Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/92bbc2e2-daf1-3a8f-80b9-5b36ebdf0c30.roa
File:                     92bbc2e2-daf1-3a8f-80b9-5b36ebdf0c30.roa (raw, json)
Hash identifier:          KP65YQobyjBI6h8pLcb0ixn5s/7+kaQnqAnN7m7I0DY=
Subject key identifier:   17:F1:95:2A:40:D7:94:B0:C6:59:FA:DC:7A:35:98:D1:3C:24:59:40
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F4328584F82ADCC82BA3F2ECBE79AF690
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/92bbc2e2-daf1-3a8f-80b9-5b36ebdf0c30.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     39855
IP address blocks:        216.155.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:cc:82:ba:3f:2e:cb:e7:9a:f6:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=dab17a1c-24fc-4edc-a712-55716dfd91e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:c3:dd:6f:63:76:39:61:b8:61:ba:1a:86:
                    4b:e7:26:74:a0:98:f2:99:ec:94:ce:61:6e:ce:1b:
                    fe:80:69:84:92:f3:d4:5a:a7:f2:00:01:ca:22:21:
                    27:3d:d5:69:e8:97:77:29:f0:1f:df:bf:d7:30:69:
                    54:c0:b5:1b:b9:c5:f8:ff:3c:76:79:71:20:91:4a:
                    1b:93:49:67:b2:4b:66:88:49:92:fd:49:08:9d:90:
                    88:ba:2c:6c:0f:e1:37:53:91:97:10:b7:69:0f:fe:
                    68:92:30:c6:6a:56:92:cb:0c:5a:16:64:3c:db:3d:
                    d7:18:40:0e:4e:7d:2d:ae:d4:e5:a2:3c:ec:51:0e:
                    f7:1f:d3:62:34:0f:cd:0e:4d:f4:ad:f5:0d:6b:c1:
                    08:14:de:9b:f4:da:7c:0f:d5:ec:eb:16:3b:3c:96:
                    49:6e:9d:71:fe:7c:6d:c0:71:5b:9c:bc:90:41:5f:
                    9f:6f:69:a5:df:62:a8:c7:fd:ab:50:02:f0:2c:90:
                    0d:12:b4:6c:dc:2a:51:c0:35:a7:3f:0a:88:94:54:
                    bd:b0:19:25:9c:ad:04:3a:75:7d:a7:34:c5:c8:64:
                    e3:be:03:c0:d5:76:fe:73:95:1f:52:fa:a9:41:c2:
                    16:f2:db:e6:73:e7:42:dc:90:37:03:c3:96:dc:ee:
                    59:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F1:95:2A:40:D7:94:B0:C6:59:FA:DC:7A:35:98:D1:3C:24:59:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/92bbc2e2-daf1-3a8f-80b9-5b36ebdf0c30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.155.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:93:9e:e8:77:d5:bc:77:94:49:d6:d3:2f:3c:2e:aa:80:16:
         a2:c9:ec:0c:c7:45:ce:d3:22:ba:f6:20:29:4f:61:e9:bf:97:
         ed:99:96:e3:b5:e0:12:f1:25:74:a8:34:a2:e1:1d:b2:fb:9e:
         45:e9:32:32:f7:60:c5:71:eb:da:21:f3:43:1b:b8:eb:5a:3d:
         eb:0b:1b:64:b5:6a:9d:aa:26:60:0e:43:d1:ae:2b:d4:f3:11:
         3a:c3:ca:57:03:f8:fa:a4:a4:cc:ba:ef:80:26:2a:93:61:91:
         26:f3:59:7e:c5:5e:56:f9:66:13:bd:8a:e2:7f:42:f6:bc:b3:
         2e:e0:b3:b0:d1:45:46:63:b0:05:be:4d:61:b8:67:d3:f9:72:
         69:0b:d4:17:3b:91:ea:09:cf:9b:c9:06:2e:ee:cc:17:23:e6:
         64:14:aa:14:43:2f:7c:56:70:82:0b:4e:1b:5d:5c:65:08:7f:
         24:12:71:24:b3:2a:a3:b9:61:c1:5c:e7:62:b9:45:65:a7:05:
         b8:9e:0a:1d:dc:6e:3c:0e:ef:04:e7:b9:97:5f:22:aa:95:42:
         0b:b8:2e:15:84:dc:78:15:02:5e:78:1d:a2:fb:f5:ec:69:07:
         de:73:d0:3b:38:04:3a:e4:16:c8:2d:99:a3:23:26:e1:37:e8:
         31:30:9f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:44:25 2026 by rpki-client