Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc311ad4-3fc1-354b-9373-7f16e8546350.roa
File:                     cc311ad4-3fc1-354b-9373-7f16e8546350.roa (raw, json)
Hash identifier:          jaVIrtDupZTpAvWTYpWDOtipq/pIoRCF2i4JQN9gI90=
Subject key identifier:   BF:91:A9:BF:B4:74:94:03:3D:7D:B1:8C:A4:AC:83:22:11:E3:69:E5
Certificate issuer:       /CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
Certificate serial:       010D0C9F4328584F655D70C77B8D623DD3703F40
Authority key identifier: 50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc311ad4-3fc1-354b-9373-7f16e8546350.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     393960
IP address blocks:        172.93.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:70:c7:7b:8d:62:3d:d3:70:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e82a5aee-c156-43a7-852d-8cfc2aca36e6
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=11942978-f2f9-479f-b414-fa945c9e5ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:09:b3:88:34:b2:d7:bd:bb:7f:8f:95:a4:
                    1b:ac:23:84:39:fb:33:17:10:37:91:eb:a5:9b:3e:
                    5a:84:f3:dc:19:32:7f:e8:c3:c4:4d:59:92:23:18:
                    a2:dc:b8:02:3b:1d:2b:b7:fb:ba:93:8c:c5:46:04:
                    3d:b4:0c:e5:28:3b:a9:d2:9a:97:ba:8e:12:d4:dd:
                    0a:bd:46:50:0a:4a:58:98:7e:be:95:4d:05:2b:9f:
                    d1:59:bb:4a:b5:e4:03:e3:61:df:b8:ef:31:a0:b5:
                    6e:a7:03:f0:d0:d9:7e:c6:4b:5d:51:37:c8:14:9a:
                    9f:ab:bd:70:34:0d:60:55:e2:47:04:96:87:b7:9f:
                    d0:3d:7d:a0:08:93:c2:7a:7f:54:70:a7:2d:8b:5e:
                    24:a8:18:f2:42:01:2a:63:9f:bb:52:ba:73:d3:7f:
                    18:1c:13:a0:b2:51:31:cc:ad:a5:f1:7e:8c:48:95:
                    ea:f3:0e:4a:f9:c0:d4:45:69:e4:54:25:03:53:9b:
                    c8:51:bd:56:e1:79:c3:f4:1e:a0:46:5a:ab:0a:dd:
                    27:75:2f:03:d4:ef:38:b4:97:fc:d1:6e:ed:16:5b:
                    27:0e:df:aa:aa:06:62:c2:d6:53:f4:57:f2:cd:57:
                    0d:d2:c0:a6:51:d2:d3:f0:69:b5:12:f1:63:46:00:
                    f1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:91:A9:BF:B4:74:94:03:3D:7D:B1:8C:A4:AC:83:22:11:E3:69:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/cc311ad4-3fc1-354b-9373-7f16e8546350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6/e82a5aee-c156-43a7-852d-8cfc2aca36e6.crl

            X509v3 Authority Key Identifier:
                keyid:50:57:40:C7:15:B2:FB:8D:07:43:A6:DC:07:7A:A0:77:BE:EB:BF:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e82a5aee-c156-43a7-852d-8cfc2aca36e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.93.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:84:d6:93:eb:2f:3d:7a:bb:ef:aa:2d:12:2d:99:81:e1:64:
         f7:cc:b0:81:f9:bf:a3:91:74:d8:94:39:c7:c2:73:b3:04:ec:
         7e:18:96:8e:8f:33:4c:80:0e:1f:a9:72:bc:1b:a3:dd:32:f1:
         a9:f2:cc:57:39:9d:7c:fa:73:65:0f:15:bc:23:9d:9b:53:78:
         f3:5c:a1:ff:fe:bf:f8:02:aa:8c:f0:20:a8:b6:47:f8:7f:f2:
         70:0a:7e:3d:68:f4:0e:d6:9a:a4:16:ce:25:83:12:3e:c0:cf:
         27:b7:ff:79:32:fa:3b:5e:79:f3:d1:f7:94:12:4a:55:66:fd:
         d7:af:99:86:30:62:3f:73:ec:3a:24:24:4b:bd:f4:87:01:b0:
         f9:2a:5e:29:b9:28:be:6d:61:de:5d:66:d7:d4:c1:f7:a8:ce:
         71:64:29:0e:06:f0:08:04:80:72:a6:ba:7d:1b:bd:09:26:8d:
         79:66:69:5f:f9:ac:e9:66:d2:e3:88:9d:f2:d2:f6:8a:08:77:
         a3:ed:1d:e5:b6:32:2d:5a:32:5d:0f:e2:11:8b:f2:9b:ad:ea:
         2a:7e:5c:fc:3f:79:34:9b:90:f1:79:69:5c:5c:4b:33:bc:39:
         7e:5e:33:25:5b:d9:48:aa:95:cf:cb:6f:2e:bc:0c:a1:69:97:
         40:68:d8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:09:18 2026 by rpki-client