Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/15a352be-1ca7-3a48-977f-0bef64fffe17.roa
File:                     15a352be-1ca7-3a48-977f-0bef64fffe17.roa (raw, json)
Hash identifier:          uP5NfF1a5Y8lh47hhS4FpKzf+XK9kyQ28qE8GnvrzhA=
Subject key identifier:   64:E5:46:56:72:BA:A3:8F:72:0A:BC:8B:EB:C9:EC:B3:E0:DA:86:D0
Certificate issuer:       /CN=5d64660e-adb9-4dc3-a02b-d02d0d5d9629
Certificate serial:       010D0C9F4328584F7782DF69723348DFDEF2C400
Authority key identifier: BE:E9:4C:97:0D:0B:F3:B6:55:0E:D6:E2:E6:36:B2:B5:47:C1:2F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/15a352be-1ca7-3a48-977f-0bef64fffe17.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     10965
IP address blocks:        192.245.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:82:df:69:72:33:48:df:de:f2:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d64660e-adb9-4dc3-a02b-d02d0d5d9629
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=f04ee459-300a-48c1-930d-35a1ffc7a84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c9:7c:97:9a:3b:48:7e:c5:a0:a3:2d:db:6a:
                    b6:23:d7:a5:9d:a7:76:c3:7b:65:4c:2b:51:d7:1c:
                    cf:61:f8:a4:5f:77:58:62:e7:41:96:3f:d5:a1:63:
                    86:d3:54:38:d8:28:23:7b:20:b5:31:5c:61:c6:0c:
                    c2:da:f1:72:03:cf:e1:98:da:7a:c8:73:77:92:4e:
                    23:a3:b2:70:18:c2:14:b7:66:6d:64:25:31:b0:82:
                    fe:eb:96:6f:91:81:ba:5b:b7:42:9d:82:b3:a7:d5:
                    c6:7d:0f:d0:4d:46:32:95:1d:13:5a:fc:31:39:ee:
                    02:04:77:1d:1e:a6:e1:0d:fb:94:33:d2:1f:27:46:
                    34:27:bd:9d:2f:9f:d6:58:ef:f5:d0:99:2b:f8:40:
                    2a:79:12:e4:17:54:0c:8e:2c:a8:e0:b2:1b:5a:68:
                    bc:38:85:98:65:93:fc:85:4f:d8:70:c2:6f:ea:ae:
                    f3:a4:92:05:ce:98:99:b3:8c:43:0d:7a:68:23:66:
                    21:05:ee:bc:f0:c5:06:26:cd:f2:2f:76:b7:ae:fb:
                    a4:0d:98:1e:44:11:d8:4c:10:1f:05:d1:7f:27:8a:
                    ad:c0:6e:b8:d5:06:cd:2e:ea:67:8d:a4:cb:3a:49:
                    ce:8e:7d:57:43:c7:db:9b:a8:9f:c5:b4:1d:c2:13:
                    07:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E5:46:56:72:BA:A3:8F:72:0A:BC:8B:EB:C9:EC:B3:E0:DA:86:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/15a352be-1ca7-3a48-977f-0bef64fffe17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.crl

            X509v3 Authority Key Identifier:
                keyid:BE:E9:4C:97:0D:0B:F3:B6:55:0E:D6:E2:E6:36:B2:B5:47:C1:2F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5d64660e-adb9-4dc3-a02b-d02d0d5d9629.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:16:5e:0e:5d:b2:f7:5f:46:7a:19:df:33:3e:c8:87:66:e7:
         91:a2:eb:34:52:49:94:1e:0c:6b:c0:96:4c:ae:de:3b:c6:13:
         34:93:d6:8c:d6:ed:83:bf:36:d5:3b:b0:82:83:04:ef:3b:4f:
         6d:82:8a:26:af:4b:63:cb:8f:b9:30:f3:bf:bb:fe:81:89:cf:
         40:c0:d7:0c:a4:d2:e3:2a:c6:45:fe:b6:80:54:59:64:01:f7:
         5d:60:7c:03:8d:99:6d:6e:a3:f0:64:36:a4:cf:22:32:ea:dc:
         09:a2:78:aa:60:ea:b3:2f:75:a7:e7:77:2d:e6:2f:42:e1:81:
         ba:eb:59:4d:f8:fd:60:f5:d2:fb:6c:95:0f:26:ae:82:20:57:
         34:0b:6b:d9:f1:a9:d7:9c:62:01:14:a9:cd:b5:6b:3b:df:e7:
         89:b1:78:ef:de:d8:4e:91:de:66:7c:53:9c:fc:e8:25:d2:14:
         95:b4:7a:fa:5a:60:d1:69:e2:7f:83:c7:04:e9:cd:a9:da:22:
         48:f2:7e:67:85:89:5e:4d:18:50:46:a0:95:bb:cd:cf:44:5b:
         21:67:cd:3f:d8:20:9a:86:24:1f:da:c9:92:b5:62:53:5a:19:
         c0:9b:7a:17:70:2c:37:58:5b:2e:31:c5:7a:cd:37:73:9d:f8:
         c6:5f:2c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:16:46 2026 by rpki-client