Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/192069b6-9c5c-4fdc-b73c-58cf072c6da9/dd819e32-be80-39f7-ac60-5f1425d7c21c.roa
File:                     dd819e32-be80-39f7-ac60-5f1425d7c21c.roa (raw, json)
Hash identifier:          SFA9aOf2Q8YJv0Sv3L6MQLPHrtr9OJRKHM6p5ZU2GVk=
Subject key identifier:   70:35:46:6A:7B:62:23:26:01:32:59:6E:6F:24:56:E2:62:1D:75:1A
Certificate issuer:       /CN=192069b6-9c5c-4fdc-b73c-58cf072c6da9
Certificate serial:       010D0C9F4328584F87210533F6618802CAE75C40
Authority key identifier: 48:A4:97:6C:77:AF:24:4E:88:AD:08:C9:16:84:89:F2:A9:80:8C:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/192069b6-9c5c-4fdc-b73c-58cf072c6da9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/192069b6-9c5c-4fdc-b73c-58cf072c6da9/dd819e32-be80-39f7-ac60-5f1425d7c21c.roa
Signing time:             Sat 17 Oct 2026 03:16:07 +0000
ROA not before:           Sat 17 Oct 2026 03:16:07 +0000
ROA not after:            Fri 15 Jan 2027 04:16:07 +0000
asID:                     134196
IP address blocks:        192.249.89.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/192069b6-9c5c-4fdc-b73c-58cf072c6da9/192069b6-9c5c-4fdc-b73c-58cf072c6da9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/192069b6-9c5c-4fdc-b73c-58cf072c6da9/192069b6-9c5c-4fdc-b73c-58cf072c6da9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/192069b6-9c5c-4fdc-b73c-58cf072c6da9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:87:21:05:33:f6:61:88:02:ca:e7:5c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=192069b6-9c5c-4fdc-b73c-58cf072c6da9
        Validity
            Not Before: Oct 17 03:16:07 2026 GMT
            Not After : Jan 15 04:16:07 2027 GMT
        Subject: CN=5d2f7ad9-ca53-4950-9a77-b719a9e69d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:91:50:cd:0b:80:ac:ae:e2:35:07:29:3b:
                    7d:86:1a:ef:08:5d:5e:ae:a3:87:78:4c:31:e4:ef:
                    8f:6a:73:69:5f:c2:1f:fa:85:93:8c:a5:50:80:b9:
                    8a:c3:fe:2c:1c:fc:a6:1f:25:27:21:9c:ac:b2:5a:
                    4b:2e:24:04:b0:4b:3f:c5:bb:51:6d:a6:63:54:b4:
                    9b:bc:3a:e4:b1:d2:3a:04:bf:5c:89:8c:39:1a:26:
                    ae:29:30:56:c3:6f:98:45:7d:6f:11:05:67:60:0f:
                    1b:36:a4:50:8c:a9:d3:4c:43:a9:bc:5f:02:38:bb:
                    1d:6c:84:24:a7:da:9b:72:d6:53:09:bf:5d:60:23:
                    43:ea:bc:65:75:55:ac:99:83:d5:33:68:0d:c6:67:
                    bb:13:79:56:1d:f3:93:90:ca:e7:9d:f8:bc:b5:1a:
                    b1:3c:fd:42:1e:f6:ba:a6:86:de:28:8d:52:a2:13:
                    1a:a1:22:d9:82:a6:c9:a3:a7:ef:79:e7:df:52:80:
                    6b:49:4f:43:b0:ff:c5:0c:6e:89:a4:66:68:75:35:
                    71:7c:e5:80:ed:fc:67:2b:a5:92:5b:f3:21:b1:30:
                    a2:e8:9f:84:85:83:67:cb:59:ca:f2:cd:2a:e0:db:
                    8f:d3:2a:91:ec:4b:f7:f1:d6:8e:af:33:b1:76:d1:
                    23:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:35:46:6A:7B:62:23:26:01:32:59:6E:6F:24:56:E2:62:1D:75:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/192069b6-9c5c-4fdc-b73c-58cf072c6da9/dd819e32-be80-39f7-ac60-5f1425d7c21c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/192069b6-9c5c-4fdc-b73c-58cf072c6da9/192069b6-9c5c-4fdc-b73c-58cf072c6da9.crl

            X509v3 Authority Key Identifier:
                keyid:48:A4:97:6C:77:AF:24:4E:88:AD:08:C9:16:84:89:F2:A9:80:8C:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/192069b6-9c5c-4fdc-b73c-58cf072c6da9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.249.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:c9:8c:01:d3:be:9b:8f:8d:3b:e6:73:86:9d:07:80:74:60:
         ea:f6:9f:77:3c:1a:90:67:b9:1e:8d:0d:72:ac:f1:48:01:01:
         8b:68:bd:54:c0:99:28:de:96:21:26:a3:98:bb:c7:94:45:5e:
         ff:ae:51:24:19:d4:36:1e:5c:3d:7f:85:a2:fe:83:33:12:a3:
         77:a4:19:72:b9:d5:5d:78:9c:3b:a1:4f:e7:eb:fd:d3:51:a6:
         9c:49:c7:b0:57:53:c6:5e:5c:1f:76:09:af:a5:37:fa:a3:91:
         15:22:58:22:3b:44:38:5e:3d:5c:5c:ad:08:bf:6e:33:f6:ed:
         2c:5d:56:39:8c:77:09:1d:1b:2c:db:7a:0f:3c:e4:06:3f:ef:
         27:fe:ed:c0:bf:53:b4:79:f6:fb:00:28:91:f0:2e:77:34:87:
         c8:0b:09:ef:d9:97:fd:21:30:09:de:cb:f6:82:47:71:ea:06:
         c4:0c:1c:70:69:20:d6:66:be:32:50:a4:c2:d0:10:f7:1f:60:
         41:8c:36:61:2d:23:ad:e7:1d:56:6f:7b:72:2a:0e:3d:8a:21:
         d9:c2:4f:25:04:c0:e6:8c:1e:bb:cf:50:58:64:0c:13:aa:2e:
         81:c6:9b:ab:fb:0a:60:72:62:54:2c:59:4d:56:ce:10:6e:41:
         69:a5:bb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:41:59 2026 by rpki-client