Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4/1ebc9f56-44ec-3b95-a90a-21cbba7d5472.roa
File:                     1ebc9f56-44ec-3b95-a90a-21cbba7d5472.roa (raw, json)
Hash identifier:          b3r5Rf+hRF0eleVWYNl8wYGeMNtTpM8sTB0crgmcRQY=
Subject key identifier:   44:BA:4A:A4:4C:7A:5B:88:CD:8E:13:CE:21:01:F5:50:BA:F0:77:76
Certificate issuer:       /CN=0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4
Certificate serial:       010D0C9F4328584EDC91E65804676C4E2340BFC0
Authority key identifier: 94:1D:DB:9A:1E:00:A3:E5:47:81:08:C2:2F:1B:DA:F0:24:BF:75:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4/1ebc9f56-44ec-3b95-a90a-21cbba7d5472.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     22330
IP address blocks:        198.204.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:91:e6:58:04:67:6c:4e:23:40:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=9c10898e-1e54-4fd3-9560-72173dae30d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:0c:b9:f3:d6:ac:80:51:de:9a:e5:06:c6:
                    cf:25:69:b7:72:5b:c1:00:2f:27:4a:21:6f:4a:e4:
                    3d:72:df:fb:65:c9:fe:fb:79:ae:aa:23:18:64:17:
                    40:9e:05:1e:94:2f:ba:40:d0:55:49:fa:05:b8:3c:
                    fd:62:38:54:35:98:01:ff:24:e4:c2:c0:59:38:19:
                    cb:e7:7d:ea:df:ee:0a:aa:e4:5d:a5:1e:11:45:dd:
                    eb:30:47:2a:22:20:70:9d:70:14:3d:5e:f9:4b:09:
                    8c:9a:7f:25:31:18:47:1e:18:7e:07:fb:ac:21:19:
                    28:58:aa:40:ef:3d:3d:0b:09:c1:b0:11:36:cd:ea:
                    56:c1:99:78:8b:4e:0e:ad:d4:5e:e1:d7:ec:2a:69:
                    c9:22:6d:6b:f4:7f:fb:9a:93:22:62:2c:b7:1c:99:
                    d6:1c:1e:fe:f3:da:0c:e6:37:e0:fd:47:0a:da:14:
                    c6:d0:50:c3:4b:fe:7f:13:b7:c3:b4:48:35:42:ea:
                    ee:ca:2a:fd:38:e9:ec:72:02:6f:89:10:38:12:c9:
                    8d:d2:5d:1c:45:51:5a:8c:56:80:e1:9b:cd:21:d4:
                    e6:07:e2:06:12:e8:91:be:a3:28:10:b0:85:f3:25:
                    67:99:53:e7:9e:5b:b6:59:ce:1e:8c:6f:41:1c:43:
                    eb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BA:4A:A4:4C:7A:5B:88:CD:8E:13:CE:21:01:F5:50:BA:F0:77:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4/1ebc9f56-44ec-3b95-a90a-21cbba7d5472.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4.crl

            X509v3 Authority Key Identifier:
                keyid:94:1D:DB:9A:1E:00:A3:E5:47:81:08:C2:2F:1B:DA:F0:24:BF:75:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c1d2e9a-e686-44fe-af28-eba2a4b7b4c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:30:11:c8:82:49:fd:01:8b:53:2b:df:30:a5:45:d0:d1:
         6a:f5:8b:f0:c8:96:44:89:75:e0:ff:25:60:01:07:f3:70:23:
         be:c5:41:6c:8f:c8:88:2c:ec:91:0f:d4:27:8f:1a:f9:5f:c2:
         46:3d:60:db:db:5e:f4:8f:c5:7f:25:7d:e8:8b:95:9f:d0:9f:
         fa:83:86:40:7a:69:0a:0a:ac:79:89:79:38:c0:fe:0e:6d:9e:
         72:1d:8a:e6:27:9b:a6:55:a5:25:80:40:81:5b:35:48:91:f1:
         d1:3c:2b:48:d4:1a:a3:49:c1:e9:8a:82:9c:92:1b:cf:28:4f:
         e6:e6:37:44:3f:65:20:06:c7:84:16:b1:7e:76:9d:e4:72:c3:
         c9:8d:b3:51:44:02:6c:54:23:2c:79:41:1d:9f:86:b5:b1:bf:
         71:1f:68:1f:f0:8f:0c:88:e1:23:3c:ce:60:24:91:b2:bc:28:
         c2:3e:15:91:ac:bb:8b:1d:95:fa:e9:36:11:2d:23:22:d5:ee:
         a9:09:02:8d:b6:71:3b:3a:99:2c:98:72:b7:68:72:8b:48:98:
         ff:9c:ab:63:9f:9e:7d:34:dd:2b:18:6a:1f:4f:19:d6:d7:18:
         5b:43:b3:d4:f8:b2:fe:ee:9e:e2:e0:7a:ce:dc:48:6c:f4:55:
         fd:43:f0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:33:19 2026 by rpki-client