Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/daca9173-62a5-39fc-8a6c-8f5c59250b59.roa
File:                     daca9173-62a5-39fc-8a6c-8f5c59250b59.roa (raw, json)
Hash identifier:          jbDtElvQEQMj7+wbmTaUt6kGvLJOZglYbDrG1hy3+aU=
Subject key identifier:   51:4A:7F:0A:3B:EF:23:81:67:0A:C4:48:0F:32:36:AB:D0:27:A3:AD
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584D0C523F0592964A082033A880
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/daca9173-62a5-39fc-8a6c-8f5c59250b59.roa
Signing time:             Tue 03 Mar 2026 17:56:59 +0000
ROA not before:           Tue 03 Mar 2026 17:56:59 +0000
ROA not after:            Mon 01 Jun 2026 16:56:59 +0000
asID:                     26337
IP address blocks:        192.163.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:52:3f:05:92:96:4a:08:20:33:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Mar  3 17:56:59 2026 GMT
            Not After : Jun  1 16:56:59 2026 GMT
        Subject: CN=078cb360-a872-4f70-a20c-a019dbb6e016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:45:b5:1d:52:33:2d:96:31:a8:e7:06:d2:25:
                    8b:f8:66:ae:00:08:7d:2c:93:c9:10:6c:c7:53:6c:
                    c7:96:12:35:02:fb:ac:36:d5:be:d0:21:ba:92:75:
                    ca:95:f3:61:17:7d:22:fa:a9:d2:41:48:e7:e7:87:
                    c7:d0:ec:64:03:93:f0:c1:c4:44:69:89:0a:c4:88:
                    36:5b:18:e3:87:dc:e0:a0:d3:53:57:a9:da:84:94:
                    a9:40:cd:b4:d3:70:11:d4:fc:8f:2c:dc:2f:ce:d5:
                    96:10:98:8b:d1:c6:46:08:76:be:67:ae:5c:c2:5c:
                    b1:c2:b6:10:ac:e0:a0:0d:34:e7:13:a0:b3:a4:a7:
                    3c:bf:4f:8f:a3:03:f2:5e:a5:00:c4:54:4a:ea:85:
                    0b:8d:97:c6:ab:9b:23:ba:fa:26:47:5f:1c:53:4b:
                    06:cb:05:13:b8:59:8a:ab:39:97:21:9c:77:cd:e9:
                    6f:4f:04:8f:50:be:66:4d:35:30:41:1f:83:63:5a:
                    60:28:62:cd:fd:73:8b:7b:f5:5e:64:1f:98:44:03:
                    26:f5:bb:b8:18:2e:cd:f1:5d:37:25:7c:48:2d:32:
                    f8:2c:f1:b2:c5:da:1a:5e:ac:4a:e7:6a:c9:64:f1:
                    d6:9e:f1:c2:c8:1a:56:18:f8:49:35:35:03:4a:cf:
                    94:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4A:7F:0A:3B:EF:23:81:67:0A:C4:48:0F:32:36:AB:D0:27:A3:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/daca9173-62a5-39fc-8a6c-8f5c59250b59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:98:2e:1a:e3:14:fc:65:a8:0a:6b:a5:26:4b:b2:bb:ee:f2:
         f8:18:17:fa:03:88:c4:14:55:11:44:5a:89:4d:db:8e:21:a8:
         a0:26:10:11:68:8e:f8:e7:ee:5e:8e:0a:a6:20:dd:bf:38:79:
         92:d4:86:58:c2:02:9b:9f:00:82:f5:55:51:02:a3:dd:72:c1:
         7a:fb:99:0c:83:65:5d:75:c8:d9:a9:0f:52:22:bb:4f:a5:18:
         ff:e6:db:18:5c:23:3b:14:8f:72:e2:80:a5:c5:e4:3c:c7:cd:
         1a:4a:0e:e2:ef:e5:b7:7e:8d:d7:ca:98:a9:46:ae:40:b2:89:
         38:9a:d9:ec:ee:db:8d:7a:2f:2e:61:eb:95:8c:e3:bd:ab:96:
         7b:3a:9f:98:bd:e3:03:61:1a:c6:8a:63:03:f6:d0:23:39:6b:
         af:22:a0:90:e3:bc:a6:e3:bd:11:4f:ed:23:88:42:e8:db:63:
         89:c6:be:42:1c:6a:d3:8d:73:6b:08:45:81:ca:78:1c:07:51:
         78:ec:bd:51:36:04:6c:f5:81:a9:a7:9d:c3:2a:1a:95:98:09:
         a8:41:6f:17:11:0c:3c:35:b6:59:3b:6d:2a:5c:b4:05:b1:2b:
         79:51:72:e5:1f:81:da:39:89:ef:d9:8f:a8:78:d8:5a:d7:a7:
         61:11:76:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:12:47 2026 by rpki-client