Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4e24510c-909f-3fc2-b91b-dd43b00cf187.roa
File:                     4e24510c-909f-3fc2-b91b-dd43b00cf187.roa (raw, json)
Hash identifier:          4gB8h09IE57K4kaINwJ5zxcla2/eB64pc7YgZV4G234=
Subject key identifier:   5D:D3:55:91:D7:21:F0:22:FC:32:02:78:9B:77:BC:07:E5:1E:07:46
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E1E449FC9FA460E0CF39716C0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4e24510c-909f-3fc2-b91b-dd43b00cf187.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     265919
IP address blocks:        198.1.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:9f:c9:fa:46:0e:0c:f3:97:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=a3e90c05-b067-41b8-8b53-e72e310483db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ac:dd:72:f6:79:d4:6a:64:5e:fb:c7:c9:20:
                    b3:2e:7e:d5:b7:38:d9:05:23:24:e6:c1:cd:46:b2:
                    e6:a0:7a:02:4a:88:76:d5:06:27:91:5a:e2:9e:c1:
                    4e:d9:76:05:e8:c1:17:51:97:e9:53:cc:cd:f3:d3:
                    2a:67:e0:c2:e1:ab:87:2c:59:ef:58:77:f4:50:e0:
                    a6:05:5c:74:a4:fb:11:35:7d:b0:ac:99:8d:b8:53:
                    56:72:de:c8:05:75:1a:ca:3e:62:47:10:bd:03:a3:
                    ef:c8:26:31:a4:cf:d4:75:1e:80:2a:64:a0:53:4b:
                    a2:e2:ca:8e:ef:a7:13:d4:33:80:fe:43:65:73:3a:
                    9b:f8:36:10:e0:fd:c6:05:0f:f4:6b:2c:13:6b:5f:
                    c8:b7:70:55:93:96:73:3c:91:6b:8f:32:9e:77:90:
                    fc:50:0c:fc:cd:8a:96:55:38:61:85:b3:93:aa:a3:
                    12:3a:23:fb:6a:1c:17:6f:2a:ab:8b:ce:15:4f:81:
                    30:ae:ac:bf:4f:91:ce:12:9d:7d:77:4b:99:4b:3d:
                    67:bc:69:6b:7f:6f:d5:6c:bd:96:91:48:47:4f:ee:
                    3a:01:42:37:dc:fd:31:3d:35:a2:a1:58:5b:37:1a:
                    d6:59:9d:97:f5:91:21:34:88:cc:07:a8:c0:4a:41:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D3:55:91:D7:21:F0:22:FC:32:02:78:9B:77:BC:07:E5:1E:07:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/4e24510c-909f-3fc2-b91b-dd43b00cf187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:64:e8:9f:be:1e:73:cc:10:00:7b:02:3d:8a:3a:f9:56:9b:
         5a:d9:4b:40:76:94:75:ab:98:97:53:3b:a5:b4:00:d4:48:26:
         97:0e:4f:79:ee:a7:96:4b:4c:cb:2b:7c:b7:58:50:25:8b:31:
         bf:fb:0f:75:d8:70:37:27:fb:af:a8:29:42:83:9e:da:34:1f:
         ae:83:22:6f:38:d1:ab:b2:89:b7:da:43:57:ec:40:80:41:d3:
         e6:6b:04:9d:b5:86:2c:e1:49:ea:9e:0f:06:13:1d:26:31:5e:
         14:c9:31:56:6a:94:d9:8d:26:7a:3f:cb:85:c7:40:d3:27:44:
         cc:c9:1d:91:ad:19:37:a4:3f:f4:bd:f7:fb:4d:af:49:ad:d7:
         06:9a:24:59:54:ac:63:e2:1d:00:00:64:42:da:81:8b:89:2d:
         2c:55:7d:3c:30:00:f8:ad:a8:09:6f:1a:07:11:47:5a:e2:7a:
         f4:6f:2f:21:1e:7e:0a:db:58:d0:7b:0a:0e:a8:56:28:c2:a3:
         e3:13:25:a3:be:55:05:fe:5d:a2:3e:9b:85:b7:bd:e7:82:e9:
         cb:35:7d:b4:56:a1:ba:45:9f:ef:95:ac:25:ad:ba:c7:ad:d4:
         05:e7:e7:8d:12:55:b6:10:d4:3d:ed:95:32:a3:28:99:4b:8d:
         f2:13:6c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 03:35:56 2026 by rpki-client