Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa
File:                     c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa (raw, json)
Hash identifier:          CjV9avfingWIOOLV2llCCnMjeOkpFDNQUIfvl1IiY9c=
Subject key identifier:   74:41:3C:A5:38:4D:E4:03:FC:E2:70:5B:62:FA:A4:FD:96:27:96:01
Certificate issuer:       /CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc
Certificate serial:       010D0C9F4328584F8F3DEE6409B21C3E50502E80
Authority key identifier: 8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     65003
IP address blocks:        192.75.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:ee:64:09:b2:1c:3e:50:50:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=45707d80-51ee-4d8a-8416-6f34dd88e7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c7:01:b7:47:32:56:d8:91:52:df:49:cb:6f:
                    ae:a3:06:c0:67:ad:1d:28:a7:53:73:4d:20:b9:9c:
                    6b:79:3e:72:0a:90:ef:fc:3d:bf:65:a3:60:32:e5:
                    0b:e5:a1:ca:22:9d:69:b9:c7:90:fc:3e:14:6d:bf:
                    31:99:ac:b3:cf:65:d4:04:4c:5a:7a:70:db:3b:f1:
                    fa:08:e8:3a:7d:08:ce:ef:09:e5:64:0e:4a:5e:3f:
                    77:68:cc:0f:f7:a9:98:01:18:d5:88:dc:39:63:d4:
                    64:af:61:51:f3:3b:87:9c:f7:ce:57:9b:7a:44:9d:
                    00:5f:b5:6d:6c:14:c1:96:12:2b:3e:8b:4a:b7:ea:
                    58:76:1d:a3:6e:8f:59:a2:6d:8b:53:33:c9:c3:54:
                    9d:0a:e8:44:e2:c8:61:9a:6f:79:a6:1e:ab:94:be:
                    1a:56:14:89:8b:c2:92:68:bf:09:33:1a:a0:93:b9:
                    4d:bf:f6:04:ee:29:48:42:1c:78:d0:b5:09:84:68:
                    c0:2d:7d:14:be:f6:e2:95:d2:1d:37:f6:d9:f8:72:
                    d2:b2:65:e8:3f:77:04:2c:93:ce:c5:25:09:39:63:
                    1e:9f:a6:5a:03:b5:e6:03:fe:65:0b:df:05:1e:22:
                    31:69:a8:9f:12:4d:0d:01:e7:7a:20:ab:42:4d:af:
                    65:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:41:3C:A5:38:4D:E4:03:FC:E2:70:5B:62:FA:A4:FD:96:27:96:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.crl

            X509v3 Authority Key Identifier:
                keyid:8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:ef:06:d2:01:5f:03:8d:cb:62:c6:dc:f7:b5:8b:c2:f3:24:
         9a:29:e1:fb:07:77:41:3b:82:6a:de:0f:c7:36:d6:f9:1e:e9:
         d9:43:6c:9c:03:6f:43:08:56:11:45:e8:0b:8f:bd:85:1f:ae:
         86:09:ce:a8:dd:74:ec:7b:b5:01:3c:56:37:ed:76:42:91:e2:
         dc:75:80:65:39:32:4a:bb:bc:22:cf:97:ef:b0:b6:79:29:74:
         f1:7d:36:42:9e:60:c7:f6:5c:94:2e:a2:44:7f:b6:24:2c:59:
         6d:8f:3f:8a:e0:9b:99:d5:61:18:ac:bf:6f:d1:73:a5:25:dc:
         32:00:07:65:22:b3:5b:4e:7e:ba:03:32:20:23:11:f2:cd:1a:
         66:72:39:8b:29:1b:07:a0:f8:40:f2:0b:ae:78:f8:83:33:09:
         98:dd:80:a7:12:b7:78:70:a5:3c:a6:d7:93:a3:ed:19:34:63:
         c0:4b:f7:25:fa:c9:3f:ad:87:39:4f:bd:87:2f:da:22:42:8a:
         02:33:a6:45:a1:c2:de:de:40:2f:1e:68:0c:ee:a8:e8:3f:b3:
         04:4b:a7:39:13:30:c6:24:d1:b7:60:e9:b7:6d:ae:0f:fe:ec:
         6f:fc:dd:6f:a5:10:ac:d5:81:fd:6c:23:38:eb:9d:31:e8:d8:
         1c:65:11:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 07:27:50 2026 by rpki-client