Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/de3e0c8c-9744-3ca8-a2cf-ee87a7549c7c.roa
File:                     de3e0c8c-9744-3ca8-a2cf-ee87a7549c7c.roa (raw, json)
Hash identifier:          3182cBGpA8kl8DmrpY7zGq1K1P4lds17Ie46yVtBFmQ=
Subject key identifier:   5B:3E:B9:6F:93:04:53:DD:E0:6A:87:2E:1F:1A:FE:C9:58:08:13:1A
Certificate issuer:       /CN=9ff9bceb-e14b-4417-b9b7-c51352d95416
Certificate serial:       010D0C9F4328584D100CFC93A4C40EF59E5EDD80
Authority key identifier: 00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/de3e0c8c-9744-3ca8-a2cf-ee87a7549c7c.roa
Signing time:             Thu 05 Mar 2026 02:00:32 +0000
ROA not before:           Thu 05 Mar 2026 02:00:32 +0000
ROA not after:            Wed 03 Jun 2026 01:00:32 +0000
asID:                     46149
IP address blocks:        192.206.10.0/24 maxlen: 24
                          192.206.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:10:0c:fc:93:a4:c4:0e:f5:9e:5e:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff9bceb-e14b-4417-b9b7-c51352d95416
        Validity
            Not Before: Mar  5 02:00:32 2026 GMT
            Not After : Jun  3 01:00:32 2026 GMT
        Subject: CN=f324c85f-d39f-45e4-af38-97b0d1113944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:42:57:70:38:83:23:85:3c:e4:82:3b:68:1b:
                    2e:2b:bb:ac:64:74:83:c5:32:3e:6b:79:09:11:4e:
                    12:47:d9:21:f3:84:db:76:6b:53:6f:39:50:79:59:
                    ec:f1:ad:e5:14:89:cc:88:18:a7:57:99:65:e7:04:
                    9a:cb:28:d4:1f:ff:56:25:49:a4:b1:24:2e:53:d5:
                    d8:ca:b0:46:67:86:3e:c5:87:a9:77:94:79:ef:08:
                    85:d8:be:61:1d:3e:1b:92:bd:63:3c:b6:a9:6c:33:
                    c1:8a:7b:42:2b:14:aa:27:a0:28:0e:37:c2:ab:43:
                    76:00:bf:03:0f:06:e4:32:68:c7:92:e9:cf:34:7c:
                    88:51:ed:5f:1a:f2:9f:cd:55:32:9d:16:ab:5c:88:
                    ed:2b:9d:06:5e:e2:14:83:0f:5e:b4:05:dc:5c:94:
                    cb:65:87:af:cd:02:58:8a:49:cd:bc:a2:36:db:85:
                    80:c0:bf:59:49:fe:f6:53:52:8e:07:55:2b:28:5f:
                    72:72:dc:c5:fd:cc:75:68:82:5c:e1:a4:43:1d:81:
                    f9:a4:4a:14:f7:8e:16:c8:0e:89:d4:64:a5:1e:c9:
                    c5:d7:07:0c:43:d5:0e:1b:f7:5c:ad:66:1e:43:a6:
                    02:b6:de:a2:31:b5:2f:33:d1:ca:dc:9e:38:e3:0e:
                    cb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3E:B9:6F:93:04:53:DD:E0:6A:87:2E:1F:1A:FE:C9:58:08:13:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/de3e0c8c-9744-3ca8-a2cf-ee87a7549c7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416/9ff9bceb-e14b-4417-b9b7-c51352d95416.crl

            X509v3 Authority Key Identifier:
                keyid:00:0E:4F:51:41:59:6D:38:BB:FA:00:EB:A5:24:C6:68:8C:5F:A0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ff9bceb-e14b-4417-b9b7-c51352d95416.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:a9:b7:b6:a3:a9:96:14:20:50:3e:45:fc:48:67:5d:f9:c9:
         17:28:b8:84:1d:12:a4:9e:a5:e5:a2:9f:61:7a:98:65:4d:28:
         06:72:35:d7:eb:8c:45:1e:12:82:0a:95:4a:90:2f:a5:d6:c6:
         f1:c4:43:70:8c:63:69:a9:dc:cb:81:32:d3:33:44:2a:f4:53:
         09:72:06:85:20:76:ce:03:b6:de:7f:39:e0:1b:1d:76:1b:4c:
         2c:e5:99:76:93:af:17:62:3f:76:09:d8:48:e8:08:a6:89:35:
         27:a6:04:32:ae:11:44:a0:ed:53:45:d7:f2:25:5d:c8:64:e1:
         a1:83:46:96:79:5d:4d:7e:f4:67:8c:d1:02:d0:09:38:ea:a9:
         eb:29:41:f1:dd:75:39:7a:b4:47:9e:12:8c:11:d7:9d:ca:72:
         01:d3:a0:bb:18:6a:8e:83:90:dc:ff:22:cb:1e:22:5d:1a:b0:
         66:e2:46:50:eb:23:c3:52:0d:56:bf:56:ec:b0:c3:cb:b2:9e:
         8a:fc:51:0d:5a:02:fc:45:20:92:b9:a3:bd:93:d2:c6:ea:17:
         11:34:5b:f9:08:1f:b0:a2:ba:69:f5:66:8d:a9:82:78:01:25:
         8d:2a:a9:19:81:c0:f8:47:8c:e5:a0:33:dc:47:1a:8e:d3:e4:
         b8:62:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 15:57:17 2026 by rpki-client