Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3cf51d5d-e027-3e49-b292-1bd45824cd7c.roa
File:                     3cf51d5d-e027-3e49-b292-1bd45824cd7c.roa (raw, json)
Hash identifier:          czTsVq55D+0B0OdSxy5sbq8ApeXGxcYleIStJYWo4Go=
Subject key identifier:   5D:09:BA:23:E8:13:87:43:9F:AD:B6:90:16:4F:1F:97:7F:57:2B:C6
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584EE0C2119C47D0AF330F5C6D10
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3cf51d5d-e027-3e49-b292-1bd45824cd7c.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     2559
IP address blocks:        198.241.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:11:9c:47:d0:af:33:0f:5c:6d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=ffc7d34b-aac2-401c-a1f2-6f4ad32aa261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e5:e2:95:c4:fe:76:6d:1c:26:4f:7c:44:4f:
                    6d:4d:b1:fe:7d:2c:2f:e1:19:d9:69:f1:85:87:b3:
                    82:5d:68:32:fd:10:62:a7:d2:b9:d0:45:26:26:91:
                    d2:c2:4a:f4:57:17:42:09:49:f6:57:41:c0:eb:7c:
                    87:c0:ef:65:3e:bc:e1:b2:92:73:92:e1:d9:ef:55:
                    be:dc:81:97:42:45:7d:50:b9:ea:1c:62:5c:36:08:
                    db:9f:2c:65:50:2c:cd:d2:2a:5f:a2:e2:de:29:50:
                    8e:19:06:a4:8f:21:7f:e4:ef:47:cb:2f:e3:e1:2f:
                    b3:16:71:e4:15:0f:0d:89:3c:26:46:fa:78:a4:48:
                    d4:56:f7:84:ad:91:f1:30:9c:95:9d:34:aa:eb:26:
                    f8:96:5b:73:60:bc:f5:f6:f8:19:da:cf:f2:7c:8b:
                    ae:6b:6c:3a:be:a3:65:f3:64:a7:89:ed:03:e5:33:
                    24:a6:fd:2f:d9:aa:ea:db:aa:a2:0b:b2:f3:29:bd:
                    ac:31:91:40:d8:48:bf:77:98:3c:71:07:8f:27:25:
                    a3:b9:ed:3a:d7:f7:f7:4b:7f:8b:fb:69:ed:b8:05:
                    f7:58:e7:06:d5:15:03:a7:1c:15:21:26:df:a4:5a:
                    8d:8a:2d:96:a5:ae:65:13:9d:08:74:4e:59:1e:ab:
                    1b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:09:BA:23:E8:13:87:43:9F:AD:B6:90:16:4F:1F:97:7F:57:2B:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/3cf51d5d-e027-3e49-b292-1bd45824cd7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:25:f3:fe:dd:a9:4a:2e:3f:9b:1c:bd:9a:09:18:93:8c:
         78:93:e5:1f:64:62:89:51:96:78:c0:b2:78:34:66:ad:1f:b6:
         e5:4a:f6:c1:62:02:ae:a1:07:e4:3a:3c:92:da:a2:cc:60:49:
         b0:b3:c7:4f:73:48:3f:72:98:da:a1:db:e9:49:71:40:ae:43:
         7d:fb:8a:bd:f9:5b:7d:3f:67:0f:44:31:dd:56:f9:db:aa:80:
         fc:66:1e:ec:06:6f:4e:96:6b:12:d4:d8:ab:c0:f6:40:1b:cc:
         da:21:f0:aa:13:3d:f5:3e:ba:d6:8f:9c:10:59:c6:75:63:0f:
         9e:9b:df:0e:26:a3:dd:2e:ed:e2:83:da:1b:a9:7b:d0:22:4e:
         91:4f:61:c3:f0:ca:a5:ac:04:cd:38:e8:38:c0:f5:97:0b:85:
         12:70:a1:ee:3f:ec:5b:d9:92:51:06:9b:22:72:d1:31:ae:20:
         7d:84:48:f8:4c:c7:e6:eb:67:b3:99:9e:13:88:8a:4f:dd:e0:
         61:e7:97:a1:27:cd:88:b8:fc:f0:92:1a:ec:7b:91:1f:32:19:
         6e:4c:95:02:ed:ec:45:ec:ed:29:ce:5e:a9:80:06:4f:ae:bd:
         40:21:43:9b:6d:ea:48:a1:24:37:35:bf:c7:ba:2a:39:cf:ee:
         87:89:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:34 2026 by rpki-client