Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/09a170e6-b2b8-30b0-adee-975ab184a379.roa
File:                     09a170e6-b2b8-30b0-adee-975ab184a379.roa (raw, json)
Hash identifier:          6cRD0YKKJv+q9VJmhR+o76sSuVwaKwsmEaenMl5uNKE=
Subject key identifier:   2D:C5:C6:00:38:6F:5E:61:CB:C6:AD:52:5A:4D:70:15:6D:8A:84:5E
Certificate issuer:       /CN=580e739b-bb2f-4e02-9a24-4813328e39cf
Certificate serial:       010D0C9F4328584EA7887480CE82A168D4B76CA0
Authority key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/09a170e6-b2b8-30b0-adee-975ab184a379.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     3736
IP address blocks:        198.180.140.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:74:80:ce:82:a1:68:d4:b7:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580e739b-bb2f-4e02-9a24-4813328e39cf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=dd2bc515-1287-454e-88da-43a0a94f809a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3f:60:7d:71:a2:3b:74:66:a3:65:93:96:93:
                    63:be:25:2b:18:8a:f6:2c:13:39:97:5d:78:79:88:
                    6e:fe:fe:66:ef:53:c7:d4:df:8e:59:61:ff:81:d4:
                    39:6f:90:b3:f7:2b:a6:9f:04:9d:fe:56:42:f6:10:
                    3d:66:ea:6c:6a:4e:72:e0:de:78:99:99:2d:aa:c0:
                    93:03:31:2e:cb:22:92:5b:1d:39:b2:cc:21:82:f7:
                    7f:6a:8c:bb:c0:dc:0d:69:a9:a9:e8:04:6c:36:df:
                    6e:d4:ac:83:b9:f8:d8:33:38:c5:51:d0:85:fe:06:
                    1d:20:8d:4e:fd:3c:4a:57:7a:98:88:84:9b:84:90:
                    71:f4:f4:b2:08:97:2e:f4:82:89:35:e7:11:36:37:
                    1d:42:3b:d8:9f:2b:f9:88:06:4d:0e:0e:bf:a5:c9:
                    b6:f1:06:9b:af:b9:bd:68:10:8b:7f:ca:78:b6:f1:
                    f1:bc:49:c8:a0:58:a2:f0:45:70:91:e1:9c:00:59:
                    fb:5f:68:8b:e2:e5:1f:be:1f:54:1d:2d:b7:2f:66:
                    8c:6a:68:70:be:35:b4:ed:24:26:ba:e8:e2:79:eb:
                    47:36:78:d6:8b:9a:14:92:3b:7c:b7:fd:c3:1d:35:
                    22:1e:e1:dc:c4:9f:91:cd:5b:e7:4b:ea:5f:1b:2b:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C5:C6:00:38:6F:5E:61:CB:C6:AD:52:5A:4D:70:15:6D:8A:84:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/09a170e6-b2b8-30b0-adee-975ab184a379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl

            X509v3 Authority Key Identifier:
                keyid:E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.180.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:e3:5b:d5:3f:29:0e:db:68:45:fa:31:81:b4:23:ba:d6:36:
         c6:7e:07:15:c1:d6:34:4c:1c:a0:81:04:cd:64:6b:4f:f8:d0:
         d4:c1:3d:a2:56:cb:0c:88:e5:d3:e3:75:8b:04:14:7d:d3:d0:
         49:05:96:9e:44:b7:65:7b:f1:a7:89:ca:29:02:c0:83:c1:00:
         46:08:91:83:9c:05:63:59:22:1b:9c:46:5b:aa:8e:24:c8:df:
         7c:95:e6:c2:72:96:13:07:3e:5b:c6:af:0b:82:1b:32:62:b8:
         61:ac:64:c4:8d:91:d5:a6:5c:72:72:fc:06:4d:93:2b:23:73:
         2e:da:1e:2b:ea:f1:03:5c:f8:90:4c:9b:e8:71:03:df:71:17:
         4c:bb:08:8e:f3:4f:88:fe:bc:43:b9:fb:76:cf:2c:5e:1c:cf:
         5f:90:40:38:b9:aa:5b:ff:59:81:82:a2:62:27:aa:32:a5:f3:
         fb:62:f0:35:3f:c3:73:06:2f:0d:30:a2:16:1e:8a:a9:14:78:
         fb:54:b2:15:06:1e:30:c3:5a:46:8e:2a:21:b2:18:e6:e1:6f:
         cf:e4:c2:24:2a:78:77:ce:47:aa:0c:ca:e0:c0:a0:9b:ba:4a:
         e5:58:fd:ae:45:32:a6:7f:68:03:0c:03:64:08:9b:70:95:30:
         ea:d0:75:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:11:20 2026 by rpki-client