Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/79fe8872-507a-30a0-a7cf-cb61b868f6d9.roa
File:                     79fe8872-507a-30a0-a7cf-cb61b868f6d9.roa (raw, json)
Hash identifier:          68hIzv9J6htiWNJeJYpU72YOUH8kbY0Dmg9uCcUqTmE=
Subject key identifier:   27:61:BA:64:D4:BB:EE:70:AC:EC:BF:93:3E:95:8E:74:D3:FE:E5:49
Certificate issuer:       /CN=b1c4f92f-6633-448e-bb44-903f429ea22f
Certificate serial:       010D0C9F4328584E0865E01D0CCF46A4F4B5B3C0
Authority key identifier: E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/79fe8872-507a-30a0-a7cf-cb61b868f6d9.roa
Signing time:             Tue 02 Jun 2026 01:00:10 +0000
ROA not before:           Tue 02 Jun 2026 01:00:10 +0000
ROA not after:            Mon 31 Aug 2026 01:00:10 +0000
asID:                     834
IP address blocks:        198.1.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:08:65:e0:1d:0c:cf:46:a4:f4:b5:b3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1c4f92f-6633-448e-bb44-903f429ea22f
        Validity
            Not Before: Jun  2 01:00:10 2026 GMT
            Not After : Aug 31 01:00:10 2026 GMT
        Subject: CN=7972c18c-30da-42ea-85c3-fe0cda867d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:9d:78:2b:7f:bc:53:ab:c3:50:59:0f:f7:
                    38:5d:76:d8:c2:3c:83:66:71:7b:c7:10:15:8c:1d:
                    81:b3:37:48:55:14:12:75:33:ff:8b:0e:d9:e3:13:
                    fe:ce:ae:c3:9d:ba:1d:51:e3:53:30:a4:28:f4:bd:
                    28:77:4b:cc:a8:5d:b9:60:21:95:b6:d3:ba:79:e7:
                    45:04:d2:b0:f0:53:45:e2:c3:dd:f8:9b:7b:34:7b:
                    21:84:21:8e:91:9f:26:35:c0:f2:f2:4d:33:bf:cd:
                    5e:f7:10:ac:d1:b6:0a:a3:0d:af:5d:3f:ab:92:95:
                    8e:e8:8a:be:ae:99:42:11:c4:4c:ad:d1:e1:9e:62:
                    08:5a:a3:37:fe:ce:60:9f:23:c7:e9:12:4b:0a:81:
                    b5:22:6b:36:12:c9:90:f0:36:77:07:55:b0:19:60:
                    f6:66:c8:3d:1b:98:64:92:2e:94:f5:8e:3b:60:61:
                    e4:b3:29:06:f3:5e:9d:26:cd:a0:c6:d4:0f:0a:db:
                    2a:8e:cb:76:26:65:46:d1:5a:0f:ff:27:f0:45:dc:
                    58:41:df:23:ed:a6:d0:d0:59:b0:45:7e:36:de:8a:
                    b8:93:56:fd:94:26:96:5c:66:b7:12:60:e4:e6:8a:
                    6b:49:eb:f0:a9:e9:5b:a2:97:ad:d5:29:b8:67:c2:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:61:BA:64:D4:BB:EE:70:AC:EC:BF:93:3E:95:8E:74:D3:FE:E5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/79fe8872-507a-30a0-a7cf-cb61b868f6d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f/b1c4f92f-6633-448e-bb44-903f429ea22f.crl

            X509v3 Authority Key Identifier:
                keyid:E8:5B:48:6B:A0:7D:71:AF:5E:8F:E8:A8:CB:31:D9:3B:28:E6:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b1c4f92f-6633-448e-bb44-903f429ea22f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:05:8f:aa:28:52:5d:d8:28:c4:14:61:af:56:98:26:a2:c0:
         80:fd:0d:08:c1:ee:0d:13:e6:b8:76:b9:3f:9f:4a:3b:6b:12:
         16:5d:f6:65:c4:29:21:48:c6:85:8a:6c:a2:9b:98:d6:54:22:
         67:44:a2:a7:38:ab:f7:7c:a7:30:f4:f8:c7:43:aa:d1:d5:a6:
         7f:ef:ba:fb:ab:64:b1:74:86:7a:85:0d:85:37:fb:81:c2:26:
         73:04:b9:7d:03:0a:99:36:ce:ed:b7:a3:2f:f8:11:e8:ee:9f:
         91:e3:76:63:2b:89:4a:e6:1b:6c:93:de:bc:9f:d3:fe:41:87:
         78:1c:76:f2:2f:a3:db:3b:19:ff:08:cc:04:fe:35:d2:0a:59:
         6d:fe:3b:05:21:90:4c:0d:ad:47:3a:6d:0a:f2:8f:b0:61:da:
         d3:d3:b0:f6:10:f4:4c:3c:a6:22:c8:96:39:d1:d8:1f:1e:4d:
         dd:3a:36:be:b0:fb:9e:6b:85:45:eb:99:dd:83:24:ef:d2:32:
         01:ae:c1:95:45:82:36:76:47:23:14:76:2d:b5:f0:90:8c:84:
         4f:4a:12:b4:79:f1:a4:f0:d1:93:33:9d:8f:ec:67:69:b7:1e:
         16:3f:78:d2:17:c4:44:4f:ac:62:22:7f:4a:d8:93:bb:20:0d:
         eb:aa:da:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:40:47 2026 by rpki-client