Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/410c42e6-360e-3dfe-96ed-994e44bf3c41.roa
File:                     410c42e6-360e-3dfe-96ed-994e44bf3c41.roa (raw, json)
Hash identifier:          6Mzq4Jfm8gox/5XslLhn4HMv46hbKGybQSYMmra3gwU=
Subject key identifier:   87:72:4C:1E:92:FB:29:35:BD:35:E4:F7:90:D2:AF:BF:EE:49:D1:D5
Certificate issuer:       /CN=dc1e9fec-2dac-415e-bb76-593d78f18126
Certificate serial:       010D0C9F4328584F78E82F6F0ED818DB9E5F5F00
Authority key identifier: 57:24:C3:7B:94:28:AC:60:2C:BB:D7:53:70:2C:A8:C9:F5:73:A3:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/410c42e6-360e-3dfe-96ed-994e44bf3c41.roa
Signing time:             Mon 12 Oct 2026 01:00:13 +0000
ROA not before:           Mon 12 Oct 2026 01:00:13 +0000
ROA not after:            Sun 10 Jan 2027 02:00:13 +0000
asID:                     30065
IP address blocks:        192.188.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/dc1e9fec-2dac-415e-bb76-593d78f18126.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/dc1e9fec-2dac-415e-bb76-593d78f18126.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:78:e8:2f:6f:0e:d8:18:db:9e:5f:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1e9fec-2dac-415e-bb76-593d78f18126
        Validity
            Not Before: Oct 12 01:00:13 2026 GMT
            Not After : Jan 10 02:00:13 2027 GMT
        Subject: CN=54d5a5f3-efcd-446a-b396-3bbd38cc84e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c4:23:c5:15:c8:c3:29:85:c6:cb:9c:f8:24:
                    a6:fd:f2:2b:d1:82:02:9d:6a:e0:65:d0:42:6b:84:
                    71:1b:5e:4f:5a:cf:75:99:f2:c0:a2:78:ac:65:15:
                    01:83:5f:97:9c:6d:94:f2:90:0b:62:e0:78:ec:cd:
                    4a:cb:11:cd:ff:ed:46:37:77:a6:8b:33:9d:95:df:
                    e4:69:88:38:d0:54:74:1f:e8:ff:30:c2:30:47:ba:
                    c6:9a:c1:ed:72:9a:17:9d:ea:fd:28:22:0f:1b:a0:
                    a6:15:a8:ac:56:50:cf:2d:51:ff:d2:e8:34:22:91:
                    62:63:aa:ae:21:a3:8d:8a:cc:44:76:ab:4e:95:c0:
                    a6:d6:47:f2:f7:a7:2d:27:44:c6:76:22:c0:4c:0c:
                    cd:1e:a9:0f:ee:0d:51:05:5a:c0:f1:87:47:d2:97:
                    00:2b:46:94:01:46:ff:dc:21:07:79:26:8e:42:d9:
                    4c:61:4d:55:65:9a:fc:75:eb:e3:20:17:a0:e3:a6:
                    69:0f:fb:cb:c4:48:c8:0e:66:08:98:66:3f:07:0b:
                    3a:78:79:6c:c6:ad:06:b2:04:fd:a9:2a:8b:54:c8:
                    56:0a:1a:91:27:93:10:13:f0:44:6e:c3:9b:26:2d:
                    e2:ee:43:9c:bf:8f:9a:57:59:7b:37:2e:d2:9b:54:
                    24:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:72:4C:1E:92:FB:29:35:BD:35:E4:F7:90:D2:AF:BF:EE:49:D1:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/410c42e6-360e-3dfe-96ed-994e44bf3c41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126/dc1e9fec-2dac-415e-bb76-593d78f18126.crl

            X509v3 Authority Key Identifier:
                keyid:57:24:C3:7B:94:28:AC:60:2C:BB:D7:53:70:2C:A8:C9:F5:73:A3:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc1e9fec-2dac-415e-bb76-593d78f18126.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:75:7d:86:76:7f:06:f4:4d:f9:d1:4f:fe:56:27:db:9a:19:
         38:9b:77:3b:56:ed:0a:72:eb:88:25:1f:b8:54:5e:59:b5:38:
         5f:1f:2c:4d:e3:24:b4:0f:d2:82:c3:e9:c3:eb:60:5e:58:52:
         73:ff:97:62:05:02:b2:a9:2d:a3:6e:8c:b0:46:84:ab:db:e8:
         6a:62:a3:2a:5c:1f:e6:e2:8a:fb:30:6a:74:b8:68:9d:71:bb:
         7f:3c:61:7a:1d:e7:6d:e7:70:39:28:7c:1a:2d:18:58:0d:12:
         9f:57:14:33:94:c9:ac:fb:1b:b6:17:af:e5:83:3e:0b:dc:db:
         e1:fa:6e:c6:74:2c:7a:89:81:c7:58:74:0c:6c:12:6f:f0:e7:
         9e:c2:81:14:5e:7b:fe:d8:48:5e:67:be:8c:77:a5:cb:d8:52:
         32:06:bb:66:06:fd:cc:e7:c0:0a:a3:27:98:e3:dc:a1:6b:f4:
         7c:71:f3:bf:76:95:04:4e:35:45:ce:4c:b4:58:65:d9:28:76:
         77:d1:f8:48:b4:b5:36:d0:fc:2f:86:f9:0d:df:8d:62:45:d4:
         ec:3f:6e:14:3b:bf:e3:d1:83:a3:b5:2c:e1:f8:e5:8a:5e:b4:
         20:9f:c2:5e:41:f5:49:d2:ae:e5:10:89:24:c6:3e:f5:6a:97:
         b8:df:ca:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:53 2026 by rpki-client