Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/d14908ec-d831-3c35-9615-8f4b0cf619dc.roa
File:                     d14908ec-d831-3c35-9615-8f4b0cf619dc.roa (raw, json)
Hash identifier:          pMpJvsUROXMP3/tw+mmXluJU0AUowYrYEhmjnHuxwPM=
Subject key identifier:   2A:90:B1:6A:7B:11:DD:D7:BC:BE:78:E7:D2:D0:3D:F1:F3:F4:BB:6F
Certificate issuer:       /CN=6e8499d4-7126-459b-b6cc-4ca2f542f30c
Certificate serial:       010D0C9F4328584E9BE51B213F4FC6E8F00AD740
Authority key identifier: 69:E1:F8:2C:A6:89:01:F7:41:DA:56:B7:E7:A0:3F:23:60:F0:DA:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/d14908ec-d831-3c35-9615-8f4b0cf619dc.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     3635
IP address blocks:        192.149.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/6e8499d4-7126-459b-b6cc-4ca2f542f30c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/6e8499d4-7126-459b-b6cc-4ca2f542f30c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:1b:21:3f:4f:c6:e8:f0:0a:d7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e8499d4-7126-459b-b6cc-4ca2f542f30c
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=b6a0f564-6d8d-4e5d-ba43-63a67521fcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:83:f1:64:15:ce:77:73:0b:39:63:f1:47:ee:
                    e0:93:bb:5a:db:ae:d4:40:a7:01:6a:da:fa:9e:f1:
                    42:7e:2c:4d:cf:17:6e:d0:8b:b8:df:01:c0:a1:fc:
                    4f:81:43:c9:bd:33:85:1f:f8:12:64:eb:82:ae:03:
                    8a:d1:7a:62:f5:00:7d:86:dc:ed:00:a3:ec:b4:e9:
                    2a:8a:fc:c3:f8:af:42:0e:b1:5e:cf:74:bf:42:b2:
                    27:a7:e9:a0:bc:db:7c:00:41:01:ef:3b:f2:37:0e:
                    27:f9:78:ff:2b:73:a1:70:c2:23:98:73:37:d3:f9:
                    67:c0:fd:e0:0d:db:36:44:98:65:75:1b:ce:ae:45:
                    2c:e4:27:5a:be:9d:38:03:50:09:89:d6:b6:41:3b:
                    14:0a:2e:97:a8:3b:46:d6:07:4b:8c:f5:e7:23:55:
                    27:53:b7:63:c2:98:85:b2:97:7d:f6:59:d9:a8:cb:
                    f6:cc:a0:6b:ff:b6:6e:2f:2f:6e:c2:6d:d5:d6:32:
                    bd:a7:44:46:bb:f0:c1:6e:2b:76:d3:2c:ba:be:2b:
                    4c:02:1f:00:b1:da:14:84:74:cc:ed:ed:09:f4:49:
                    7d:fa:cc:f8:d4:7a:71:21:07:e2:d3:48:cc:79:d2:
                    35:8a:6e:78:5d:61:72:e1:16:65:a1:00:da:4e:f2:
                    68:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:90:B1:6A:7B:11:DD:D7:BC:BE:78:E7:D2:D0:3D:F1:F3:F4:BB:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/d14908ec-d831-3c35-9615-8f4b0cf619dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c/6e8499d4-7126-459b-b6cc-4ca2f542f30c.crl

            X509v3 Authority Key Identifier:
                keyid:69:E1:F8:2C:A6:89:01:F7:41:DA:56:B7:E7:A0:3F:23:60:F0:DA:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6e8499d4-7126-459b-b6cc-4ca2f542f30c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.149.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:fe:6f:15:7c:bc:28:00:c1:2d:a8:fb:3c:67:76:32:f7:44:
         99:51:aa:93:0d:ed:a3:4c:c6:bf:86:dc:c4:1e:f5:64:8b:ea:
         63:ee:3e:b5:be:45:f0:02:09:a7:42:ac:87:76:36:b1:66:61:
         87:56:b8:3f:b4:ee:d1:07:14:c0:ff:41:47:5f:ed:a5:c7:02:
         24:85:8d:12:57:e2:38:92:4c:19:fb:5d:45:b6:19:30:57:df:
         c4:d6:b7:16:6c:eb:67:7f:22:d7:01:e7:2c:12:ed:04:09:97:
         3d:63:1f:da:e4:65:5a:b1:45:6f:ae:c4:8a:3f:f1:f1:ef:9c:
         21:f5:e6:76:17:b5:53:27:e5:9e:d4:9e:55:8d:27:50:c9:e7:
         fe:7c:ef:87:77:34:58:13:16:b7:62:7c:d3:49:77:d2:fa:39:
         cc:57:8b:9a:91:35:d8:a1:17:a0:ed:fc:ed:63:3f:a5:18:7f:
         29:00:b4:da:32:16:01:2d:b8:e8:3d:bd:5c:97:45:bb:6e:b0:
         6e:b0:0f:41:59:7b:d3:a1:b6:29:38:71:a4:33:02:51:a9:af:
         b8:b7:a2:ae:f4:26:3f:da:77:a5:52:63:0d:8b:b3:f7:46:b4:
         99:a8:eb:cb:58:c1:64:f7:19:7c:18:9f:78:28:0d:c6:a7:ab:
         0c:6b:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:39:00 2026 by rpki-client