Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/34b304d8-bbb8-3f6c-b8e2-0e22b1bf172b.roa
File:                     34b304d8-bbb8-3f6c-b8e2-0e22b1bf172b.roa (raw, json)
Hash identifier:          0lqLqRPsQn1d8toZXIB8svHqAdj/jFwbo39QZu6dCqg=
Subject key identifier:   AB:A3:A8:69:B1:BE:51:D9:ED:C3:B9:24:6D:B3:5C:7B:FB:4F:D5:5C
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584F9EB46BA96EB78A6685256120
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/34b304d8-bbb8-3f6c-b8e2-0e22b1bf172b.roa
Signing time:             Sun 25 Oct 2026 13:56:42 +0000
ROA not before:           Sun 25 Oct 2026 13:56:42 +0000
ROA not after:            Sat 23 Jan 2027 14:56:42 +0000
asID:                     834
IP address blocks:        198.1.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:b4:6b:a9:6e:b7:8a:66:85:25:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Oct 25 13:56:42 2026 GMT
            Not After : Jan 23 14:56:42 2027 GMT
        Subject: CN=15e414b0-97c5-4788-9ed7-ca8fb628acd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:80:0b:84:b7:57:2f:87:95:dd:41:61:63:96:
                    fe:99:2a:c8:0c:ba:7f:2c:68:c2:ae:0b:72:1b:a2:
                    bc:c3:4c:6a:1d:62:97:07:9d:eb:40:4b:96:28:4c:
                    fd:73:f3:9e:54:72:76:93:a3:36:3b:20:2c:cd:a3:
                    10:ba:be:25:7e:3f:8c:36:69:14:ed:54:54:79:60:
                    5a:01:9b:73:ea:6c:3f:e0:41:4a:5c:25:42:e1:9c:
                    a1:00:d4:bf:d9:a8:92:c3:03:35:3e:2c:57:8e:ad:
                    6b:0d:5f:58:a5:4b:55:f1:39:67:d0:04:09:58:84:
                    ad:bd:47:c4:e5:76:f4:17:2d:48:09:f9:33:fc:d6:
                    57:0c:46:d0:3a:2e:9f:d7:c8:b1:97:c3:5e:2d:e2:
                    7c:a0:9a:d1:ed:9a:13:61:7c:17:78:3a:32:87:24:
                    83:e3:76:e5:9b:81:19:39:f1:bc:c0:c9:06:4e:40:
                    5c:8b:44:48:9c:ab:46:2e:f8:76:92:48:37:c6:e2:
                    47:e3:8c:37:6d:50:e0:af:f8:04:c9:6c:97:aa:ac:
                    79:87:32:86:da:8c:22:e3:45:f7:4e:3e:f4:43:12:
                    3b:19:18:04:82:0f:30:8e:ef:86:1e:d0:e9:f1:ea:
                    51:6c:06:33:b9:57:30:3a:33:47:2c:63:92:c7:75:
                    b3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:A8:69:B1:BE:51:D9:ED:C3:B9:24:6D:B3:5C:7B:FB:4F:D5:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/34b304d8-bbb8-3f6c-b8e2-0e22b1bf172b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c1:38:13:c0:44:3b:b0:d2:1b:4d:63:2b:df:fa:6e:2f:d4:
         54:ca:4a:36:f7:6f:c4:85:0a:10:b7:eb:f5:25:db:bf:4f:7d:
         0e:af:e2:88:c3:69:dd:01:56:78:6e:2d:96:27:c1:59:37:18:
         dc:ab:d9:22:ce:56:33:63:90:52:23:cf:7f:fc:b7:eb:a0:f6:
         38:77:e5:5c:0d:63:41:c7:52:d4:32:d4:a6:db:c3:5c:aa:2b:
         b6:64:b9:3c:61:40:39:d8:5b:c3:90:af:c3:e9:67:5c:1d:08:
         b2:d6:3a:50:6b:63:27:00:5d:71:64:18:ae:b6:36:e0:e7:5d:
         50:9d:e1:c0:e3:5e:8f:f9:4b:37:4e:80:4d:1f:20:dc:29:8a:
         ae:86:7b:48:4b:d5:31:c7:c2:93:e0:97:34:f3:4d:67:e7:da:
         6b:41:49:9f:60:de:c6:9c:52:1d:f5:db:9c:fc:2a:72:4b:a2:
         72:c7:eb:e9:e6:40:5f:2e:66:e7:e3:80:18:73:b4:39:ff:a3:
         a1:da:74:60:58:c3:7c:32:e9:43:c5:5e:ee:e6:e3:45:f3:d0:
         5e:85:92:af:43:59:ac:18:bf:64:37:69:df:25:1e:3f:b5:1e:
         5f:04:b6:3a:be:24:53:a2:21:bd:13:e0:c5:8a:64:4e:95:fb:
         81:3e:b4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:25:53 2026 by rpki-client