Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/91c9192d-fde0-3eb1-8fe4-78483cc4aecb.roa
File:                     91c9192d-fde0-3eb1-8fe4-78483cc4aecb.roa (raw, json)
Hash identifier:          +UnlNpaFsUk66oZSE2HFCVEthn5dTlVmoKna7fo8/LI=
Subject key identifier:   75:7C:08:DB:47:1B:CC:20:CA:88:68:D2:1E:B6:9B:A0:D5:CB:2E:91
Certificate issuer:       /CN=5f218203-7869-4c63-a884-4946e8c91160
Certificate serial:       010D0C9F4328584CCA41E9428B65123728403780
Authority key identifier: 0E:25:69:3F:D6:91:E0:C8:FA:BC:70:90:E1:73:60:A2:96:BF:F4:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/91c9192d-fde0-3eb1-8fe4-78483cc4aecb.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     393563
IP address blocks:        192.43.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/5f218203-7869-4c63-a884-4946e8c91160.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/5f218203-7869-4c63-a884-4946e8c91160.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:41:e9:42:8b:65:12:37:28:40:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f218203-7869-4c63-a884-4946e8c91160
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=2ea6864f-8d37-4f74-89cb-cde751551022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2d:27:22:9b:3e:68:69:08:84:5d:31:01:b2:
                    c5:cc:d9:05:0d:65:fb:1e:00:6d:73:24:15:df:57:
                    54:99:51:c3:e3:43:14:96:3a:83:63:85:3c:b6:56:
                    b8:80:2f:3f:16:9a:3a:93:ce:ff:e3:b5:5e:49:c5:
                    75:e1:7d:96:ab:9d:9a:36:50:83:e4:c5:90:7f:bc:
                    bc:ed:3c:fc:35:6c:22:0a:d0:2a:3d:e7:3f:4e:ef:
                    33:38:e4:48:fb:79:8d:0f:7f:9e:67:63:1e:43:00:
                    0c:5e:45:e0:1b:2f:0c:8c:a3:62:d0:88:f1:f8:ec:
                    22:a5:6d:24:00:34:16:41:1e:60:fb:9b:7c:c2:7e:
                    70:81:ef:83:ca:e0:6f:04:31:87:5c:10:58:24:20:
                    80:a5:59:de:67:b4:e6:e2:3e:65:d6:0a:6f:a2:0a:
                    b2:d6:4d:d3:56:a2:ac:3d:31:01:91:25:29:f0:13:
                    33:ba:c4:5a:7b:81:7a:b6:f3:21:4a:3d:40:c7:78:
                    7d:77:b9:ec:5a:67:38:63:38:0d:f9:39:f8:f6:15:
                    02:e0:71:82:75:ee:3e:6c:74:51:12:d8:b2:1f:ca:
                    c0:b2:f6:14:60:15:6c:d7:6c:d5:dc:2b:f8:fa:5e:
                    36:ce:bc:c5:9b:b6:6a:12:cb:70:18:0d:05:f9:8a:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7C:08:DB:47:1B:CC:20:CA:88:68:D2:1E:B6:9B:A0:D5:CB:2E:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/91c9192d-fde0-3eb1-8fe4-78483cc4aecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160/5f218203-7869-4c63-a884-4946e8c91160.crl

            X509v3 Authority Key Identifier:
                keyid:0E:25:69:3F:D6:91:E0:C8:FA:BC:70:90:E1:73:60:A2:96:BF:F4:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5f218203-7869-4c63-a884-4946e8c91160.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a4:d0:b7:64:ad:ee:cd:7a:52:67:b9:69:3b:ec:52:ad:61:
         71:21:17:14:a1:d6:de:06:22:6c:eb:b9:cb:9f:cf:44:3a:a0:
         1f:ac:47:86:fa:d4:80:e8:b8:30:69:11:ea:3a:b6:0d:99:f2:
         16:28:05:24:2c:38:bf:23:38:ba:c7:3a:84:52:d4:86:86:1f:
         b9:30:ec:89:ab:2d:28:d3:38:c1:ab:84:ea:bc:d5:7c:2e:a5:
         96:31:ae:d2:8d:b9:5a:6e:a4:9c:d8:c1:40:43:95:11:7b:9d:
         d8:1f:19:74:7e:5a:34:90:a6:f9:eb:32:7d:23:4c:da:1e:d5:
         96:d8:82:0b:c0:c8:70:25:6e:b9:c7:70:ee:82:9f:dd:4b:0f:
         af:06:d1:5e:2f:83:d8:5a:9c:01:33:c3:d9:6a:4d:36:0f:f8:
         31:26:93:58:fa:ec:2a:df:59:78:1b:1e:11:3e:fd:3c:57:a9:
         8c:6d:90:05:65:73:4c:47:be:ee:36:8a:9b:06:20:ac:c5:90:
         a0:b6:56:ec:81:00:ca:a3:df:20:3a:9b:5b:72:04:62:a0:d9:
         a9:80:22:9d:2b:05:76:b3:e0:5d:0a:53:f0:97:0d:4d:e6:23:
         34:ef:23:cc:eb:ad:7d:6d:9a:82:4f:26:b7:c8:a7:61:37:32:
         17:af:ff:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:44:47 2026 by rpki-client