:a7:83:9a:63:e2:6a:79:ed:81:4c:a8:57:
         75:01:d1:d9:fc:3a:71:71:be:ec:00:cc:a9:7a:31:24:98:ee:
         63:af:99:32:5a:8b:38:29:94:f0:56:88:e2:63:04:e3:6b:42:
         ed:a3:d2:6d:0d:69:bc:99:7b:ba:8d:37:ff:ca:6f:cc:7b:e7:
         69:f6:d5:a1:b9:d0:4a:d1:e9:58:cb:0b:33:45:5c:1d:0b:bd:
         05:6b:a7:74:f1:25:75:1d:d9:f4:d1:f5:51:3e:aa:9d:1f:07:
         50:4e:cf:03:22:bf:2c:c3:cd:50:86:aa:a1:61:7c:e5:40:e9:
         65:16:02:da:3d:95:2a:82:05:93:6b:f1:4e:4e:62:3c:7a:8c:
         73:ee:30:2c:86:62:0b:3f:9a:90:da:c0:b5:7a:2d:68:3a:1d:
         4d:f0:28:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:50:23 2026 by rpki-client