Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9afa0da5-4406-3954-bf81-44fe8f8e60ec.roa
File:                     9afa0da5-4406-3954-bf81-44fe8f8e60ec.roa (raw, json)
Hash identifier:          BFTFVbk+30Vwz7NfMdygy21CdHuWw9845j6U1XC3gwg=
Subject key identifier:   C5:F0:AE:33:FE:1B:0E:55:C2:9E:75:EC:BF:28:0E:AA:D3:47:54:EC
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584D655FE923449006C2B52274C0
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9afa0da5-4406-3954-bf81-44fe8f8e60ec.roa
Signing time:             Sat 04 Apr 2026 15:31:28 +0000
ROA not before:           Sat 04 Apr 2026 15:31:28 +0000
ROA not after:            Fri 03 Jul 2026 15:31:28 +0000
asID:                     18779
IP address blocks:        192.177.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:5f:e9:23:44:90:06:c2:b5:22:74:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Apr  4 15:31:28 2026 GMT
            Not After : Jul  3 15:31:28 2026 GMT
        Subject: CN=6de1a9cb-42f0-45fe-9f75-e1a706d63c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d2:59:f8:40:12:9c:b2:26:74:e8:82:4d:54:
                    33:bf:9e:a9:a9:02:e2:3e:13:8e:3c:82:82:dc:d1:
                    ec:62:6a:78:12:b2:75:9e:db:6f:cd:6f:e5:be:cd:
                    d2:8a:ab:ea:29:19:9f:7c:9c:3c:d8:e9:62:ac:d8:
                    5e:80:00:59:80:ca:e0:60:ff:0f:b7:f2:1a:93:3c:
                    ed:6b:ac:89:c2:e6:ea:60:e6:a3:50:65:5d:1c:57:
                    8d:63:e6:8e:a3:68:60:16:0f:75:3a:a9:ad:68:28:
                    c2:2f:b0:ef:35:c7:9f:19:57:26:15:9d:eb:a8:9c:
                    ab:c3:9c:74:32:48:99:12:92:29:53:d5:9c:2b:39:
                    2e:cd:ad:f1:3f:f6:05:20:1b:10:65:8e:72:a2:89:
                    ed:4d:db:8a:41:f7:22:f0:e0:ac:50:f6:19:5f:fb:
                    3d:a8:2e:c0:4d:89:e1:17:55:06:0d:12:a6:47:fe:
                    b7:d0:e1:27:f8:b7:60:cf:81:96:3a:9f:54:5d:3e:
                    a1:6e:04:3d:d6:03:da:56:50:f8:12:f4:9d:9c:a7:
                    b2:06:d7:e2:e4:e7:c7:3d:5a:dd:d2:4d:a0:7b:86:
                    ca:a3:f9:d7:48:69:4b:20:f1:b2:de:ff:67:14:d1:
                    ed:93:ca:df:3a:48:fb:d3:9d:be:ec:ca:75:ae:dd:
                    05:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F0:AE:33:FE:1B:0E:55:C2:9E:75:EC:BF:28:0E:AA:D3:47:54:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/9afa0da5-4406-3954-bf81-44fe8f8e60ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:15:42:4e:d5:7c:29:77:94:3e:7d:c4:a5:35:dd:8c:39:2e:
         6c:25:b9:4a:06:a9:47:15:30:11:47:df:99:f9:c7:82:9e:ca:
         44:92:ca:97:7b:a3:fc:23:72:60:6b:d5:6b:24:3e:ae:4e:f9:
         48:67:95:24:ca:e5:c0:6b:65:ff:ea:c0:80:b0:2c:7b:fc:dd:
         0a:f7:0a:d9:cd:ad:01:38:95:85:1d:e2:09:c7:62:5e:dc:e1:
         4c:20:46:1b:dd:6b:6b:fb:85:e8:90:aa:a8:4b:35:e1:06:e1:
         d9:e9:b4:25:2c:85:5e:98:2a:21:d9:3f:71:fd:85:4a:c1:f9:
         ae:27:b7:93:a7:75:46:c2:7a:2b:f8:8b:34:d3:6c:b6:44:50:
         e5:fe:34:02:41:0e:e5:d2:5d:dc:7e:11:e4:0a:5e:70:91:18:
         e1:4a:44:6c:f1:d0:d2:eb:d6:97:16:8a:8c:bb:6b:80:f1:2b:
         81:5e:8b:0d:a1:af:86:3b:f8:74:c7:c2:88:26:79:ba:41:4f:
         a0:7a:a0:c9:a6:65:80:e9:0b:8c:3b:28:06:ed:16:ac:4b:c2:
         ae:99:e6:4d:51:d7:95:95:06:4b:97:7a:f3:9c:c0:25:f5:1c:
         40:47:7d:16:70:be:3b:da:ac:cc:89:61:10:5f:72:fd:57:30:
         56:c0:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 23:14:05 2026 by rpki-client