Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa
File:                     1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa (raw, json)
Hash identifier:          R2Ej+NqBEHQNd11yCBrE6+hmpP/WiRHYr/zZqShiIXc=
Subject key identifier:   49:A2:9C:91:D4:0C:34:81:08:02:BF:63:2D:33:DF:63:BF:3A:4B:80
Certificate issuer:       /CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Certificate serial:       010D0C9F4328584ED001F186104CE35F405CD53C
Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     13325
IP address blocks:        198.151.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:f1:86:10:4c:e3:5f:40:5c:d5:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=e330bb78-4259-4c89-947a-84259816edad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5d:ff:ef:28:b9:95:a6:14:6f:74:89:45:ba:
                    5f:9a:ef:81:15:4a:98:b6:a3:ef:c1:6e:46:5c:ec:
                    66:51:51:09:d4:44:e7:39:8e:e7:82:d3:56:7a:34:
                    b0:4a:92:be:44:20:b8:12:da:7d:97:33:04:bf:ad:
                    c1:91:c6:b7:6e:53:bb:ee:7f:00:41:be:76:34:77:
                    6c:93:06:f1:bf:9d:74:af:9c:6c:ca:2b:90:22:2d:
                    f4:00:90:d3:dd:86:b8:75:19:31:e8:e7:da:59:06:
                    b6:50:71:da:03:b2:a1:17:a2:bd:80:1a:2e:10:3e:
                    6c:1b:70:08:ab:65:99:d7:9d:81:e1:45:c3:5e:7e:
                    49:b9:05:4d:65:c1:ce:bd:f8:56:c1:8a:0c:ea:35:
                    35:d4:b9:09:0b:db:42:02:29:63:91:8c:bb:d5:ae:
                    d1:c5:d5:a1:76:c2:f5:33:4e:16:d2:6c:c6:ba:04:
                    07:65:60:80:a7:9b:5f:c2:ef:17:55:ee:3a:f5:b0:
                    27:e8:75:34:54:3f:77:cc:d1:63:00:d3:1f:9b:fc:
                    3b:4b:b3:9c:17:20:c3:bd:9a:8a:c0:c9:21:0a:22:
                    4d:73:31:56:2d:7b:34:29:38:a6:fe:0a:8e:bc:3e:
                    ee:a6:4a:a4:be:68:df:18:26:48:28:f5:1e:0b:92:
                    be:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A2:9C:91:D4:0C:34:81:08:02:BF:63:2D:33:DF:63:BF:3A:4B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/1d1fd279-394b-33ab-a67e-8eaa8ec4aff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl

            X509v3 Authority Key Identifier:
                keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.151.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:e3:55:c7:d4:fc:10:6c:d4:ce:de:13:6b:7f:1e:bd:8c:45:
         77:dc:43:4a:09:5c:14:4b:55:bb:e5:60:62:cf:d4:63:85:17:
         04:24:6f:31:e3:c4:3b:b9:48:76:9b:af:15:32:0b:3a:eb:ea:
         1a:23:16:e8:84:ac:f4:8a:f4:fe:2d:6e:d2:38:ae:f1:b2:88:
         ef:5d:95:2f:ed:80:f2:ac:a0:a3:66:70:f2:be:0a:7e:07:46:
         da:08:a6:23:80:44:f0:4d:83:0c:2c:db:d1:5f:ee:63:fe:94:
         b2:9f:fd:fd:6a:bc:9f:c2:e9:c6:ef:7b:0e:e6:65:c5:29:50:
         f3:91:14:2d:07:ce:af:aa:44:c0:86:da:c7:92:48:2e:7c:14:
         89:61:34:f0:8a:47:93:4a:7e:f3:e0:72:38:8e:67:93:04:d1:
         6d:26:67:3a:b9:3f:d4:ae:72:7c:b9:db:71:c5:5e:eb:70:1e:
         c7:14:8f:d2:14:f3:f8:02:b6:50:a1:d1:ab:4b:a6:c8:99:17:
         9c:18:06:b8:a3:0d:b7:f1:63:a2:c5:d0:f0:a4:89:ae:a9:56:
         2f:57:69:54:fc:36:e4:5d:01:ca:c2:28:a6:1f:65:4f:78:c8:
         05:e3:06:2f:05:64:dd:8b:ae:5f:f6:cc:1e:98:dc:ca:ac:df:
         4d:c5:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:59:02 2026 by rpki-client