Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa
File:                     3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa (raw, json)
Hash identifier:          o5AFt6RAITOLr5yI/qN4tFCAsLUXmLIqxIN/PE9/Ma4=
Subject key identifier:   35:91:CB:5B:16:DA:D1:B4:AA:D3:13:4C:AF:A1:14:F8:A3:62:DB:D5
Certificate issuer:       /CN=63284bd2-12fb-4094-b79d-d52c0f6a5a9d
Certificate serial:       010D0C9F4328584F698D9BDAFAB05DA0AF353CC0
Authority key identifier: CA:BF:30:60:DC:47:25:2D:5F:DF:15:19:D0:7B:25:39:C5:36:4A:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     401470
IP address blocks:        198.202.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:9b:da:fa:b0:5d:a0:af:35:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63284bd2-12fb-4094-b79d-d52c0f6a5a9d
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=efc7ac9b-4670-4173-9a90-ec94a0c10efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:66:0d:5c:2a:26:37:80:cf:6e:3d:ce:ab:
                    fc:d4:df:11:a0:57:aa:b8:28:c2:1a:17:6a:59:09:
                    09:c7:e6:cd:bc:63:85:96:9d:7a:2e:c7:55:af:47:
                    57:bd:88:32:b6:e8:4b:5a:30:4b:dd:22:92:b3:20:
                    51:1f:bf:f7:4f:83:6d:c1:b2:e0:46:1c:ad:d5:fd:
                    ba:b4:37:00:07:f5:b1:c1:fd:03:08:b2:80:62:72:
                    2d:20:02:5d:d9:02:e8:04:5b:8a:70:52:7e:be:54:
                    71:2b:b4:ad:51:75:1e:f1:1b:d8:9b:eb:76:0d:65:
                    6d:77:16:9c:65:c5:b7:24:63:05:36:44:91:f1:7b:
                    2a:23:e8:21:cd:04:de:9b:7e:33:50:8c:1a:0b:44:
                    72:12:80:5d:59:c5:9d:e5:41:d3:2a:74:d0:9d:20:
                    cd:75:37:2b:eb:ae:01:8f:62:85:2a:b4:2b:e6:06:
                    46:b2:2c:bf:65:de:93:bf:ec:80:7e:ef:03:39:9e:
                    1c:29:56:60:ca:92:c4:70:5e:78:5c:ba:48:59:57:
                    69:30:7d:94:fe:b5:59:70:a9:a9:e4:12:c6:4d:ab:
                    5f:1a:a4:5d:48:60:8d:ad:7d:42:72:80:52:29:0d:
                    9a:7b:73:24:35:4d:74:26:cd:1d:b8:79:2c:48:70:
                    bb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:91:CB:5B:16:DA:D1:B4:AA:D3:13:4C:AF:A1:14:F8:A3:62:DB:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/3b48b098-dd59-3a7d-bba7-bff42f496d3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.crl

            X509v3 Authority Key Identifier:
                keyid:CA:BF:30:60:DC:47:25:2D:5F:DF:15:19:D0:7B:25:39:C5:36:4A:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63284bd2-12fb-4094-b79d-d52c0f6a5a9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:e0:04:e2:47:f7:32:a9:8d:8a:08:09:ff:17:84:6f:3a:f6:
         12:6b:12:97:d2:f8:30:2d:9e:3d:1c:ca:ba:56:b8:20:a9:ef:
         2a:de:95:ef:55:58:50:b6:fb:a0:4e:9c:c8:75:4d:20:4c:0c:
         3f:a8:a7:af:12:4a:89:37:b4:63:f6:d4:b9:4c:c9:0e:42:8f:
         9d:60:07:71:f2:54:9f:cf:92:e4:1d:58:be:0f:9b:c1:d6:fd:
         34:42:46:29:f5:4a:93:6e:d0:b8:ba:26:a4:4b:ca:c1:96:e8:
         fd:c7:24:0d:5d:69:49:f5:36:94:66:47:c2:be:d0:3c:c7:a5:
         72:11:d9:5a:90:77:dc:58:fa:ca:54:43:26:c9:4c:8b:b0:9f:
         1f:59:36:d4:38:59:30:9f:97:12:28:c3:24:7e:a1:9a:53:5c:
         0a:7a:fa:9d:7f:a2:e7:0b:b6:57:4d:20:6b:e9:9d:d5:ea:de:
         43:ce:c8:70:43:8a:5a:e2:91:5b:d2:ce:f6:d8:ac:b6:6c:fb:
         09:38:a3:bf:a0:5e:67:19:53:4b:a0:bf:e6:c0:c3:76:83:d9:
         a8:9c:8b:54:9b:69:b9:8b:52:ed:3a:b0:29:82:de:26:1f:03:
         ee:53:5d:fc:0a:a1:97:22:87:36:a2:98:93:a5:6f:9e:eb:43:
         d8:3b:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:11:05 2026 by rpki-client