Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/4dcae7c3-a0de-3c1d-a613-5d588e194133.roa
File:                     4dcae7c3-a0de-3c1d-a613-5d588e194133.roa (raw, json)
Hash identifier:          J5AvFNoisfxpysDZtyeqkF1L+jYL/PboxSF+pUq2ZqA=
Subject key identifier:   1C:D9:F9:99:EA:6B:68:33:C6:EF:2A:8A:FD:B3:6D:C2:B8:2D:49:C8
Certificate issuer:       /CN=91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f
Certificate serial:       010D0C9F4328584DEF46031FB83C7B4E46782B00
Authority key identifier: C9:7E:23:7E:30:DE:F6:1E:7A:9B:FD:9E:1B:B1:42:55:C8:D1:9B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/4dcae7c3-a0de-3c1d-a613-5d588e194133.roa
Signing time:             Sun 24 May 2026 01:00:27 +0000
ROA not before:           Sun 24 May 2026 01:00:27 +0000
ROA not after:            Sat 22 Aug 2026 01:00:27 +0000
asID:                     557
IP address blocks:        198.202.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ef:46:03:1f:b8:3c:7b:4e:46:78:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f
        Validity
            Not Before: May 24 01:00:27 2026 GMT
            Not After : Aug 22 01:00:27 2026 GMT
        Subject: CN=cb7020cd-aa48-4f5b-95ef-e9740a2fbfe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:d7:f9:1b:f4:55:c0:d0:b6:d3:74:d8:50:
                    5d:e5:8f:d6:73:39:b1:4b:42:f1:4f:53:84:0d:dd:
                    28:fd:d7:59:3e:b9:54:f7:79:a2:33:d8:9c:4d:f1:
                    23:48:d5:d8:e6:73:b0:d9:03:a9:11:3d:78:6d:32:
                    54:37:41:da:8d:d7:54:d5:a5:63:cf:eb:24:3c:74:
                    7d:c8:06:22:72:8e:05:fd:e1:e2:a6:3b:99:73:11:
                    ba:26:65:f5:ef:f5:33:f1:db:f2:3c:fb:9b:02:a7:
                    bd:de:aa:4e:e0:dc:a6:13:67:42:68:73:3d:e2:96:
                    db:9c:d2:9b:88:e4:40:54:b7:dc:9e:5b:3a:b9:a8:
                    ad:e3:79:e3:dd:eb:d9:21:b0:62:0f:bf:2d:be:80:
                    35:1a:67:58:4f:02:7e:3b:c8:30:2b:4f:bb:d6:53:
                    d1:4b:2c:4b:2a:45:bc:76:c0:34:a7:b3:bb:52:0e:
                    65:d8:bc:20:aa:bf:c1:9a:48:d7:22:ac:57:80:01:
                    43:71:64:8c:da:01:88:e0:18:d5:be:35:63:0c:f2:
                    7d:d7:73:d7:2e:51:04:fd:bc:89:69:29:9d:fb:ff:
                    3d:a0:8f:05:03:b6:7b:4c:a5:bd:03:78:bd:83:be:
                    b7:6a:86:60:c6:6a:6b:d9:0c:d5:60:b8:68:ad:d7:
                    c1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:D9:F9:99:EA:6B:68:33:C6:EF:2A:8A:FD:B3:6D:C2:B8:2D:49:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/4dcae7c3-a0de-3c1d-a613-5d588e194133.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.crl

            X509v3 Authority Key Identifier:
                keyid:C9:7E:23:7E:30:DE:F6:1E:7A:9B:FD:9E:1B:B1:42:55:C8:D1:9B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:25:57:26:32:f2:54:e9:6f:71:fb:a0:14:c2:32:f5:da:2f:
         1d:2a:18:ed:b0:e1:53:b9:d3:20:f7:d3:03:7c:58:b7:fc:00:
         5b:e0:68:30:63:34:80:c8:73:13:49:1d:e0:8f:40:66:f5:c0:
         53:47:fa:ad:7d:6c:58:9f:bb:10:6c:ea:c8:c9:27:49:6a:5a:
         6b:8e:b4:8b:25:fa:3c:97:5d:5a:c5:31:1c:8b:13:24:5a:ad:
         5e:85:d7:46:c3:83:32:5e:0a:e7:ac:18:98:b8:43:a6:be:2c:
         64:33:1b:a6:fa:a2:29:bb:2d:2a:f1:14:2c:94:57:7f:2a:a7:
         07:ea:6f:df:06:d5:c5:7b:0a:68:e2:7d:b4:dd:eb:59:ac:30:
         62:d2:47:b7:f1:b3:00:b0:14:a4:1d:a8:94:41:a3:4b:70:cf:
         14:ee:31:93:02:a6:8a:b6:53:ae:59:7b:a3:ba:d4:a3:b2:78:
         98:39:66:4a:d7:b6:c7:70:fe:85:7d:b4:c3:fc:62:e2:e5:b2:
         60:17:eb:6f:9a:00:8c:b8:8a:3b:f3:32:89:9d:ad:93:2b:be:
         b5:2f:cf:55:e0:4a:78:d9:13:bb:75:ea:44:ea:d4:5e:a4:8f:
         bb:ba:97:19:d0:23:3a:28:85:43:e7:6f:d3:a3:42:c5:6d:6a:
         cf:10:1f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:00:54 2026 by rpki-client