Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/ff6a76d6-5a9c-3817-b347-e0b567ae3aaf.roa
File:                     ff6a76d6-5a9c-3817-b347-e0b567ae3aaf.roa (raw, json)
Hash identifier:          4nBh2QU5I8Z32azCu7S2dXdPpGHfM1CQtBWEGchCQ/A=
Subject key identifier:   7E:0D:F6:5B:54:79:C8:AC:C8:EF:C9:93:1D:2F:F9:CF:25:26:66:72
Certificate issuer:       /CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
Certificate serial:       010D0C9F4328584EC371C76772D784F2ED651B68
Authority key identifier: 13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/ff6a76d6-5a9c-3817-b347-e0b567ae3aaf.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     400419
IP address blocks:        198.7.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:c7:67:72:d7:84:f2:ed:65:1b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fee4199-1b61-4b01-b005-17ea1cb9a644
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=a4928dcf-6726-4137-8fe7-d6582a35c700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:98:3a:57:6c:8a:83:c6:90:30:01:49:62:91:
                    e7:b7:87:50:11:14:57:9b:d7:b0:f1:1e:d7:43:ac:
                    26:5b:d5:96:3a:af:b6:9c:4d:8c:9f:d8:f4:9a:1e:
                    31:fe:59:22:9a:90:4a:8b:01:2c:02:d9:ca:68:8a:
                    1f:67:49:17:8e:1c:fa:0e:d6:ce:67:57:87:72:fa:
                    f9:cd:e3:69:68:86:cb:1b:48:e3:de:96:2d:bd:17:
                    de:0c:c3:49:74:e1:f5:3c:ef:f6:d4:2f:73:af:df:
                    34:93:4e:8a:19:70:5d:d9:5b:4a:bf:2d:93:65:ff:
                    49:9e:d7:1b:b2:68:f8:e1:10:fd:92:fe:ba:43:a2:
                    70:8c:4b:5d:32:61:ac:3b:c4:da:22:1a:b1:0d:58:
                    5d:14:1b:65:63:ba:8a:36:4f:bb:24:40:7b:48:5c:
                    c2:5a:3c:6b:7a:94:e3:80:dc:68:07:35:12:73:a6:
                    9b:64:47:51:97:37:f8:a4:b6:01:f1:e6:65:b0:fc:
                    52:ad:65:75:17:4f:3a:28:1f:c3:e6:ad:97:25:34:
                    17:c4:74:28:9f:90:65:dc:31:86:b2:5d:68:6d:3c:
                    a8:6a:eb:8c:f2:77:b4:59:10:07:1c:72:d2:02:04:
                    52:c2:35:1a:18:f7:90:1c:c6:43:1d:77:2d:e2:d2:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0D:F6:5B:54:79:C8:AC:C8:EF:C9:93:1D:2F:F9:CF:25:26:66:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/ff6a76d6-5a9c-3817-b347-e0b567ae3aaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644/9fee4199-1b61-4b01-b005-17ea1cb9a644.crl

            X509v3 Authority Key Identifier:
                keyid:13:79:23:FD:4F:74:3F:9C:89:E3:F1:DA:16:3C:EE:75:C4:BD:B6:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9fee4199-1b61-4b01-b005-17ea1cb9a644.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.7.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:97:3c:0d:69:2d:c4:97:24:06:60:c0:2c:6d:90:64:59:75:
         33:ae:cb:69:ff:e2:7b:49:2b:73:59:c8:e4:f5:4f:f8:3f:30:
         66:a4:0c:59:6e:9d:20:ff:82:2c:68:08:7e:bc:a3:6d:03:e4:
         38:bd:e1:ad:36:83:8e:13:e5:ba:e2:e1:e9:69:74:0e:da:6f:
         b3:16:72:36:74:d6:2b:a6:57:4a:99:21:01:29:6d:90:52:eb:
         a9:33:d7:bd:4f:cf:02:16:3b:46:58:08:be:de:2a:26:42:8d:
         9a:0a:e7:d4:5a:08:04:72:be:c9:09:90:78:a7:35:5d:ae:08:
         89:6b:9f:a1:5c:db:0d:a5:ef:cb:23:93:f8:9a:6d:9c:f2:e7:
         c4:74:fe:7a:16:5a:b2:dc:d8:6b:fd:4c:7e:67:7f:bf:5e:c4:
         51:c6:c8:40:76:53:f0:62:9e:ae:38:9b:f4:09:9e:be:64:e3:
         7b:9f:52:8e:77:1a:2e:93:82:64:f1:48:cb:74:dd:e8:5b:63:
         75:56:10:42:a2:8a:ce:0f:1f:9d:90:42:96:f3:a4:c9:e2:43:
         11:5b:77:27:ae:24:0d:a6:07:51:ef:b5:de:9c:1e:a5:7a:bf:
         8c:4b:77:4e:e0:69:84:8e:e3:71:7d:e1:10:a4:23:00:58:52:
         a6:7c:18:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:59:21 2026 by rpki-client