Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa
File:                     f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa (raw, json)
Hash identifier:          B6KiveNICisi46H3Fw9MhvEguWlXtxQUsZLP4gEQ0Aw=
Subject key identifier:   FB:B4:4A:A7:4D:F6:F8:B5:28:A9:94:31:DC:CF:E4:53:15:6A:DF:10
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F4328584EA79A4EC56EABE932D7F45180
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     51964
IP address blocks:        141.188.96.0/21 maxlen: 24
                          192.25.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:4e:c5:6e:ab:e9:32:d7:f4:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d4fa9484-112f-455a-9daa-a4d2c20fdee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:07:80:a7:f5:bb:7d:e0:5e:54:92:35:57:
                    0f:8d:0a:f9:c8:b0:d1:29:d5:7b:1c:8e:2a:92:a0:
                    aa:f7:ae:64:3a:ff:e3:c1:a7:4a:c2:f2:fb:84:c5:
                    ca:9e:b9:fc:f5:3d:21:3d:f9:5a:ec:04:66:ad:cf:
                    f6:05:3b:57:da:63:8a:67:e3:84:af:d7:1f:22:fc:
                    6f:b8:8a:24:7c:39:03:e8:48:d4:18:69:12:e0:60:
                    23:3a:d9:ad:ac:29:36:49:8e:72:1f:37:bc:a8:a0:
                    23:16:bb:90:15:95:9c:ec:80:0d:eb:c1:df:83:34:
                    c0:d7:24:78:b4:71:45:dc:79:2e:07:43:54:04:d0:
                    2c:78:11:37:40:42:f3:29:ea:98:08:2d:d1:da:17:
                    d4:d5:49:aa:8f:78:a5:f2:4d:35:ef:dc:10:d8:5e:
                    62:e9:5c:3f:f8:05:ff:c8:5f:05:e6:f3:55:7d:2d:
                    84:32:c3:3d:be:b4:5c:a6:07:49:46:24:7f:a0:07:
                    30:10:8d:64:fa:d5:a3:1d:ac:c3:0f:24:69:82:de:
                    56:37:26:bf:16:78:69:ae:26:74:65:11:62:cb:01:
                    c1:40:c7:07:32:de:a8:80:24:d7:48:64:99:b3:67:
                    04:9c:fe:34:88:35:a6:64:2d:f7:07:18:04:cc:28:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B4:4A:A7:4D:F6:F8:B5:28:A9:94:31:DC:CF:E4:53:15:6A:DF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/f7f01ce1-4b62-3bbd-b273-2a48136d73c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.188.96.0/21
                  192.25.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ce:04:f8:c3:c5:70:71:06:38:76:f0:16:51:2c:b5:64:62:
         ee:86:90:9d:b6:5e:86:ba:27:fe:72:c1:d7:cb:59:38:8c:76:
         c6:da:68:da:f6:9c:7c:3e:20:98:71:39:c8:d6:85:ea:2a:de:
         ec:30:ae:79:e8:6a:b3:b2:46:51:75:e9:6b:db:b4:97:83:84:
         44:ae:5f:0f:d1:5d:db:c1:f6:25:7a:24:a0:5e:6b:75:27:d2:
         8f:12:14:1c:1d:00:b9:a2:49:00:31:f7:ad:06:3b:71:70:44:
         14:19:b6:45:6c:a0:a3:8c:af:ea:f4:70:91:d9:2b:ef:96:1c:
         a4:2a:45:f9:f1:34:ba:13:17:40:56:42:4d:92:5d:d3:ca:93:
         96:07:72:29:e9:fd:7a:06:bb:ca:c5:cb:ea:1c:d1:64:52:d0:
         74:9a:7f:a1:27:0c:cf:f1:a0:07:32:2b:00:c3:13:8f:b8:09:
         83:65:2d:54:52:19:74:84:48:c4:57:a0:b9:95:e6:fc:95:06:
         bc:b3:ac:98:35:c0:fd:0a:31:4b:38:6b:a7:ed:42:57:50:54:
         32:cd:c8:82:1d:12:c6:4d:a1:22:2c:08:d2:d6:32:8d:e1:f2:
         db:fc:9f:da:68:cd:d0:45:96:74:98:cd:8f:37:11:dc:4f:74:
         e7:61:62:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:42:26 2026 by rpki-client