Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c317f910-40d4-354e-b4e8-dc0eae01d078.roa
File:                     c317f910-40d4-354e-b4e8-dc0eae01d078.roa (raw, json)
Hash identifier:          aIacrfT5yDNUQfZH1tcOK3GkVDfP9dX/Cqk+p2BDPwM=
Subject key identifier:   D1:FD:36:77:1E:1A:AD:89:1F:95:02:C5:D1:4B:7F:35:31:CD:F7:4E
Certificate issuer:       /CN=c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e
Certificate serial:       010D0C9F4328584EE38CA037440D3B0D5A072EC0
Authority key identifier: 30:5F:1F:E0:A0:C8:CA:60:81:4B:E6:A7:E0:64:B0:99:9C:74:E4:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c317f910-40d4-354e-b4e8-dc0eae01d078.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     401378
IP address blocks:        192.132.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a0:37:44:0d:3b:0d:5a:07:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=4cc43d83-a6da-44df-b2a6-e9b64d0eb6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:11:e2:13:ed:58:d9:a5:70:50:02:b2:22:88:
                    4c:eb:c1:2b:f3:49:76:b3:33:3e:cf:01:18:25:cb:
                    25:50:de:10:9b:79:15:a6:a7:e6:76:71:8e:0f:ed:
                    c9:97:ce:fe:f4:8d:88:a5:f3:42:88:22:80:55:2c:
                    9e:7c:32:07:08:dc:aa:2b:4c:8a:b2:80:e4:83:a8:
                    57:a8:e7:5e:d7:d4:f4:ea:48:bc:4b:c3:50:61:54:
                    53:c2:f8:59:95:44:29:fb:4c:7c:7b:5e:b8:12:b3:
                    2b:04:96:ef:29:bc:7c:90:f0:00:82:2e:1d:61:8c:
                    f8:58:7a:a1:81:83:16:26:c3:7c:37:b4:eb:2b:b9:
                    de:5b:ee:d4:28:f3:05:df:f4:9b:52:e4:9a:75:45:
                    52:2b:2f:4e:83:9d:bf:b2:66:30:2c:a3:6b:99:ae:
                    90:47:03:25:69:f9:aa:82:71:09:93:28:ff:12:38:
                    37:a4:6e:72:3f:6c:fe:7e:e1:43:ef:ba:16:4b:85:
                    f9:56:e4:10:77:3a:a4:99:01:45:17:1b:82:aa:22:
                    30:7c:e7:9f:87:f9:cb:f7:a6:69:e4:07:93:45:07:
                    0c:be:6f:77:05:c0:e1:17:b3:a8:e4:4d:97:48:72:
                    18:73:79:0e:b8:82:da:72:5b:ea:e6:53:fd:ff:00:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FD:36:77:1E:1A:AD:89:1F:95:02:C5:D1:4B:7F:35:31:CD:F7:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c317f910-40d4-354e-b4e8-dc0eae01d078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.crl

            X509v3 Authority Key Identifier:
                keyid:30:5F:1F:E0:A0:C8:CA:60:81:4B:E6:A7:E0:64:B0:99:9C:74:E4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c0a59cd7-6f4a-41aa-9d0e-8e9103b77b1e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ad:85:05:f9:4d:4f:e8:0b:d2:43:39:f4:d9:b4:c7:48:7f:
         40:b1:aa:d0:54:c7:ee:be:a6:15:52:9a:48:3f:36:eb:84:54:
         5a:68:d4:45:f8:c6:38:9b:ef:c1:40:3b:b8:11:79:b7:40:6d:
         94:cd:5d:51:41:84:71:eb:3d:a7:32:a8:d1:14:35:00:38:30:
         f1:6e:34:27:a2:fe:79:e5:d6:3c:35:74:f4:59:95:62:eb:45:
         f8:f1:20:28:83:6c:d1:d1:ff:41:e7:c2:4a:46:a8:3f:48:18:
         2e:51:4b:da:97:ee:46:f1:ea:8b:4e:e5:e4:d9:2d:c0:ec:29:
         4e:73:4d:91:0e:a2:c7:b2:85:5e:83:85:e6:c5:16:4c:83:82:
         e2:2e:84:9c:5d:74:e6:0c:9c:d3:d4:3a:64:fc:cd:c9:54:27:
         b2:52:a5:63:08:e5:c4:3d:2c:28:36:d9:83:5c:37:c8:57:16:
         77:05:13:9d:e5:18:87:2f:60:21:d3:79:93:89:35:4a:b5:ee:
         3d:f9:48:18:89:63:19:b1:31:b2:95:4c:42:b4:8d:b4:88:34:
         ae:a5:12:ff:1d:ad:00:01:68:b0:cc:26:1a:29:e4:cc:60:b4:
         e3:18:37:8b:d1:71:7d:aa:5e:72:f6:24:1f:52:be:ba:4f:0a:
         4b:38:d6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:36 2026 by rpki-client