Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130/746c193f-d42b-3019-bcbe-b8c7fb9649db.roa
File:                     746c193f-d42b-3019-bcbe-b8c7fb9649db.roa (raw, json)
Hash identifier:          67+IAFzOFAeTfBe7JPEzok/2ImxzujijaHrN8cPwvJg=
Subject key identifier:   0B:CB:CB:04:3C:52:B5:52:7A:2E:C0:3B:BC:43:2D:EB:4F:81:BE:77
Certificate issuer:       /CN=fd1927f4-008d-46c1-980b-7c6e68a50130
Certificate serial:       010D0C9F4328584DE41B30560036E7DC910E4820
Authority key identifier: 1C:2B:74:50:38:A3:5D:D0:19:41:44:FE:20:0B:2E:73:0F:80:5A:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130/746c193f-d42b-3019-bcbe-b8c7fb9649db.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     18725
IP address blocks:        198.212.213.0/24 maxlen: 24
                          198.212.214.0/24 maxlen: 24
                          198.212.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130/fd1927f4-008d-46c1-980b-7c6e68a50130.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130/fd1927f4-008d-46c1-980b-7c6e68a50130.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:30:56:00:36:e7:dc:91:0e:48:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd1927f4-008d-46c1-980b-7c6e68a50130
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=03d2c27c-23f9-4f68-b42f-deb8e6ab0879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bb:ce:92:07:a4:9b:9d:c4:e1:82:7a:37:52:
                    e1:9c:2d:06:24:f5:b1:64:d9:98:da:09:db:ed:a2:
                    39:07:92:0c:c4:d1:d1:db:2f:65:95:f2:3f:8d:3c:
                    5b:c0:83:8c:39:8f:d1:64:40:4c:41:4a:dd:73:80:
                    7f:5b:eb:75:57:ca:18:1b:6e:f7:8c:bd:7f:3b:76:
                    90:d3:b9:f6:07:80:b6:71:e5:0d:8b:27:e9:fe:86:
                    cc:a1:44:42:01:26:ad:6e:12:f2:6b:d5:7e:71:49:
                    fc:ef:11:ad:ce:7e:fb:e6:47:f4:92:3d:7e:79:f4:
                    8f:36:0c:64:55:eb:60:bb:c8:a9:cd:e5:b3:d9:6a:
                    6f:25:f2:1b:cd:51:e7:bd:de:97:5b:16:ed:95:ec:
                    08:a9:89:cf:51:2f:6b:b1:51:66:60:2a:f0:8e:58:
                    ee:1d:1b:d0:da:ff:3e:08:45:4a:6c:47:b4:bd:38:
                    80:5b:fe:94:8a:75:3f:75:62:a3:7d:3d:47:af:31:
                    61:14:98:b3:fb:4f:6e:51:d5:3f:3a:39:54:78:b9:
                    99:45:73:ce:d4:cd:13:5a:a2:85:08:6a:39:85:e4:
                    b2:65:1e:60:b4:ef:a3:5d:31:3f:a2:c6:7f:33:6d:
                    de:c0:0a:50:8a:d3:a2:9a:19:d0:15:88:4e:47:f1:
                    b6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:CB:CB:04:3C:52:B5:52:7A:2E:C0:3B:BC:43:2D:EB:4F:81:BE:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130/746c193f-d42b-3019-bcbe-b8c7fb9649db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130/fd1927f4-008d-46c1-980b-7c6e68a50130.crl

            X509v3 Authority Key Identifier:
                keyid:1C:2B:74:50:38:A3:5D:D0:19:41:44:FE:20:0B:2E:73:0F:80:5A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fd1927f4-008d-46c1-980b-7c6e68a50130.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.213.0-198.212.215.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:98:06:63:20:a6:16:20:3c:68:80:aa:99:d8:eb:a3:38:3e:
         79:81:74:5b:4a:fd:0d:a2:97:e4:99:6f:3c:8e:8c:cc:73:05:
         ea:f9:66:6c:ff:59:31:fb:e6:ca:8f:28:83:b7:e6:44:26:a9:
         68:5c:81:56:55:52:a1:52:4b:bd:bf:54:d6:2b:82:e2:7b:6f:
         c0:fa:40:c5:20:f2:78:69:80:a8:05:f8:36:35:52:3a:17:46:
         24:8f:14:29:37:a9:e7:f8:bf:ff:86:30:90:8c:2a:f2:e9:fe:
         0e:86:01:57:88:bd:0b:80:cb:37:f8:42:1a:2d:c2:53:1c:36:
         5a:2f:9b:68:3d:c9:39:50:2a:d8:60:9a:b9:b9:6c:d9:80:65:
         82:b2:ac:5d:24:26:a5:76:02:51:6c:c5:b0:2e:d4:72:89:70:
         9c:52:b6:25:0c:9a:a7:8c:26:35:c5:e4:5c:25:92:84:36:73:
         96:f6:34:f8:68:37:3b:85:f0:68:20:be:35:28:4c:e1:2f:06:
         a3:f1:5c:df:90:11:a4:90:01:b0:b5:68:71:70:1c:cc:88:7c:
         ed:fa:a9:43:f9:be:44:25:71:d7:a1:2c:07:13:8b:f4:36:86:
         15:73:c7:5e:37:e4:da:67:b1:7b:68:ed:10:6e:5e:ec:81:d1:
         a8:65:22:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 18:32:00 2026 by rpki-client