Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/484da809-fa66-33ce-bcc9-eb80588e7bc3.roa
File:                     484da809-fa66-33ce-bcc9-eb80588e7bc3.roa (raw, json)
Hash identifier:          yXurhgflJ/riM03Q3VIuj/OPoyt5fYNByL0z21ZlqTM=
Subject key identifier:   77:DB:14:FC:62:31:4A:C2:CC:A1:6C:48:0E:E4:16:A6:EE:2D:63:26
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584E7404E5E277D7A867E56A6860
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/484da809-fa66-33ce-bcc9-eb80588e7bc3.roa
Signing time:             Fri 10 Jul 2026 14:12:09 +0000
ROA not before:           Fri 10 Jul 2026 14:12:09 +0000
ROA not after:            Thu 08 Oct 2026 14:12:09 +0000
asID:                     147200
IP address blocks:        192.25.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:74:04:e5:e2:77:d7:a8:67:e5:6a:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jul 10 14:12:09 2026 GMT
            Not After : Oct  8 14:12:09 2026 GMT
        Subject: CN=140ae937-1fc1-4f4d-97d1-fe5a8a53d2e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ac:87:81:b5:97:66:fc:61:5c:a2:01:e9:f1:
                    76:3d:88:8b:d7:dc:9a:9b:5d:86:45:1c:77:9b:93:
                    ff:cc:8c:4d:8f:d1:8f:db:e0:65:e3:41:69:18:9c:
                    c0:ba:8d:b0:45:78:56:02:75:fc:8e:a7:0d:2b:1c:
                    d0:a6:ce:46:78:f8:e0:f0:8a:73:cc:2e:0a:c0:8f:
                    a5:94:3f:f5:ce:e5:fa:b8:a8:38:73:c1:8d:ad:08:
                    2a:4a:36:e8:bf:0a:7b:c4:cf:98:07:04:33:ae:7d:
                    98:a9:2d:aa:ae:bf:a2:dc:a7:96:bc:f8:99:09:d0:
                    21:ac:2e:43:a6:b8:17:c6:a5:40:f0:4b:56:57:5f:
                    52:4d:1f:2e:23:d3:79:a9:7a:19:b4:28:32:5e:8a:
                    d2:8e:45:d3:80:3c:bf:4c:4a:91:8c:8e:cb:c9:58:
                    78:4e:c4:0e:0b:4b:94:e5:a3:68:8d:19:c0:77:00:
                    05:5d:a2:13:fa:51:71:62:61:53:b9:05:65:c0:ec:
                    73:36:24:ea:cd:be:87:41:f1:41:23:6e:66:55:5b:
                    cf:1f:83:3a:57:d1:6f:7d:bb:23:d3:f9:69:2c:5a:
                    e6:9e:e9:89:05:b9:22:04:1f:9b:a2:05:13:77:32:
                    47:95:32:dc:7b:3d:22:76:13:40:e8:56:74:da:d7:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DB:14:FC:62:31:4A:C2:CC:A1:6C:48:0E:E4:16:A6:EE:2D:63:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/484da809-fa66-33ce-bcc9-eb80588e7bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:38:fd:98:cc:a5:8a:52:41:ed:b7:6e:b5:15:b5:9f:d5:98:
         7e:55:b5:f4:bb:75:e9:de:f5:c8:e8:bb:8c:21:0e:d8:64:89:
         fd:fd:a6:b3:d2:1b:fe:f3:9f:aa:46:c8:77:90:c6:9f:82:36:
         19:25:93:31:69:bf:34:09:2d:9e:92:87:0c:e9:5b:fd:c7:57:
         f2:7c:99:fc:6d:d5:2f:13:6a:53:f8:98:31:e5:39:4a:74:19:
         22:f3:a2:73:6d:2c:b8:35:08:ae:f7:14:77:40:92:07:07:fe:
         28:7d:80:b0:7f:42:f4:e9:8d:75:64:ae:86:af:89:99:a9:00:
         4e:e8:43:80:45:5b:80:f6:fd:a2:6e:ab:c2:ca:da:6b:d0:01:
         42:9c:df:42:ef:41:fa:19:28:72:cc:07:bb:cd:4a:08:c2:4c:
         ac:a6:b1:16:e8:f9:f8:b0:be:0b:12:d1:11:ba:ec:70:e0:c0:
         d7:e4:05:09:b3:7e:ea:2d:6a:16:59:d2:37:ba:f4:13:4a:3b:
         c9:b1:d2:1a:fc:06:f3:2a:2e:e9:a1:7d:4d:29:06:bf:2d:d5:
         9f:93:37:b7:d5:73:fd:3b:f6:10:c6:34:46:dc:e8:2f:c9:c5:
         37:ea:d4:c4:db:df:f4:e3:9a:a2:ea:ef:39:d5:36:6b:e5:15:
         b9:c6:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:20:22 2026 by rpki-client