Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/28e0c103-7eba-397b-b96f-5ab3c885fd44.roa
File:                     28e0c103-7eba-397b-b96f-5ab3c885fd44.roa (raw, json)
Hash identifier:          hvoZtDGPxYkU7cBr+gM1J/G/RyDOrBinhgF3wg8l4bk=
Subject key identifier:   64:A0:49:6F:44:00:28:01:F4:9E:86:D0:79:D8:1C:08:3C:80:03:29
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584F497633DC4F2FF16C1A0B3A00
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/28e0c103-7eba-397b-b96f-5ab3c885fd44.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     209
IP address blocks:        161.195.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:33:dc:4f:2f:f1:6c:1a:0b:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=20c18400-d4db-4541-a9a0-fa5caba3402a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b1:94:4f:da:ba:72:15:3c:30:8d:ce:3c:de:
                    d2:90:20:82:46:03:94:2d:44:c8:46:4f:2c:d1:a6:
                    cf:4f:22:40:d0:32:6d:2d:66:d2:b2:56:40:f6:6b:
                    52:00:ea:3b:a3:3c:69:98:a4:f2:a8:2f:4a:67:57:
                    7f:00:98:ba:39:83:ef:dd:85:51:eb:e6:b9:00:11:
                    1a:6b:75:78:0c:6b:ee:a6:51:e7:97:0a:96:94:92:
                    f6:ad:cd:7d:a3:6e:49:c8:8e:07:93:51:76:ee:fa:
                    70:83:cf:ae:e6:b7:3f:a3:b1:e5:61:43:31:df:4e:
                    ca:78:30:8f:5a:2f:2e:e4:4d:51:0d:fa:a9:ea:de:
                    f3:16:b0:d3:91:e7:32:b6:f6:ed:fe:f4:5b:20:72:
                    7a:68:94:fc:ca:25:d9:94:55:79:59:6b:4d:a2:d7:
                    cf:41:83:93:8b:66:21:5c:c2:57:74:72:9c:f8:95:
                    c0:52:50:ac:9e:35:f4:6c:0b:46:fa:61:c3:3e:d6:
                    79:35:da:51:65:1e:2e:f2:0f:c7:03:f6:c7:ff:b3:
                    45:e7:25:7b:db:85:17:1d:92:dd:14:47:f5:23:3d:
                    5c:72:61:71:75:6c:a0:b3:49:60:fe:27:5b:57:40:
                    76:be:a1:f5:e6:3b:bb:fd:4f:3c:ac:cc:31:0c:56:
                    4d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A0:49:6F:44:00:28:01:F4:9E:86:D0:79:D8:1C:08:3C:80:03:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/28e0c103-7eba-397b-b96f-5ab3c885fd44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:94:f7:14:93:0b:8a:5b:bd:fe:f0:29:4f:1c:fe:b7:af:1c:
         ae:f0:2f:a4:5a:bd:54:45:e4:d5:63:5f:48:21:bc:93:31:72:
         b0:bb:d9:f7:11:4e:e0:f3:6f:ab:e0:ef:2b:ae:b5:b7:c4:e3:
         5f:f2:f6:3c:c9:58:08:56:c7:63:5f:3a:a5:e9:42:58:d5:0d:
         7d:25:fb:d8:fb:88:75:2a:cf:bb:cb:6d:36:59:3e:04:3b:14:
         cf:90:e3:02:74:72:f9:b1:4c:68:34:29:ff:ef:5f:2a:3b:da:
         76:39:16:f2:af:e1:3b:27:2e:03:1b:28:a2:3f:f1:2d:4d:7c:
         a7:4f:e5:25:eb:ef:fe:3c:90:f2:c2:c3:c4:a0:fa:f1:a7:17:
         a1:52:89:1e:01:35:e3:cb:df:7b:bd:52:ca:11:50:12:a3:6d:
         f8:99:88:9a:23:23:2f:1e:89:a2:f8:dc:50:dc:c0:f8:1b:15:
         8e:a7:30:ab:05:1d:42:fe:89:f5:19:c5:b8:27:4a:04:c5:95:
         a0:8d:33:c2:dc:15:57:29:56:e6:1c:a0:50:6c:99:01:7a:73:
         e8:67:70:f1:a0:df:f0:72:76:7d:82:2e:fd:aa:8a:e2:e7:b4:
         70:d2:75:fa:54:78:3b:c9:23:27:88:44:a5:ed:52:f6:c6:ca:
         21:05:be:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:20:05 2026 by rpki-client