Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/97883ba0-e855-312c-8460-e92451ea3f9f.roa
File:                     97883ba0-e855-312c-8460-e92451ea3f9f.roa (raw, json)
Hash identifier:          Aa7feqlbs+0/9Q6kddbLxfgbcelHbl1aFLRZRlAmUNg=
Subject key identifier:   B0:98:98:74:98:47:8C:4F:84:47:43:B4:E9:FE:3E:3F:72:C8:17:7A
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F4328584F612D6434F9A007E9C311A700
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/97883ba0-e855-312c-8460-e92451ea3f9f.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     2559
IP address blocks:        198.241.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:64:34:f9:a0:07:e9:c3:11:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=9715e641-20e6-4b77-986a-be3cb141f948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:d0:0d:f1:7a:e6:ce:db:f5:2f:61:d6:b4:
                    4f:09:7b:30:71:7e:85:34:be:58:64:25:97:76:ef:
                    9b:86:46:76:41:ac:f2:d4:ba:04:42:bc:b2:1f:10:
                    a2:12:f8:eb:c4:20:f8:88:36:43:89:15:79:74:66:
                    bb:51:95:0b:f2:01:81:fb:42:20:45:09:18:b9:49:
                    78:ba:eb:08:6b:4a:b8:8d:ca:4b:25:03:1b:04:d1:
                    a7:0a:6d:c8:39:77:a3:24:39:24:39:ed:9b:e8:ad:
                    2f:cd:00:39:a0:e9:01:4f:f4:87:4c:30:ac:b0:b2:
                    6c:9d:e8:d0:4e:58:9a:f7:24:34:80:f9:8e:97:20:
                    27:0e:b8:55:eb:ec:65:52:ed:33:f5:24:23:7e:95:
                    4d:6c:18:10:38:6b:84:44:43:20:5d:f1:e1:9c:a4:
                    fc:58:45:28:7b:a6:5d:e5:01:c5:e1:09:dc:3e:66:
                    c0:1f:79:b8:6e:53:ba:2b:ce:57:6e:18:0c:82:7b:
                    51:a8:31:c9:f7:e6:d6:cb:78:ff:5c:1c:f4:64:a9:
                    34:20:fd:f7:47:fd:4b:d6:fa:b1:64:75:7f:bc:0e:
                    ea:94:02:7a:8b:b2:f4:fa:47:15:39:99:94:8e:ab:
                    66:ae:de:9d:14:50:f0:4d:57:ed:22:b0:d2:2f:16:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:98:98:74:98:47:8C:4F:84:47:43:B4:E9:FE:3E:3F:72:C8:17:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/97883ba0-e855-312c-8460-e92451ea3f9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.241.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:f2:80:48:12:05:bf:f1:23:73:32:d6:f4:e8:c0:eb:c0:29:
         24:e7:ff:40:75:19:a2:2a:fa:6e:5d:e0:40:22:d4:61:65:3e:
         f0:13:2f:17:3e:d3:99:cc:12:31:ae:ae:4d:a1:d4:44:8e:41:
         02:ea:3d:70:50:cb:fa:c4:0e:e1:1d:66:7d:d8:b0:8e:74:2f:
         9d:73:f3:aa:70:1f:a5:ea:ec:e3:65:72:21:22:6b:87:67:aa:
         9b:7a:04:eb:63:b7:7d:b3:da:a0:13:65:bc:67:f0:2b:6e:fa:
         ba:db:03:e0:ce:75:af:eb:b5:a1:f2:da:4e:94:b2:6b:5b:6d:
         81:0d:e1:6c:99:60:87:83:2b:7e:32:e8:b2:1c:bc:05:f9:6b:
         53:e6:e0:02:9d:e0:27:22:1f:2b:4a:3b:44:92:92:6f:57:79:
         66:c4:88:cd:9a:8b:ab:fb:3f:53:20:02:d5:32:26:69:64:51:
         78:f2:6b:3d:2b:5a:c2:5d:8d:df:65:f3:89:4c:6e:1f:bd:07:
         a0:5a:17:2f:00:bc:97:30:9c:d4:f8:8e:88:06:15:92:44:71:
         37:23:34:f3:5e:6d:61:94:27:b3:ae:5e:66:99:bf:6e:ee:cc:
         b7:59:ef:7e:02:e8:df:30:24:e5:31:fd:d9:d9:2f:76:c2:5f:
         6d:f1:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:24:51 2026 by rpki-client