Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/922515f7-135b-3413-8cd0-766b8ae7a234.roa
File:                     922515f7-135b-3413-8cd0-766b8ae7a234.roa (raw, json)
Hash identifier:          sm79s0XQvjIiWpyG4eyRPWycTtHs79dBRcldZXFw6Qo=
Subject key identifier:   45:DD:CD:8C:AA:38:14:A1:EF:E1:10:13:98:82:9E:32:2E:1F:4A:8A
Certificate issuer:       /CN=0265af60-e6e1-4613-b159-33bc6053852a
Certificate serial:       010D0C9F4328584EE7BCA6B5FF0964C7CB80B900
Authority key identifier: CE:AD:10:F9:CE:E6:DA:D9:9D:6D:E1:C2:10:84:42:6D:85:F2:15:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/922515f7-135b-3413-8cd0-766b8ae7a234.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     399500
IP address blocks:        192.251.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:a6:b5:ff:09:64:c7:cb:80:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0265af60-e6e1-4613-b159-33bc6053852a
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=fd33cf91-9977-47bd-8754-fd3dcc5acedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1f:72:57:3b:c5:5c:e4:b4:b5:98:f9:4c:8e:
                    21:cb:02:e8:dd:8c:a4:52:93:33:5e:13:4e:64:b9:
                    d5:65:e2:33:85:4e:82:14:70:08:2d:e7:c6:ee:da:
                    23:47:fe:ea:97:b8:45:ad:ca:29:e1:e0:a2:b8:98:
                    0a:92:e3:73:8d:64:c0:56:3d:ed:cd:b6:68:53:60:
                    27:de:57:59:e9:57:07:2d:48:17:62:b2:3a:2d:0f:
                    9b:8f:6a:8d:c8:a2:fc:1a:01:4b:b4:65:3c:3e:19:
                    79:4d:a9:b6:bf:d1:65:64:81:eb:18:78:e3:e5:fb:
                    39:3b:46:a8:f9:4a:36:98:38:2f:a7:12:10:c4:64:
                    3e:82:77:68:eb:41:fa:e3:7f:0f:e5:38:3e:48:ae:
                    6c:65:55:cb:cf:21:4b:cc:7d:e3:a5:77:f3:8b:7f:
                    ec:83:04:c7:3a:63:5f:36:af:09:94:59:a0:60:07:
                    39:8a:28:f1:b6:59:dd:6e:8e:1e:93:ad:a1:39:30:
                    c3:df:26:57:39:9c:37:66:88:eb:c4:79:ff:f2:97:
                    36:ff:6a:9b:05:a3:83:fe:28:03:32:08:fe:95:34:
                    3c:ce:14:17:7b:1d:ba:10:41:72:c5:a6:0e:6d:f4:
                    80:65:c8:fa:e3:93:54:af:46:75:34:b4:13:16:84:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DD:CD:8C:AA:38:14:A1:EF:E1:10:13:98:82:9E:32:2E:1F:4A:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/922515f7-135b-3413-8cd0-766b8ae7a234.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a/0265af60-e6e1-4613-b159-33bc6053852a.crl

            X509v3 Authority Key Identifier:
                keyid:CE:AD:10:F9:CE:E6:DA:D9:9D:6D:E1:C2:10:84:42:6D:85:F2:15:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0265af60-e6e1-4613-b159-33bc6053852a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.251.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b5:e8:99:93:8a:f3:1e:0f:36:49:c2:c6:69:53:22:c7:2b:
         87:b9:9d:e4:8d:46:c6:f5:7a:f3:ca:af:4b:22:aa:a9:65:14:
         c8:6f:66:6a:49:1e:77:38:9a:c1:e0:fe:cb:b9:25:25:f4:aa:
         c9:85:09:9d:dd:95:f6:e1:cf:a0:cf:83:93:44:c0:f5:05:08:
         38:35:19:a1:fe:c8:db:d7:33:fb:ba:96:98:9f:94:a8:50:4a:
         09:73:46:94:98:bc:63:92:da:ad:ca:50:29:6c:33:a9:17:37:
         ef:1b:82:56:5b:3d:32:1c:ae:be:d5:e4:64:21:72:b2:61:5a:
         c4:d9:f7:10:6a:e0:81:85:f6:eb:6b:9a:9a:8b:95:53:16:5a:
         83:51:e6:95:44:5d:80:31:73:8e:0c:6b:c9:7f:59:f0:72:66:
         35:92:31:f5:9c:5d:2c:ac:46:47:2a:d2:a0:1d:a7:82:3c:a2:
         4b:4b:0b:14:35:a9:ef:65:8d:0d:ce:3a:11:5c:97:0f:27:82:
         e4:cc:0e:2f:dc:50:c0:22:b4:6e:63:3a:bf:1c:88:e5:a2:ad:
         63:99:74:af:93:ce:64:72:34:7f:aa:df:e5:fd:c4:4a:43:4b:
         cb:4a:62:ee:95:2f:c9:45:c7:34:54:b5:4c:08:6c:9f:7d:ec:
         bf:08:be:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:11:53 2026 by rpki-client