Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa
File:                     328e6c00-d857-3fdd-bf11-e5ff675483b4.roa (raw, json)
Hash identifier:          8DbDc+iSbygingQdvwdY8r/vOuS/vVZEFk82Rv4Jnak=
Subject key identifier:   30:03:62:C3:1D:3F:C4:43:0D:B3:8B:82:DB:ED:05:66:84:52:ED:E2
Certificate issuer:       /CN=aa033953-9752-479d-b9ee-4213cf648479
Certificate serial:       010D0C9F4328584D8C2AA0C39FC5E58A47C84600
Authority key identifier: 84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     3136
IP address blocks:        198.150.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:a0:c3:9f:c5:e5:8a:47:c8:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa033953-9752-479d-b9ee-4213cf648479
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=4a1108fa-2697-41d0-a4d6-09038e30198c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:dc:ee:af:7b:50:30:4d:ce:74:f5:ce:96:
                    a6:21:ab:a6:59:f1:71:66:a7:de:f7:1d:8a:b6:33:
                    4c:65:fe:e4:13:db:79:e6:0b:fd:ae:49:b2:3a:29:
                    40:ba:5e:93:fa:e2:e2:db:9f:10:90:91:11:d0:ec:
                    ad:8c:dd:46:60:cd:2c:dc:79:3a:eb:27:a0:a3:22:
                    30:79:44:34:7c:59:e5:1b:19:8f:c9:c1:39:ff:7c:
                    67:c7:00:1d:23:6d:aa:47:f9:3f:86:9a:60:5b:96:
                    dd:b9:53:eb:a5:0b:c5:c8:b2:1f:e4:a7:d9:02:48:
                    a0:62:c6:0e:1f:50:b1:88:90:6a:f1:90:f1:e2:4c:
                    08:01:70:61:4b:79:bb:82:12:48:aa:42:f6:cf:d7:
                    b2:54:1a:c5:f6:7a:cf:66:7d:e6:b4:cf:b2:57:75:
                    9e:22:35:52:f3:ae:84:4a:74:a3:91:59:42:4f:b8:
                    3c:a4:23:5d:4e:ee:f9:0b:12:83:7b:e2:66:69:98:
                    3a:ad:40:48:31:44:84:9e:37:e5:35:2d:95:d9:13:
                    e9:2b:f4:b0:3f:e9:7f:c2:8c:89:0f:29:c2:a1:72:
                    35:3c:4a:33:21:13:33:54:26:ac:d4:4c:94:ba:10:
                    63:ac:89:29:99:05:2b:6c:74:bf:2d:4a:88:82:5e:
                    1c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:62:C3:1D:3F:C4:43:0D:B3:8B:82:DB:ED:05:66:84:52:ED:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/328e6c00-d857-3fdd-bf11-e5ff675483b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479/aa033953-9752-479d-b9ee-4213cf648479.crl

            X509v3 Authority Key Identifier:
                keyid:84:26:4B:8E:E4:2C:3A:6E:7F:83:C6:30:7A:5D:8C:4D:38:E6:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/aa033953-9752-479d-b9ee-4213cf648479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.150.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:93:b5:b4:26:08:f5:66:df:5b:e5:a3:c3:38:a5:52:a7:a5:
         86:9e:e7:36:56:8d:a1:31:a0:bd:f7:e4:e9:2c:c0:d4:ed:ae:
         ad:fd:c8:35:b1:21:64:fa:01:61:2e:dd:cf:77:9c:35:d1:fb:
         19:5c:79:94:cc:e2:ea:93:6b:d6:4e:c4:dc:ff:d2:5f:47:51:
         d5:38:29:44:11:1c:d9:8b:4f:f5:8a:41:1b:3a:66:f7:10:65:
         37:19:4d:55:e5:46:69:35:da:f9:f8:8c:56:47:29:10:d3:c9:
         dd:1c:24:01:cb:64:a3:74:88:86:87:0a:5d:1a:aa:46:5e:85:
         e2:e1:46:b2:ec:8e:33:d1:b5:23:bb:82:df:19:46:5a:06:ab:
         55:5b:84:bf:fa:45:44:7c:3b:ba:a9:4e:a5:22:ac:51:a0:7b:
         d2:15:00:fe:61:22:f2:69:26:e2:25:ca:c6:5b:b4:1b:d2:5b:
         c8:f9:1f:c0:ed:6e:35:2d:ef:9c:41:c3:53:92:a2:65:c4:64:
         fc:57:27:05:de:dc:31:3d:a6:bc:51:61:64:bf:53:12:1f:71:
         db:01:90:c0:44:7f:e6:cc:54:51:88:8d:0e:5e:e5:8f:59:09:
         11:0d:55:c4:34:de:71:66:96:18:ad:5b:9d:99:32:dc:7c:a4:
         bd:41:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 16:26:51 2026 by rpki-client