Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa
File:                     5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa (raw, json)
Hash identifier:          V8JESrXUhSstkapdq+4Ghjp0GacXEQMFQCjbVRAz5fw=
Subject key identifier:   24:B9:0B:15:6E:BE:DE:04:31:63:FA:63:B3:BD:87:71:84:63:64:4D
Certificate issuer:       /CN=baff326b-1f24-468c-b9c6-fa089a461350
Certificate serial:       010D0C9F4328584F49746B5DF2677D794E278AC0
Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395776
IP address blocks:        107.163.0.0/19 maxlen: 24
                          107.163.32.0/19 maxlen: 24
                          107.163.64.0/19 maxlen: 24
                          192.155.160.0/20 maxlen: 24
                          192.186.0.0/18 maxlen: 24
                          192.250.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:6b:5d:f2:67:7d:79:4e:27:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=694df522-5e55-4ca6-804b-e68dc589e42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:90:64:23:fb:7c:31:45:fc:5d:db:d6:e1:
                    47:d5:ad:05:22:44:e1:f7:2d:0c:67:f3:2e:18:4c:
                    e9:08:69:f5:fa:46:ba:97:72:7c:81:84:5a:59:bc:
                    97:a4:71:ab:7c:8a:e4:49:e2:f7:8c:6d:95:a0:11:
                    73:3a:57:9c:e7:2a:5c:43:da:5f:e9:48:35:95:0f:
                    44:43:93:31:dc:0c:55:84:8e:73:cf:1b:c4:9f:4b:
                    db:d4:3f:45:69:fd:0b:e6:bf:49:13:8f:43:ca:df:
                    aa:d2:41:f8:64:10:b2:26:02:68:64:3a:6a:64:df:
                    0c:d6:af:6b:d8:a8:ca:8e:2c:1e:d1:d8:bf:7c:70:
                    77:b6:b9:20:c5:f3:5a:f1:5d:d2:8a:df:d5:42:2b:
                    a2:db:66:14:4f:a0:c1:5a:55:f3:22:63:7d:d0:b0:
                    8a:25:ad:23:97:fd:64:55:17:07:8f:15:4b:ef:02:
                    b6:cd:e6:c8:f0:f5:14:e2:02:05:27:a7:c3:0a:7e:
                    7d:21:94:85:ac:6b:de:4a:07:80:f7:1e:4e:85:7a:
                    25:54:31:35:7b:62:23:df:61:57:07:64:03:19:e6:
                    de:72:67:f8:fb:1d:2f:5a:ec:25:ed:45:4c:46:5e:
                    83:6b:81:56:99:65:ed:41:a0:a7:f0:5c:bb:fd:9b:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B9:0B:15:6E:BE:DE:04:31:63:FA:63:B3:BD:87:71:84:63:64:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl

            X509v3 Authority Key Identifier:
                keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.163.0.0-107.163.95.255
                  192.155.160.0/20
                  192.186.0.0/18
                  192.250.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e6:3f:5c:8c:6c:9f:a5:24:55:32:ae:f9:44:66:41:de:e1:
         c5:61:c2:e3:a3:96:72:2d:e4:9d:d3:2d:ab:9a:18:49:f1:4d:
         21:c8:69:59:ae:fc:a7:e5:f9:be:6a:a4:ab:09:d2:24:3b:ef:
         9a:24:ef:6d:d3:6e:aa:57:97:85:65:36:b9:af:4f:14:aa:b7:
         91:a1:46:e8:85:d9:af:4a:ee:03:b2:30:64:c5:22:f6:84:e6:
         f3:ff:93:d4:44:00:46:72:ac:30:a4:3b:12:48:11:15:e7:e4:
         d5:51:f7:cc:dd:53:ed:95:67:cf:4c:63:77:5a:af:00:4a:61:
         6e:85:00:27:e8:f5:6e:6c:00:96:ab:e0:ca:45:47:d7:90:87:
         a4:53:8a:fc:7f:1c:61:ba:b6:04:1d:4c:b1:fc:53:16:f9:cf:
         54:ee:34:8b:f0:e3:3c:d4:5a:bc:ac:b8:03:f7:b8:96:6c:1d:
         c2:bb:de:d7:ab:b3:73:76:61:20:83:8c:db:6b:95:40:75:f5:
         7f:ec:59:9d:a5:d0:27:a4:7a:88:e0:e2:82:f1:91:5c:0a:44:
         39:2e:47:21:2d:26:bd:71:97:8d:19:46:5b:d5:7a:1d:42:13:
         4d:d2:23:ce:b8:2d:a2:35:82:78:6b:1a:51:67:7f:01:01:b6:
         38:f9:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:39:09 2026 by rpki-client