Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
File:                     2f0b7f49-a633-3566-aa0c-7f199a78611a.roa (raw, json)
Hash identifier:          xZgggbrKwJrw9jSOrgy5ZeVDXlu/0FXyQFFESmM1+wk=
Subject key identifier:   45:91:24:5C:A0:1C:53:7D:67:BC:A6:34:35:C1:80:8C:19:0C:C7:C1
Certificate issuer:       /CN=9c841696-0857-4d7c-8db5-21941a77450c
Certificate serial:       010D0C9F4328584D0BDD09DDC992609B15BEEA40
Authority key identifier: 62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
Signing time:             Tue 03 Mar 2026 14:00:40 +0000
ROA not before:           Tue 03 Mar 2026 14:00:40 +0000
ROA not after:            Mon 01 Jun 2026 13:00:40 +0000
asID:                     237
IP address blocks:        192.138.137.0/24 maxlen: 24
                          192.160.192.0/24 maxlen: 24
                          192.160.204.0/24 maxlen: 24
                          192.245.252.0/24 maxlen: 24
                          192.245.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0b:dd:09:dd:c9:92:60:9b:15:be:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c841696-0857-4d7c-8db5-21941a77450c
        Validity
            Not Before: Mar  3 14:00:40 2026 GMT
            Not After : Jun  1 13:00:40 2026 GMT
        Subject: CN=5caa8924-b504-4819-9703-b73ae6bf7d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3c:38:f1:72:d8:47:6c:09:41:bb:f6:ea:86:
                    8a:8b:f4:2c:25:c9:80:d3:e5:af:28:17:15:91:c4:
                    39:8b:84:93:0a:d0:57:44:b4:18:5b:a8:7e:bf:3b:
                    bc:71:ac:a4:37:ad:53:e4:1a:69:2d:90:0f:8a:53:
                    80:a2:d0:6e:46:d0:8a:de:27:07:5f:c8:38:3a:54:
                    d1:3f:90:ac:75:2f:7b:36:9a:b4:63:93:f1:43:9e:
                    28:8c:d3:38:5a:78:34:44:6f:87:ee:43:43:e2:db:
                    56:fe:de:87:20:12:3c:1f:f7:3e:53:58:47:2f:19:
                    e7:f3:d1:14:74:6e:89:7f:4a:2a:dc:b2:23:b4:03:
                    a0:53:3a:93:39:4c:ed:77:3f:67:7e:c7:b4:c2:1b:
                    e0:89:f5:89:2c:22:d3:e8:27:d7:80:f4:d6:03:a9:
                    46:72:27:05:f9:69:9a:c0:e9:27:5d:5f:6d:2f:67:
                    94:a3:bd:c7:8f:4d:a4:63:f9:ac:bd:e1:94:1a:7b:
                    95:bb:09:9f:43:3b:d2:2f:a0:a8:b6:d6:60:64:5d:
                    d4:77:d4:97:e9:d9:44:78:c1:46:fd:3f:ec:4e:d0:
                    bc:11:15:05:6e:1e:6f:28:ca:4f:5c:45:e6:50:46:
                    ce:c9:06:67:86:4a:6c:9a:07:58:0e:40:f8:1e:60:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:91:24:5C:A0:1C:53:7D:67:BC:A6:34:35:C1:80:8C:19:0C:C7:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl

            X509v3 Authority Key Identifier:
                keyid:62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.137.0/24
                  192.160.192.0/24
                  192.160.204.0/24
                  192.245.252.0/24
                  192.245.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:3e:a8:88:df:e0:3d:5d:3a:ce:c3:bf:0a:54:82:8e:a8:
         03:72:59:16:fe:96:da:77:18:76:f7:bc:0e:f1:09:f1:12:d5:
         bf:51:bc:e3:2c:cb:39:41:35:8b:d1:58:ec:2b:7c:6f:30:5a:
         2c:82:6a:5c:88:5d:0f:70:b1:7f:52:e5:77:00:a4:e8:75:aa:
         e9:16:d5:3e:d0:27:40:1e:4c:e3:7a:b8:a7:15:1c:ad:a6:cf:
         eb:f9:9f:06:17:5b:35:68:aa:3f:aa:67:f0:90:55:55:fa:5e:
         01:7e:29:b7:59:de:b0:d0:28:71:4f:a9:70:6f:0d:48:84:2b:
         80:cd:00:d1:33:45:ec:b5:63:80:f6:68:b8:e8:16:7a:f4:64:
         08:1a:ff:78:3d:60:85:a8:19:e0:6b:34:6b:fd:43:47:b0:3c:
         a3:59:19:25:eb:b7:4a:8f:3b:1f:8a:79:98:ca:60:f0:d2:7c:
         93:16:95:62:37:c1:ac:8f:fe:ae:1c:a6:1d:46:34:8b:de:21:
         fb:01:9e:ff:01:92:25:0d:6a:ab:e7:68:cd:38:c0:ea:0b:d2:
         e1:5e:ae:a0:7e:dd:5c:c4:4f:8a:cf:25:86:6f:bc:f5:99:06:
         f4:04:b2:17:30:a9:88:a0:72:99:55:e0:4b:fc:83:ae:ba:72:
         14:fc:66:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 15 06:10:09 2026 by rpki-client