Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e71b9091-c42b-3d92-917c-921053cce2c2.roa
File:                     e71b9091-c42b-3d92-917c-921053cce2c2.roa (raw, json)
Hash identifier:          i2BtJZSf9CCZejERdUUqlfp0+0ERpWaFadox006AA1g=
Subject key identifier:   15:80:F0:57:16:90:16:73:33:68:B5:4A:00:90:18:93:74:C9:48:FC
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584F4973F0B208961C7FE2526E80
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e71b9091-c42b-3d92-917c-921053cce2c2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     46606
IP address blocks:        192.163.192.0/18 maxlen: 24
                          198.1.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:f0:b2:08:96:1c:7f:e2:52:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3af2c2c8-3acf-441e-8609-883f11ce879f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:02:29:17:25:64:e0:54:f4:48:e3:b7:fa:0a:
                    e0:d4:08:08:da:b2:c8:a2:18:94:94:13:2b:99:28:
                    48:43:2f:4b:a0:8d:60:c1:49:59:c5:3f:3b:0c:c5:
                    73:da:5d:db:7c:24:ab:bd:c6:01:20:e9:21:97:3a:
                    6e:6f:d3:31:54:44:4d:1e:e4:31:09:e9:a5:27:4f:
                    84:ab:c4:34:b9:80:d1:70:c5:91:a3:eb:12:53:18:
                    2c:3f:d2:82:fd:42:39:ca:7c:7f:46:a7:87:00:17:
                    93:34:24:84:a8:b0:cf:12:52:05:5a:8d:14:82:f7:
                    d4:6d:9e:d1:19:27:eb:1c:e5:8a:34:c7:2c:b7:c9:
                    d1:52:ba:70:81:f2:35:2d:9e:4e:e1:e2:a2:c2:9a:
                    bc:f2:4e:a2:97:3d:eb:0a:a5:76:95:a6:f3:cf:65:
                    37:bd:1e:25:86:53:1d:ad:0c:ed:d6:24:03:9b:df:
                    49:21:76:f4:b0:4b:4d:a3:14:78:b0:d7:96:91:04:
                    d4:14:40:03:0b:76:60:f5:e4:d5:3e:57:52:7e:f7:
                    83:36:2b:37:23:29:57:2a:f0:a5:4d:26:ad:65:ed:
                    27:1d:f6:84:04:0b:5b:b5:40:0a:82:a6:b2:36:84:
                    01:8a:37:2c:b8:45:33:a8:16:bf:26:93:7d:92:57:
                    1d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:80:F0:57:16:90:16:73:33:68:B5:4A:00:90:18:93:74:C9:48:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/e71b9091-c42b-3d92-917c-921053cce2c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.163.192.0/18
                  198.1.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:fd:c0:20:bf:b0:1a:33:49:26:b1:ed:56:72:3e:ff:b5:79:
         78:8a:00:1a:e2:70:4f:1c:fe:fa:ff:51:57:d2:b7:e2:37:20:
         20:af:b2:4c:cd:8e:cb:69:fe:a2:37:09:9a:2b:ce:54:dd:07:
         53:ee:d9:ae:d5:04:4e:e2:c5:c7:c2:46:3c:ea:58:1a:35:38:
         ce:fb:49:09:3d:5f:98:ea:a4:82:cb:8d:6c:fa:81:ac:c7:f7:
         b3:3a:75:b4:0d:03:a6:a0:2c:56:b2:3b:8e:70:78:b1:44:f3:
         ef:cf:ed:07:9c:d6:00:8c:18:8d:34:cc:39:e1:f7:e2:3e:4d:
         42:ce:40:34:76:22:b8:15:17:f5:b7:ea:69:97:2d:15:66:8d:
         2f:f9:0c:36:d3:8a:7e:1b:53:7c:23:9f:43:62:ad:02:4b:61:
         aa:87:e8:74:1f:39:85:73:b8:b3:27:e1:a4:27:f0:4e:75:42:
         55:93:34:bc:81:32:ab:64:2b:3b:32:bd:1d:6e:b8:08:70:0f:
         97:eb:ff:65:35:33:6f:98:da:cb:b8:36:a9:ad:09:30:cc:94:
         a6:69:6d:e4:36:86:42:26:07:83:9c:8f:c8:4f:52:27:5f:1d:
         ed:c5:ce:6e:3a:4e:45:80:36:ad:75:e7:fa:15:a6:94:f4:55:
         89:e6:5f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:54:11 2026 by rpki-client