Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/bd9c3699-932b-37f6-81bf-240c62fb0057.roa
File:                     bd9c3699-932b-37f6-81bf-240c62fb0057.roa (raw, json)
Hash identifier:          vXFR/vCYyTApVUgWOWKrmsLdeKpdP+k2W0/QAprrLxQ=
Subject key identifier:   E9:7C:08:AC:C0:DE:9B:06:6E:0D:5B:48:D6:CC:25:6C:AE:00:C5:29
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584F4974DE0EB522A9D5466A9980
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/bd9c3699-932b-37f6-81bf-240c62fb0057.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     19437
IP address blocks:        192.240.200.0/24 maxlen: 32
                          192.240.201.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:de:0e:b5:22:a9:d5:46:6a:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=774920a2-5d51-485f-bf00-4492d0d5d994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:99:44:e8:57:18:74:c4:df:47:83:b4:5f:
                    6f:88:ee:6b:dc:6f:bd:aa:ee:68:63:f3:d3:b5:10:
                    f6:0a:32:e5:c6:3e:cf:45:fe:ad:1d:6c:ca:a2:d5:
                    77:0a:4f:b4:7c:9f:93:1c:d7:f8:15:ff:a4:a7:d6:
                    43:9e:bc:8d:ff:8d:49:53:52:53:d2:b5:8c:42:de:
                    82:d9:fa:9f:d0:2a:36:35:24:2d:fd:8b:1f:54:ca:
                    9c:08:18:9e:73:c6:1a:42:d8:32:bb:18:21:bc:93:
                    73:04:6d:f9:33:33:bc:86:c6:cd:32:00:25:ba:e4:
                    65:a2:78:d9:63:05:09:30:fb:af:f9:3e:f3:33:7f:
                    b3:44:14:75:a1:13:d6:92:5a:dc:ef:43:07:0e:90:
                    fe:58:f6:87:29:58:23:65:f4:bc:51:a0:70:6d:10:
                    00:2b:80:81:fb:b0:c1:75:5f:af:72:e6:5c:6c:37:
                    87:a4:fb:ce:f6:68:33:77:87:77:36:c0:e5:10:fc:
                    6a:6d:e4:fb:19:d4:fb:47:fb:f0:a8:97:82:8a:a9:
                    4c:84:bb:51:c9:c8:57:9d:02:63:b6:a0:7b:3c:82:
                    ca:83:1f:1f:1b:8a:80:d7:3d:e7:91:76:0c:93:e7:
                    54:c5:dc:84:f9:a0:42:dd:3f:d1:62:7e:84:84:63:
                    14:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7C:08:AC:C0:DE:9B:06:6E:0D:5B:48:D6:CC:25:6C:AE:00:C5:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/bd9c3699-932b-37f6-81bf-240c62fb0057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.240.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:9a:3b:2b:bc:a6:45:8e:d7:ed:65:fa:d0:d5:94:ea:5f:c6:
         4d:68:b5:47:6d:d0:b3:7b:d9:51:16:a2:56:c7:5c:97:28:7e:
         c7:26:92:b3:32:c8:bc:30:ad:4c:4b:3c:1b:70:e1:0c:2a:3c:
         0f:41:8d:17:27:3b:3a:99:7e:d4:80:45:cf:ab:68:2b:08:e8:
         23:66:84:00:92:32:d3:4d:26:e2:a1:f5:ef:d3:4f:f8:ed:f2:
         52:e0:93:52:4b:3c:c1:a7:21:72:ae:23:87:3f:5e:63:e0:cd:
         c8:d3:fa:c2:5f:38:d8:f1:29:8a:dc:a7:57:de:d9:1d:e6:38:
         e9:d5:f5:c4:e3:91:a4:59:ed:c7:03:11:d2:ec:ea:0d:bc:7d:
         2b:75:36:b8:31:2c:e5:62:0d:5b:78:78:45:0e:c5:e0:76:53:
         d9:65:8d:8a:66:ca:f2:68:3e:c7:8b:22:da:29:e3:9e:dd:95:
         e2:36:a9:c4:c6:63:51:0e:79:bb:36:c7:16:b8:f6:11:0c:6b:
         37:aa:09:06:32:13:08:6e:aa:96:ad:e6:d1:0d:a3:5f:c9:b5:
         ba:0b:7a:3f:a0:2a:e0:80:96:5c:dd:9c:9a:72:27:cc:59:c9:
         86:a8:82:bf:ab:f6:17:e3:d6:ee:49:da:f8:c9:d5:ef:f8:65:
         a8:d5:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:22:33 2026 by rpki-client