Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa
File:                     d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa (raw, json)
Hash identifier:          db7684zrPP/3anxkymucIkJAimWRtNgtLHFoSE/3Z28=
Subject key identifier:   E0:AD:C2:3E:D2:1C:26:89:FC:AB:B4:45:5C:D9:75:30:B2:FF:E8:3B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584DF6409C6896BABE2E72613800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa
Signing time:             Tue 26 May 2026 13:00:31 +0000
ROA not before:           Tue 26 May 2026 13:00:31 +0000
ROA not after:            Mon 24 Aug 2026 13:00:31 +0000
asID:                     852
IP address blocks:        192.197.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f6:40:9c:68:96:ba:be:2e:72:61:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: May 26 13:00:31 2026 GMT
            Not After : Aug 24 13:00:31 2026 GMT
        Subject: CN=6cc60fc1-92aa-4925-a5d2-78d400035836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:42:65:d0:20:b8:56:00:84:cf:cf:7c:0b:b3:
                    7d:9c:44:79:73:96:9a:c6:59:6a:91:28:42:b1:64:
                    e1:7b:69:d4:08:2b:e9:a8:d7:3b:98:ea:fa:04:d4:
                    24:e3:dc:b4:6c:3f:cc:9b:75:86:ed:7f:4c:a7:6d:
                    ff:c6:70:a2:24:2d:cb:1b:90:67:1e:34:a9:65:9f:
                    ac:8b:db:af:93:ca:c4:0b:88:bb:fa:94:82:43:e0:
                    0f:e8:75:de:c6:44:20:50:c8:d8:be:b5:09:e5:12:
                    cd:fc:98:6a:10:1a:da:01:c3:e8:20:68:26:ca:c1:
                    a1:f8:48:5b:c6:82:30:8e:46:82:19:a4:e1:30:fc:
                    30:94:c9:35:71:52:04:69:08:dd:f7:8a:a2:55:e9:
                    af:a6:f7:36:f8:09:4d:50:ef:09:5c:24:bf:7a:c5:
                    f3:cc:5f:a1:e9:a3:d2:84:f0:3f:13:13:d8:63:37:
                    c3:ba:78:77:dd:8c:18:95:0a:76:00:f6:64:06:30:
                    2c:2b:36:5c:18:8b:d0:a5:1e:71:55:ee:69:c5:f7:
                    3f:b4:02:74:51:5f:ce:2d:10:05:65:1b:d8:b6:be:
                    2b:7e:0c:45:1a:c2:6c:fc:22:96:b0:46:a5:f0:d4:
                    af:5b:71:06:a3:bd:d6:6e:c4:45:d9:bc:c1:92:c7:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AD:C2:3E:D2:1C:26:89:FC:AB:B4:45:5C:D9:75:30:B2:FF:E8:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/d964238c-9fa3-3f4c-ba7b-d1aa53fc869d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:63:0e:26:1e:8c:5e:10:22:52:cf:e1:ae:6f:eb:3d:53:e4:
         f8:02:56:76:e0:fe:10:2b:d9:49:18:2f:26:f2:9f:b9:19:e5:
         f7:96:47:3c:d8:b7:9c:8f:33:ab:49:1e:c0:9f:49:ff:32:26:
         b0:22:be:90:e0:c4:0a:67:88:9f:ba:07:1b:2d:0f:2f:0f:58:
         71:11:48:d1:17:fe:80:7d:7f:1b:c4:3b:3f:ac:1f:19:03:26:
         9a:c1:fa:ea:8f:cb:0d:d5:a5:43:87:24:90:2e:71:18:00:7b:
         cb:07:6f:f6:61:28:e6:a7:dc:5d:f0:66:57:ba:83:fe:2c:19:
         89:9f:bc:f0:b6:72:1b:bf:b6:46:fc:d0:66:af:8b:70:64:b7:
         fb:a2:c2:5e:d7:b1:60:d5:a1:ad:0d:e5:d0:f0:9a:c7:66:7c:
         3b:9b:5a:e6:26:ed:b9:07:9b:42:1b:aa:4c:bb:c3:5f:c4:e9:
         d6:da:e9:17:b3:ed:94:7c:1d:47:26:bc:fa:44:20:be:c7:42:
         83:3d:b3:1f:ca:b1:51:96:38:76:7a:03:c4:70:b9:55:81:07:
         6f:2d:3c:ff:a6:23:3b:be:fd:32:67:8f:74:9a:cd:38:aa:ad:
         e1:87:0d:77:05:5e:a7:97:cf:77:7a:21:ec:2f:37:12:c8:f7:
         22:ef:65:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 22:50:59 2026 by rpki-client