Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa
File:                     c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa (raw, json)
Hash identifier:          /LSssInUeYzwgfSo2S/GvbS1V/FVqMW/DlIfgonVgDk=
Subject key identifier:   BF:6D:02:EC:2D:A2:13:9C:96:22:AC:23:B9:57:95:61:40:B6:E1:69
Certificate issuer:       /CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
Certificate serial:       010D0C9F4328584EA8EC3BF72BA748BE2FDFF940
Authority key identifier: 13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa
Signing time:             Wed 29 Jul 2026 13:00:12 +0000
ROA not before:           Wed 29 Jul 2026 13:00:12 +0000
ROA not after:            Tue 27 Oct 2026 13:00:12 +0000
asID:                     393732
IP address blocks:        192.76.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a8:ec:3b:f7:2b:a7:48:be:2f:df:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=252bff0e-a7f2-4d92-b2ff-24bfa21a7306
        Validity
            Not Before: Jul 29 13:00:12 2026 GMT
            Not After : Oct 27 13:00:12 2026 GMT
        Subject: CN=b9c4bb1b-a982-4a8d-ae53-5b7e4853e975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:17:db:09:d8:32:41:b0:f7:5b:7a:34:b4:
                    d2:30:0a:f1:db:82:c8:51:f0:22:23:4b:01:db:c8:
                    9b:9b:3c:83:05:16:1d:c0:bc:ec:58:54:d8:24:44:
                    5f:28:c0:1d:06:56:f9:17:08:06:14:56:62:35:56:
                    db:9a:26:f8:6a:84:26:e9:05:2a:72:7c:ac:e9:f5:
                    b1:24:71:15:b7:08:f3:dd:6f:a7:02:9c:e1:be:df:
                    8c:da:c0:83:a1:f2:45:50:5d:49:27:50:4e:8e:f8:
                    6f:8c:7a:d3:30:eb:1a:ed:be:28:df:3b:f1:67:5f:
                    e5:90:78:e9:53:4d:22:71:cb:a3:69:0f:73:62:34:
                    8a:aa:54:d6:b7:7a:a9:4e:a1:4c:11:36:a0:72:b1:
                    89:9e:39:e8:4c:82:27:74:2a:da:6c:a1:e1:54:ee:
                    0e:74:23:23:6d:4e:7d:ff:a8:8c:da:8d:15:9b:11:
                    06:a2:6d:87:5b:1f:ee:3f:0b:2b:73:19:18:f3:27:
                    d5:52:13:8b:d7:74:c8:8e:96:f1:ff:97:3e:4d:f6:
                    1a:3f:76:12:35:ba:c9:ba:48:95:f5:3d:32:d3:a4:
                    9c:24:36:ee:74:8d:c8:70:72:35:4f:a6:4f:f2:40:
                    25:a4:82:1a:bd:6b:15:11:c1:03:4c:cc:7d:e3:8a:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6D:02:EC:2D:A2:13:9C:96:22:AC:23:B9:57:95:61:40:B6:E1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/c03e4f9a-9ed8-312d-8f97-970b86a6c683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.crl

            X509v3 Authority Key Identifier:
                keyid:13:34:1F:39:12:25:A3:62:F4:C2:CC:7C:74:9A:15:0B:B9:94:42:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/252bff0e-a7f2-4d92-b2ff-24bfa21a7306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.76.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:63:83:25:fe:33:4a:9e:24:16:ff:20:77:24:f1:39:c1:a5:
         b6:5f:de:2a:f7:05:c3:27:17:f7:4d:8c:b4:23:6f:50:d9:b2:
         33:7d:86:db:0a:ae:7d:bb:b7:f2:bf:bc:53:e0:29:62:12:8b:
         52:07:aa:7e:a4:a3:12:b0:39:3b:5d:95:14:86:d3:81:28:a7:
         70:de:3f:d4:c4:ad:e9:81:a3:52:36:4f:23:56:14:de:77:b6:
         af:db:80:b4:8b:9b:31:ed:1b:23:f6:0b:ff:91:43:7e:0c:83:
         89:33:42:62:64:d4:18:9d:71:91:ec:05:7f:96:fd:6c:b6:dc:
         ee:fa:3a:91:c8:98:2c:a9:f3:19:e5:9f:c1:84:39:1c:0d:62:
         47:f7:25:b2:71:64:e4:4f:2f:c2:01:f0:87:8c:e8:10:15:5d:
         33:5d:32:dc:ec:ae:2b:9b:42:ad:de:7f:0e:11:bb:fe:49:8f:
         d7:99:cb:2f:a8:69:5d:f1:af:39:27:10:c6:3f:a7:d2:af:23:
         4e:5f:77:3a:77:53:39:52:f2:a6:da:5c:0c:bc:de:f3:a9:cb:
         27:1e:e7:2d:d3:e7:90:8b:ea:1c:b2:e4:36:a2:2e:11:74:e8:
         87:a2:2b:23:a8:c1:89:1e:a5:93:f7:34:d4:aa:0c:cc:36:cb:
         d8:32:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:47 2026 by rpki-client