Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e396d01c-c928-46cd-b44e-47783c053749/0843aae9-6520-315d-9f47-5f430dde68a5.roa
File:                     0843aae9-6520-315d-9f47-5f430dde68a5.roa (raw, json)
Hash identifier:          tXs+3Pe8D9srYsl9YUinHmzsxOz0mub8cSnH5I2G6qU=
Subject key identifier:   ED:97:13:52:A4:00:D2:37:2C:B0:5C:86:42:27:BE:86:8E:8D:B8:7F
Certificate issuer:       /CN=e396d01c-c928-46cd-b44e-47783c053749
Certificate serial:       010D0C9F4328584F58FE0B3A00FF9BF46CF71380
Authority key identifier: B3:D0:2B:34:27:DD:FD:70:41:70:93:06:65:7D:73:17:04:38:6A:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e396d01c-c928-46cd-b44e-47783c053749.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e396d01c-c928-46cd-b44e-47783c053749/0843aae9-6520-315d-9f47-5f430dde68a5.roa
Signing time:             Wed 30 Sep 2026 14:38:27 +0000
ROA not before:           Wed 30 Sep 2026 14:38:27 +0000
ROA not after:            Tue 29 Dec 2026 15:38:27 +0000
asID:                     8075
IP address blocks:        198.74.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e396d01c-c928-46cd-b44e-47783c053749/e396d01c-c928-46cd-b44e-47783c053749.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e396d01c-c928-46cd-b44e-47783c053749/e396d01c-c928-46cd-b44e-47783c053749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e396d01c-c928-46cd-b44e-47783c053749.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:fe:0b:3a:00:ff:9b:f4:6c:f7:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e396d01c-c928-46cd-b44e-47783c053749
        Validity
            Not Before: Sep 30 14:38:27 2026 GMT
            Not After : Dec 29 15:38:27 2026 GMT
        Subject: CN=2a772efe-167e-4a95-9eef-046fbda8a9b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:74:15:17:59:d1:d2:7c:1f:90:c3:a8:bf:
                    2d:70:73:b2:71:91:a9:f5:a2:43:ca:18:95:84:e9:
                    b9:a1:43:55:ad:16:a7:be:e5:02:dc:2c:e3:fa:09:
                    e6:ff:36:36:1e:e7:ef:d0:69:ac:dc:87:12:69:93:
                    49:45:fe:4d:e4:03:6c:3f:f7:39:21:56:24:ec:b9:
                    7d:b6:d3:a9:0a:aa:cc:56:53:20:63:01:13:0a:af:
                    53:4d:0c:65:95:d8:0d:1e:97:95:b5:9f:24:14:37:
                    c4:fe:53:db:1b:db:88:19:a7:51:e8:1c:18:00:3d:
                    65:67:2f:fd:f0:57:dd:a0:ce:ae:50:e0:b7:b2:31:
                    c3:4f:95:a3:a2:3d:d8:d5:70:40:f3:b9:cc:74:f8:
                    43:d0:a6:39:ac:9d:26:85:b8:e6:8e:86:c6:87:4f:
                    c6:0c:bd:6e:a3:7a:a7:5e:0e:44:39:8c:12:dc:41:
                    85:d8:65:ec:6b:90:d3:31:44:74:28:5e:6f:fa:d5:
                    b9:ab:63:29:fb:4e:35:23:37:de:5d:7d:47:e1:f7:
                    67:a4:32:29:a8:2c:46:45:d9:6d:a5:91:db:42:fe:
                    35:93:f8:0b:87:a4:3d:b3:8c:dc:5c:d2:c1:ea:bf:
                    28:9b:10:af:e6:2b:07:64:fa:c8:fd:4f:d6:38:6f:
                    fc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:97:13:52:A4:00:D2:37:2C:B0:5C:86:42:27:BE:86:8E:8D:B8:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e396d01c-c928-46cd-b44e-47783c053749/0843aae9-6520-315d-9f47-5f430dde68a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e396d01c-c928-46cd-b44e-47783c053749/e396d01c-c928-46cd-b44e-47783c053749.crl

            X509v3 Authority Key Identifier:
                keyid:B3:D0:2B:34:27:DD:FD:70:41:70:93:06:65:7D:73:17:04:38:6A:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e396d01c-c928-46cd-b44e-47783c053749.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.74.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:8f:d7:99:ca:10:e5:fb:e1:54:e5:10:7c:bf:0b:4f:e1:39:
         a1:5a:99:6f:e3:48:4d:69:7b:a4:eb:78:96:e2:cd:6b:39:02:
         d1:13:4c:22:61:0e:cb:42:7d:a7:4b:9f:7b:ca:7f:e0:3b:e6:
         f9:1b:e9:b6:3f:50:84:f0:34:0b:d6:55:b5:3f:d3:4d:ba:cb:
         91:a2:dd:28:b1:26:46:20:7b:a1:f8:2a:81:92:49:eb:cd:08:
         9d:fc:1f:5d:ad:99:bb:5a:ed:78:35:b8:f7:1a:63:3c:53:14:
         7b:58:e7:77:e8:65:36:27:b3:ae:34:ee:26:df:f5:7f:56:9f:
         83:cd:a3:f7:bb:6b:e2:5e:88:52:e1:f4:5f:66:43:b7:3f:db:
         d1:13:c1:28:90:cf:0f:7f:d5:a5:ee:fa:08:ef:68:7e:11:05:
         d6:3b:76:35:45:22:f8:92:dc:92:47:85:0a:a8:b8:39:e7:be:
         92:bb:d6:93:f9:b6:61:dc:7f:a6:47:47:10:72:50:2d:07:f9:
         db:73:eb:18:61:a7:40:dd:1d:1b:af:c7:34:25:bb:96:78:1d:
         7f:dd:c2:dc:c1:72:3b:8f:14:0c:bc:9e:f7:0f:57:0e:3a:b0:
         2b:b3:cd:3b:0a:e0:9c:57:fd:64:e9:2a:42:0b:ed:e7:2a:32:
         ba:d9:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:21:30 2026 by rpki-client