Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a/393be503-8b0d-3cbe-826d-e2e3c6b89542.roa
File:                     393be503-8b0d-3cbe-826d-e2e3c6b89542.roa (raw, json)
Hash identifier:          x9O8iAobGY97Wo8TMbP6vIHYxEkVti4+TVG2TgSWOl4=
Subject key identifier:   39:30:4E:6E:F3:3C:7C:1C:68:FE:86:5C:66:D6:60:27:B1:F4:15:12
Certificate issuer:       /CN=c443aaa2-f5bd-4c19-9faa-74719a27410a
Certificate serial:       010D0C9F4328584B2FC19B4DB84E6E139FD2D140
Authority key identifier: 0A:FC:2B:C7:1E:CC:5A:BC:D8:A6:67:03:FD:08:82:F3:D2:3A:16:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a/393be503-8b0d-3cbe-826d-e2e3c6b89542.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     32746
IP address blocks:        192.133.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a/c443aaa2-f5bd-4c19-9faa-74719a27410a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a/c443aaa2-f5bd-4c19-9faa-74719a27410a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:9b:4d:b8:4e:6e:13:9f:d2:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c443aaa2-f5bd-4c19-9faa-74719a27410a
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=ca208a0d-d1bc-4e1d-8637-4e0b2612dff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:47:e1:ff:87:4d:22:0e:be:79:c6:e4:70:4a:
                    50:b1:a0:2c:89:35:f2:00:8b:94:ec:d1:02:4d:d8:
                    90:96:d1:c8:99:8c:ba:bb:31:f5:89:6b:f4:2d:83:
                    60:2f:e8:d8:40:a1:71:fc:5b:28:9e:86:da:d5:ec:
                    be:4c:be:5e:38:53:85:7e:54:d5:d3:10:6b:a8:76:
                    0d:ca:f2:c4:1a:28:31:b2:6e:f9:94:fb:6b:75:b9:
                    c7:be:96:21:c9:8f:44:90:d5:d9:93:55:27:dc:dc:
                    d4:fc:f6:73:97:e0:48:3b:7e:26:3f:fe:ed:88:e4:
                    5a:81:75:db:68:2d:95:46:4f:ce:06:e9:c0:75:c8:
                    39:c1:9f:0a:dd:4a:8f:00:d0:8e:80:51:6d:ca:9f:
                    26:a7:07:b6:09:26:a3:93:51:0c:27:62:86:27:d0:
                    fd:53:87:f7:d6:5d:5d:7f:e4:ba:94:29:10:f1:7e:
                    f3:c6:f2:87:69:ad:a2:6b:8e:27:90:a1:e1:e9:48:
                    82:69:62:ec:8c:cb:48:36:b3:9a:fe:b6:29:36:07:
                    d8:ac:ad:07:c5:2f:af:4d:6f:09:a7:63:e5:49:55:
                    54:bb:d0:3b:5a:1e:bc:d5:f5:28:8b:e9:22:1a:01:
                    d6:d9:86:df:52:99:a8:04:bc:46:e3:80:d3:1d:22:
                    e7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:30:4E:6E:F3:3C:7C:1C:68:FE:86:5C:66:D6:60:27:B1:F4:15:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a/393be503-8b0d-3cbe-826d-e2e3c6b89542.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a/c443aaa2-f5bd-4c19-9faa-74719a27410a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:FC:2B:C7:1E:CC:5A:BC:D8:A6:67:03:FD:08:82:F3:D2:3A:16:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/c443aaa2-f5bd-4c19-9faa-74719a27410a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.133.26.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:41:54:b1:f8:1c:04:82:20:bb:7d:6a:07:2a:25:cc:fc:a2:
         f6:49:98:6a:44:7c:9c:3e:7d:e6:b0:5a:b5:29:9e:a6:2a:92:
         ff:b3:0b:ee:20:d9:72:33:6f:9d:ce:e7:c6:b6:12:64:aa:b7:
         62:c1:34:b4:7d:63:c7:2f:74:06:5d:84:f6:30:37:47:ee:c5:
         df:6c:fd:df:0f:9b:2c:a1:68:fc:11:d5:63:a9:3e:49:70:e5:
         49:92:0f:cc:8e:0e:6b:cc:16:0f:77:04:e1:8a:4e:70:cc:a3:
         f9:85:9a:4f:c4:66:ae:40:c4:3c:8c:48:fd:a5:ea:17:bc:4c:
         96:60:15:ff:b4:e3:65:f5:e5:09:15:9a:d0:7f:42:a6:71:83:
         06:32:50:69:d8:9f:4f:15:5c:b9:c8:1f:80:a5:56:80:48:56:
         cf:f7:e4:6c:cf:7e:83:8a:fb:c6:1a:65:d6:d9:18:53:8c:4f:
         2a:ba:8b:a3:e4:a2:ae:79:0e:9c:b7:f2:98:e5:a0:ac:b5:c3:
         57:35:39:92:1c:f8:ee:5e:7e:c2:9f:1d:99:99:70:e6:2f:20:
         b4:3b:08:63:84:d1:2f:73:cb:69:43:9a:80:a6:3b:ae:e1:4d:
         53:4e:9d:38:61:b6:bb:94:23:9d:9f:0d:7d:17:f6:cd:25:53:
         e7:c6:53:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:39:15 2025 by rpki-client