Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/67876bea-6bc9-375a-8588-ba46134f4709.roa
File:                     67876bea-6bc9-375a-8588-ba46134f4709.roa (raw, json)
Hash identifier:          ZkG76kl5AbfJv/Zmm0HjKZ6Vs+RMhjBLPYndtDQeWLk=
Subject key identifier:   EA:D9:40:3D:4A:BD:82:2B:04:38:D1:47:BB:EE:DF:76:B5:A1:14:E0
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584E0A328D52EBED95C7EEEA50C0
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/67876bea-6bc9-375a-8588-ba46134f4709.roa
Signing time:             Tue 02 Jun 2026 16:28:27 +0000
ROA not before:           Tue 02 Jun 2026 16:28:27 +0000
ROA not after:            Mon 31 Aug 2026 16:28:27 +0000
asID:                     203075
IP address blocks:        192.25.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:32:8d:52:eb:ed:95:c7:ee:ea:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jun  2 16:28:27 2026 GMT
            Not After : Aug 31 16:28:27 2026 GMT
        Subject: CN=a7234e85-c5b4-4367-9e95-e48b23da7e7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f9:0d:2e:79:0a:25:71:9a:d7:34:58:29:11:
                    9f:4f:64:ac:5d:c4:11:35:b3:16:71:90:2f:eb:b5:
                    5f:14:49:09:79:57:bb:fa:f8:77:4c:01:7a:f0:c2:
                    02:09:1f:70:4a:85:5b:f7:b7:36:dd:ba:49:be:25:
                    6a:88:15:f0:08:9d:85:a3:7c:f3:80:82:b7:e8:7b:
                    dd:43:a3:6a:a2:77:04:31:a6:d4:37:0c:2a:15:35:
                    38:fb:9f:98:82:a2:3a:7d:e9:be:19:00:98:ba:59:
                    e7:31:77:76:b6:48:cf:b7:aa:59:d3:ab:ad:e8:12:
                    17:c5:ea:d5:e0:52:13:7a:7a:24:19:b4:32:9b:a6:
                    13:a4:06:ac:87:3a:51:81:87:47:fe:20:97:ac:43:
                    e1:54:08:55:82:a7:58:a3:cc:04:66:04:87:13:19:
                    cd:70:72:7f:6b:8b:c9:f9:65:ff:26:b1:12:cf:e0:
                    24:8d:2f:e9:86:b9:64:fa:6c:0a:83:78:fe:67:2b:
                    b5:f9:ee:76:f9:47:80:a6:bf:64:c7:c8:38:42:d3:
                    e6:8e:00:bf:b0:72:37:f2:2d:c0:3c:e3:e6:93:b3:
                    b0:1c:48:4e:8e:71:90:ad:3b:f7:25:24:49:26:8e:
                    de:f1:91:36:97:65:0d:b5:3b:54:df:b5:ad:92:ae:
                    69:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D9:40:3D:4A:BD:82:2B:04:38:D1:47:BB:EE:DF:76:B5:A1:14:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/67876bea-6bc9-375a-8588-ba46134f4709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c6:b4:79:ae:b3:14:d8:4e:89:55:01:56:74:77:17:db:aa:
         5e:37:70:d7:84:16:e8:51:7f:ab:24:37:ee:59:a9:06:7d:f6:
         62:10:22:3e:44:7c:d3:f1:52:fb:ce:c2:f6:0f:5f:64:6d:14:
         6b:bb:16:51:13:dc:9b:ea:2e:f2:ad:5d:7a:6b:12:2e:28:2b:
         af:8c:6f:31:6a:7a:c5:04:06:30:1f:d7:d9:cc:2b:ca:1a:81:
         d3:17:51:7a:1f:c2:a0:cf:7c:7c:a8:f2:f2:4f:a6:5b:0a:07:
         a0:bc:69:ee:ce:8e:04:6b:91:44:a7:31:db:46:08:d1:2d:3b:
         6a:94:a2:60:38:00:24:82:02:06:87:5b:b2:47:09:d5:b8:82:
         48:56:fb:2d:84:65:ed:b5:c8:af:8d:f8:ea:78:07:51:2b:8d:
         e2:4e:65:29:a5:69:f1:5b:46:25:50:0c:2e:58:06:ce:fc:d3:
         d3:92:12:3b:b5:42:d1:6f:1d:5c:b2:69:7e:3a:81:24:c7:fa:
         5d:31:ce:a2:41:df:8c:61:fb:57:cf:fe:b9:6f:90:36:43:c4:
         c5:4e:2e:db:12:71:3c:52:33:62:96:35:24:91:5a:64:0b:3d:
         b4:1f:91:50:7b:f7:d5:f8:d4:60:82:ef:87:a6:ea:29:cc:cf:
         fb:72:fe:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 09:20:03 2026 by rpki-client