Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/903a16b7-a1b4-3cd4-a8bc-5edb58c4c966.roa
File:                     903a16b7-a1b4-3cd4-a8bc-5edb58c4c966.roa (raw, json)
Hash identifier:          4ZlWUhg/K2vyeckcZmsHcGwRewiVBymKC2UkYm8XPT4=
Subject key identifier:   95:FF:76:F5:20:F3:68:A8:F0:AC:47:CF:B3:08:07:C4:B1:3D:63:18
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584F51D2C180261A8197A30A5600
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/903a16b7-a1b4-3cd4-a8bc-5edb58c4c966.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     402510
IP address blocks:        192.137.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:c1:80:26:1a:81:97:a3:0a:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=3eaa6793-c4a4-43f2-9799-bc19f878ef01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cb:d5:59:35:e6:3b:03:36:7d:32:92:98:56:
                    29:df:c8:d2:6c:ca:f6:4e:99:06:fc:9c:e9:ff:e0:
                    ff:b5:9f:ff:eb:07:63:1e:f7:be:7d:2b:94:d0:81:
                    54:79:34:df:56:8f:05:1a:97:3b:e6:5c:93:bc:60:
                    e6:bd:be:ad:ad:9a:a4:3c:46:ed:4e:c2:79:19:f4:
                    17:f9:09:8d:e8:70:bb:53:32:37:f9:4c:ee:20:ae:
                    2d:7a:29:e1:72:00:95:23:89:93:aa:89:7a:eb:da:
                    25:72:42:98:1f:95:63:96:f9:91:56:02:ce:87:26:
                    7d:e2:35:d0:27:fd:b1:6a:d0:c2:d8:b0:be:e9:79:
                    20:98:27:af:2a:e1:a6:4b:38:c1:6c:7c:64:82:a2:
                    11:9d:4b:45:71:fc:ce:e9:49:93:45:c0:a9:4b:ee:
                    1b:4c:78:a6:3c:64:56:fc:41:bd:c9:b0:77:d0:05:
                    44:30:1b:29:7b:c9:59:45:59:61:b4:ba:50:83:de:
                    6b:9a:f7:97:79:2c:cf:60:c0:bd:16:75:8c:2a:46:
                    06:58:17:e6:93:d9:4d:93:95:cb:f1:31:24:25:4c:
                    c1:16:f3:64:c8:42:dd:54:98:4f:df:1e:34:7c:49:
                    47:47:31:0b:37:b5:dd:57:16:fc:98:3f:ee:d8:10:
                    39:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FF:76:F5:20:F3:68:A8:F0:AC:47:CF:B3:08:07:C4:B1:3D:63:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/903a16b7-a1b4-3cd4-a8bc-5edb58c4c966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.137.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:0b:26:7d:f7:3b:90:23:c6:86:c7:c0:2f:3e:1d:59:ab:95:
         5a:b2:57:d2:87:2a:0a:bd:93:93:75:be:ee:31:e9:04:11:07:
         06:ae:57:91:1b:66:b6:b6:a6:30:be:ba:be:97:a7:ec:2a:44:
         9e:38:35:b8:65:4f:88:26:be:c9:a5:08:8f:8e:b3:37:9c:13:
         23:cb:fa:a6:8d:47:17:86:db:4c:8a:32:9d:dc:1a:ad:fc:91:
         96:0a:76:ee:24:47:42:dd:ea:83:72:cc:6f:18:bd:8f:b1:c3:
         91:73:8f:c9:82:c8:7b:1d:e3:8d:a9:e7:59:ff:c6:78:b0:12:
         22:2e:35:d1:d5:55:e2:c2:26:d2:4a:0a:77:73:06:23:5f:0c:
         de:80:93:f0:8d:34:d5:be:38:38:91:4c:49:d6:e4:e2:31:ad:
         90:f1:cb:6c:d7:b6:39:1a:e5:78:b2:9c:9e:1c:01:c2:9a:11:
         ed:67:52:ac:a0:3d:50:5b:49:41:11:d6:93:77:d5:48:7b:45:
         76:55:a0:d4:8a:5f:2f:14:32:cb:a3:10:5c:fa:2e:fc:ab:bb:
         47:4f:dd:e5:cd:9d:da:5d:d5:72:aa:f5:95:82:c5:b6:6f:af:
         f2:27:aa:40:fb:9f:41:a1:3b:fd:6d:ae:d9:5c:df:e0:37:c6:
         a0:68:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 14:02:12 2026 by rpki-client