Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa
File:                     4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa (raw, json)
Hash identifier:          OcBlm880QRY0WU2e/A/TOvzBNyZe4OPj4g7YWIJ/o+w=
Subject key identifier:   3E:FC:D2:85:1D:52:67:6D:53:F5:2A:BB:AE:F3:B3:77:8C:17:4F:D7
Certificate issuer:       /CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
Certificate serial:       010D0C9F4328584F58CD63FCFFC295D751726C80
Authority key identifier: FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa
Signing time:             Wed 30 Sep 2026 13:00:13 +0000
ROA not before:           Wed 30 Sep 2026 13:00:13 +0000
ROA not after:            Tue 29 Dec 2026 14:00:13 +0000
asID:                     30456
IP address blocks:        195.88.218.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:58:cd:63:fc:ff:c2:95:d7:51:72:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31c19e57-a6f5-4c48-b4df-b8d42d7b7483
        Validity
            Not Before: Sep 30 13:00:13 2026 GMT
            Not After : Dec 29 14:00:13 2026 GMT
        Subject: CN=9f000ac9-cb07-4cb7-9cc3-aebbfde45f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c0:03:35:f9:98:ec:76:46:0d:36:4c:e2:48:
                    27:c1:ed:c2:d0:d3:b5:b0:a3:52:38:1d:d0:8e:c5:
                    43:9e:4d:92:a9:49:65:f2:38:2b:fc:9b:ee:5c:31:
                    8f:0d:40:93:43:27:be:20:f8:cc:cf:bf:75:5f:15:
                    c3:64:cd:76:3c:2a:5e:c9:5e:5b:79:00:74:7b:a8:
                    8c:16:f4:5d:d7:af:9c:56:8b:f7:4b:83:8a:d7:87:
                    d1:95:46:52:35:f4:7b:d9:39:6a:65:84:60:f9:08:
                    3d:e0:d9:77:be:68:33:4b:ea:5e:a2:0b:86:88:c9:
                    28:9d:c9:69:60:94:ed:8c:15:df:70:32:15:18:5b:
                    c5:7a:01:1b:86:7a:17:44:b5:89:20:84:50:a0:bd:
                    fe:0b:82:38:be:b9:61:f2:a3:11:89:b6:50:d9:63:
                    38:93:a5:ad:65:47:86:91:9e:14:0a:92:76:48:d5:
                    e6:d0:b3:e7:2a:3c:0b:bd:7a:cc:3d:0c:4c:7e:2e:
                    64:63:dc:97:40:22:a4:2e:e7:f9:14:35:b5:e2:58:
                    bf:91:6c:cc:0b:91:0b:f7:d8:90:52:14:3f:3b:ef:
                    b0:5b:bf:15:1b:3f:08:9d:a3:6f:a5:3d:8f:24:88:
                    51:63:04:26:7c:9a:54:0b:8f:27:d8:88:e7:b2:ee:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FC:D2:85:1D:52:67:6D:53:F5:2A:BB:AE:F3:B3:77:8C:17:4F:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/4bdc3f26-cd0a-32d6-a1d2-e5802d72ea3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.crl

            X509v3 Authority Key Identifier:
                keyid:FE:92:62:E5:E2:76:A7:03:CA:49:1A:E8:34:E4:85:D3:62:57:A0:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/31c19e57-a6f5-4c48-b4df-b8d42d7b7483.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.88.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:9e:11:0b:c4:83:62:e3:1b:83:58:10:9f:66:a9:e4:1b:
         e6:de:f3:34:fc:85:73:db:fb:7c:c1:84:d0:a8:52:9f:b4:76:
         89:e9:37:4b:51:0b:24:98:d1:59:03:f9:e6:71:77:f9:46:69:
         bd:1e:89:12:6d:6b:8c:75:b5:36:d3:a6:d9:d3:05:ed:cc:0b:
         82:fe:54:2b:27:bc:1c:12:8b:c1:8f:e4:96:a6:01:c4:25:8c:
         e0:51:6f:47:e7:1f:fe:1b:62:52:c0:d2:c2:b0:d6:15:09:39:
         12:3b:96:34:cf:4f:56:59:ad:1f:9e:26:4a:36:44:8f:22:50:
         83:45:7d:4e:ff:f6:21:29:d8:31:ae:bb:f8:ff:89:40:fa:70:
         28:4e:2b:3f:ad:72:d9:53:4d:e3:bd:7a:2f:69:de:11:84:23:
         e7:04:a5:c2:77:8b:9e:00:c7:a6:b7:ce:9a:a7:c8:d7:dc:54:
         ff:c2:93:f7:93:59:94:64:26:e3:24:e3:1d:2a:21:15:05:56:
         b0:b7:57:ed:bb:cb:64:4e:e3:91:1d:83:09:f9:9c:00:25:33:
         3f:6e:4c:c4:58:a9:f0:30:7f:d4:04:72:10:d3:de:62:27:21:
         32:90:63:ac:df:b3:3a:d0:ff:1a:5e:1f:a0:19:10:2f:80:5b:
         01:96:2b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 02:55:03 2026 by rpki-client