Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a3276dfe-b080-343d-8d44-317e56e9018e.roa
File:                     a3276dfe-b080-343d-8d44-317e56e9018e.roa (raw, json)
Hash identifier:          9xV0ZTUVg/oG1MTm+fjVxZlw7wZtFz/VXFAw2UU3+nA=
Subject key identifier:   3C:52:41:0E:FB:88:2E:1B:5F:77:CC:D5:22:96:F6:59:00:07:26:6B
Certificate issuer:       /CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
Certificate serial:       010D0C9F4328584ECD371D25FE641785AC988E00
Authority key identifier: 5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a3276dfe-b080-343d-8d44-317e56e9018e.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     14618
IP address blocks:        198.176.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:1d:25:fe:64:17:85:ac:98:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6239149-fa0b-4325-b8dc-fd0e250454c2
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=d05fb6b6-ef9c-4b7b-9dfb-22fdee74934f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:67:55:5c:63:89:37:5c:59:87:9b:e3:08:ba:
                    68:20:78:f8:fb:03:7c:c8:31:ae:db:ac:7f:83:22:
                    cb:95:c2:ef:dd:4f:3c:13:0b:46:d5:3a:14:eb:2c:
                    2f:38:4e:51:c3:8c:5f:22:49:30:2b:50:ff:ed:9b:
                    c3:93:12:c5:a1:e1:8d:3a:34:1c:ab:ed:d9:cd:9c:
                    63:48:d1:f8:64:e2:8a:0d:f3:b1:0f:f4:81:7a:58:
                    36:49:62:cb:42:93:78:c6:0d:0e:c5:0c:8b:50:a8:
                    d9:76:89:9a:c2:4a:fb:c6:16:bc:a2:ea:b6:32:fb:
                    c2:d8:bc:79:77:a3:17:d3:f1:7f:88:63:4a:b4:fb:
                    b2:68:e0:04:12:e8:98:e0:f5:f7:39:39:2c:b5:62:
                    02:ce:48:5d:42:cf:0e:9a:32:ba:52:23:f2:cc:d4:
                    99:9b:2b:af:f1:45:c1:e7:d3:c8:4a:e4:b6:32:d4:
                    9f:94:6a:52:48:04:4e:7b:88:3e:af:a4:95:cd:f1:
                    26:99:b2:fa:ee:a6:4a:3f:2e:fd:4c:f9:a0:dd:3e:
                    fd:8a:f6:7f:71:24:80:38:fa:d9:31:a8:b9:75:6c:
                    c3:9f:66:f9:30:50:1a:ef:f7:54:6b:02:31:a6:17:
                    f3:7b:9c:2f:da:4f:ed:96:59:52:f7:93:9c:6e:6f:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:52:41:0E:FB:88:2E:1B:5F:77:CC:D5:22:96:F6:59:00:07:26:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a3276dfe-b080-343d-8d44-317e56e9018e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2/a6239149-fa0b-4325-b8dc-fd0e250454c2.crl

            X509v3 Authority Key Identifier:
                keyid:5E:1A:9F:A8:ED:89:2D:D6:40:E7:8C:00:A1:F2:B4:FF:72:D7:31:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a6239149-fa0b-4325-b8dc-fd0e250454c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:2d:5c:fc:bd:9b:55:89:b4:4e:f1:7f:9b:e8:a4:95:fb:ac:
         63:54:bc:20:08:74:ae:59:f2:d5:6d:80:9f:0f:13:58:85:bf:
         b1:40:f8:cd:ee:32:90:97:37:b2:f7:77:47:1e:23:30:b0:92:
         d8:f8:32:25:71:7e:e8:31:3c:0a:f5:1e:5d:68:0a:30:5d:76:
         a0:26:af:a9:a7:6e:26:26:c2:ef:23:42:b9:5f:60:c7:fc:5d:
         46:15:1a:10:36:9e:ee:96:d1:4b:45:fa:58:5b:77:7c:9f:20:
         7d:e8:a7:53:e3:91:f2:57:e1:06:60:63:fe:3a:19:1a:75:95:
         6c:6a:0c:5f:79:ca:2b:cc:a3:1a:74:3e:18:e6:00:02:2c:0c:
         8e:32:37:99:2e:4b:28:08:b0:95:2f:ac:52:dd:c4:4c:f0:34:
         65:e3:c7:2d:90:88:5a:b1:1c:92:8e:1d:4a:7f:a9:e7:3b:c5:
         0f:61:97:bf:18:2c:3b:ed:17:59:b0:17:8d:ca:d0:58:22:c1:
         ba:3b:1d:21:77:33:dc:6f:97:59:97:10:20:46:b3:55:fe:f0:
         91:20:ca:76:d4:27:2d:64:f7:b5:91:40:3d:99:71:a5:34:35:
         bc:86:ea:80:c0:f3:5b:3b:00:9d:6b:48:1d:33:ef:1a:4b:84:
         5c:6e:06:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:48 2026 by rpki-client