Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/1211d47f-ffa6-3990-b18f-40b762382895.roa
File:                     1211d47f-ffa6-3990-b18f-40b762382895.roa (raw, json)
Hash identifier:          dbZJ+T4SO0AtseDGu7tTzIKs1Oju3thJ6n/6d3lkrAI=
Subject key identifier:   90:7E:72:31:27:48:51:7D:C8:EB:B2:DE:83:06:E3:81:B1:C9:7B:65
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584EA793A8292E2D9CF62538AF00
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/1211d47f-ffa6-3990-b18f-40b762382895.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     198949
IP address blocks:        192.163.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:a8:29:2e:2d:9c:f6:25:38:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b3efe765-7840-452b-a9b9-796b33a7a0ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fa:63:fc:28:d9:c8:09:e3:37:ee:31:93:45:
                    5d:b9:05:1f:d3:34:fb:6c:55:6a:74:af:29:51:9b:
                    9d:ee:75:42:12:07:56:18:3b:d4:42:cc:32:60:85:
                    ca:dd:85:7c:c4:fd:ec:25:ab:00:e5:66:38:ba:c2:
                    30:de:72:df:63:9c:44:6f:d5:b3:5b:0d:88:ea:02:
                    1f:2c:69:41:99:f4:c7:3d:c4:33:2d:61:80:60:13:
                    99:8c:02:a7:44:a7:2b:b4:74:6f:c1:e0:95:1e:fc:
                    16:d4:2c:cc:0b:fd:3c:b9:da:33:bb:cd:5e:ad:45:
                    78:20:c7:20:46:b2:9a:f5:1b:7c:11:bf:cf:85:fb:
                    5f:32:38:ca:cd:9c:01:04:4c:f7:40:ba:34:32:cb:
                    1a:8f:60:51:62:6d:76:98:5f:2b:0e:f8:14:0b:38:
                    1d:a5:83:1d:6b:95:b3:c8:0e:7c:46:7b:25:93:62:
                    0b:1a:81:fa:b7:41:d0:b4:e6:81:f4:ce:6d:7d:a6:
                    94:4d:a1:0b:9c:3d:62:72:fe:91:4d:31:6f:5b:75:
                    d2:92:eb:a5:b3:56:06:3f:2a:4e:fc:48:cc:67:f2:
                    0c:b2:a1:91:c1:a3:07:48:5c:76:db:6d:4d:1e:22:
                    5e:6d:f0:49:f7:84:6c:14:8b:4b:44:61:78:1a:9a:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7E:72:31:27:48:51:7D:C8:EB:B2:DE:83:06:E3:81:B1:C9:7B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/1211d47f-ffa6-3990-b18f-40b762382895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:07:73:13:46:c4:1d:a9:86:5d:a0:77:51:24:60:71:71:20:
         3b:13:ea:dd:b4:1f:59:39:b8:1f:43:c2:92:3e:76:40:2e:83:
         fe:2a:39:a4:15:a2:ec:c1:1c:c4:d6:98:8c:a0:b2:f0:c9:15:
         23:89:36:d7:84:56:58:39:5d:39:e9:e4:a6:0e:04:b9:da:f4:
         dc:10:f2:f0:4b:44:95:21:fb:3e:bc:0c:cc:af:9d:0f:9a:bb:
         e4:04:3b:6c:17:c3:f4:33:9b:ec:f8:40:9f:39:83:3b:1f:c5:
         89:5f:0d:0d:af:4b:c5:0d:c6:35:30:78:d9:38:ae:66:d2:2c:
         d7:ef:ed:5d:76:c1:bb:a3:68:07:89:9a:71:48:be:64:57:91:
         36:eb:5f:78:92:e8:94:be:c4:51:6e:a7:12:f8:7e:89:ba:57:
         0d:9d:62:f5:3f:1d:62:e2:cc:b9:cc:34:08:97:3c:79:a6:1f:
         a8:37:8b:95:f8:e7:fe:1a:c7:4a:dc:28:ac:e6:05:08:f1:5b:
         6f:ad:ec:de:9d:40:97:f4:87:0a:30:89:b1:18:62:10:30:62:
         e3:0c:17:4f:8c:62:bf:cd:d5:ef:f1:c4:26:3f:19:46:37:4f:
         f4:6c:06:99:6e:17:85:e3:26:b0:fa:24:50:c0:8e:e8:6e:71:
         be:d6:da:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:19:36 2026 by rpki-client