Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/37730638-954d-3ef2-9b58-2adbc5a65f8d.roa
File:                     37730638-954d-3ef2-9b58-2adbc5a65f8d.roa (raw, json)
Hash identifier:          ems0J1ycVn8ZPYQ3Zu78HwmOcMZaTPPZ1EkkVwBRi6s=
Subject key identifier:   E1:DF:6E:EA:2A:63:82:A7:1A:B2:02:63:0E:01:A7:99:2E:CF:DB:35
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584ED9C766F6C4E2C0E7CD000880
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/37730638-954d-3ef2-9b58-2adbc5a65f8d.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     395793
IP address blocks:        198.144.122.0/24 maxlen: 24
                          198.144.123.0/24 maxlen: 24
                          198.144.124.0/24 maxlen: 24
                          198.144.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:66:f6:c4:e2:c0:e7:cd:00:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=ea7567a4-971d-491b-806b-4327e9c13c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bc:61:31:76:a5:41:12:39:71:ff:6d:24:96:
                    68:21:aa:e7:c6:45:ab:23:de:a1:d2:41:7f:98:a1:
                    7b:08:74:91:36:c0:1a:f0:88:4b:e7:6e:78:27:5b:
                    c3:fe:a5:a4:69:11:da:56:92:c6:ce:04:27:db:7d:
                    d9:90:7c:78:16:61:2e:21:e5:73:fc:3c:f1:6e:21:
                    a9:96:16:a1:22:59:97:8a:01:7d:48:74:13:29:59:
                    5b:70:b0:36:4b:2a:45:60:c3:b4:22:97:4b:1b:dd:
                    68:1a:f2:53:a0:48:62:fe:3d:3d:48:fc:ba:1a:6d:
                    60:0e:4a:b1:d7:4f:a9:e5:1e:2e:68:9d:a4:83:be:
                    ee:a5:01:9f:1c:d6:f0:bf:25:56:2c:75:88:a8:4c:
                    d4:9a:df:93:2c:e8:04:7f:14:36:6b:70:47:cb:3b:
                    78:7b:4b:e5:54:49:27:36:a3:81:c0:bd:5b:fa:b6:
                    9a:02:1b:64:f5:71:67:38:91:8e:53:ea:c3:e9:c3:
                    52:0a:c3:9d:70:90:e4:f3:dd:bf:3f:7d:fe:a4:2d:
                    85:21:dc:e5:97:2a:39:b7:8c:63:75:96:40:d8:cf:
                    0e:63:d0:5d:eb:59:73:75:f9:83:64:16:af:e8:b5:
                    01:64:f7:73:ea:05:cf:bc:e8:9d:82:a8:aa:79:ee:
                    57:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DF:6E:EA:2A:63:82:A7:1A:B2:02:63:0E:01:A7:99:2E:CF:DB:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/37730638-954d-3ef2-9b58-2adbc5a65f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.122.0-198.144.125.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:91:40:d4:10:7c:8d:f3:a8:c1:2c:a1:fd:73:85:31:98:3b:
         35:0a:2a:db:3c:8a:07:d7:ce:e9:c2:1d:ee:47:b0:03:8b:6c:
         1b:2b:74:f4:62:8c:76:b4:72:49:c9:18:3d:1c:0d:c7:2d:8c:
         7b:34:77:af:ad:da:02:6e:fb:bf:9d:66:fc:58:8c:19:99:82:
         54:00:94:57:a6:b9:ce:c8:e4:82:75:eb:4d:fb:69:ec:27:8c:
         61:7d:fa:51:60:fb:ff:a4:48:9b:78:69:9f:5a:fb:7f:10:ba:
         de:4b:70:3d:cb:29:23:b9:4a:54:6b:3c:42:09:11:9f:da:9a:
         83:f7:b0:37:f7:47:94:b0:e6:32:46:85:70:05:c8:ce:d0:ff:
         cf:9a:ae:b9:e4:91:bf:d0:15:05:11:97:b1:1f:67:88:cb:50:
         0e:6b:8d:08:b9:80:e0:b2:ce:ac:aa:17:cc:99:77:64:b9:e6:
         60:b4:43:c1:91:95:9c:b1:ce:22:fc:1b:00:2e:c3:5a:76:e6:
         5c:c3:0d:46:02:bf:a5:9c:25:38:58:e1:ed:94:3b:34:d4:44:
         16:b9:a5:ae:1a:18:3d:0b:0b:89:ec:56:3b:19:01:99:50:24:
         66:24:a3:a3:73:0e:f0:2d:33:aa:37:54:00:58:ae:99:2e:17:
         df:2a:8d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:10:09 2026 by rpki-client