Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa
File:                     8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa (raw, json)
Hash identifier:          q/UJ4Q1NOR/PWQ2n25YeEwojtYRS7+MLr0kyJA6Xh3A=
Subject key identifier:   15:13:DC:C5:A5:59:C5:29:82:69:E7:D9:25:DA:B3:74:EA:0C:24:CD
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F4328584EAD1C4809319A5493309DB89C
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa
Signing time:             Fri 31 Jul 2026 01:00:11 +0000
ROA not before:           Fri 31 Jul 2026 01:00:11 +0000
ROA not after:            Thu 29 Oct 2026 01:00:11 +0000
asID:                     683
IP address blocks:        192.5.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ad:1c:48:09:31:9a:54:93:30:9d:b8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Jul 31 01:00:11 2026 GMT
            Not After : Oct 29 01:00:11 2026 GMT
        Subject: CN=8c641bfa-3e48-4fcd-a2ed-27f0a38427e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5b:de:50:c7:6b:2a:91:0a:f7:87:5b:fd:40:
                    df:70:b3:cb:0b:91:4a:b2:60:87:da:22:59:66:0f:
                    61:1e:ff:81:62:14:ff:fe:af:99:68:28:ab:c5:3a:
                    34:0b:97:77:72:b3:a1:74:5f:ed:aa:5e:6e:5d:24:
                    8f:23:a5:8d:2b:e7:a2:d7:4d:a9:23:7e:f4:38:a5:
                    82:bb:40:b4:92:c5:a3:ef:93:60:9f:d9:cc:02:43:
                    7e:7e:df:48:2a:fa:95:84:0e:74:a3:f5:98:09:68:
                    7b:aa:6c:31:c7:ce:a7:10:5b:90:58:ae:32:88:67:
                    ef:16:c4:b9:08:56:e3:d4:5e:4f:42:1f:3a:a0:8f:
                    64:66:9d:8b:2a:a6:14:f9:26:c7:77:84:7a:28:0d:
                    29:0f:90:bc:1a:42:4a:17:5d:97:0e:1c:53:11:38:
                    ee:8f:08:4e:7d:41:92:91:e9:1e:11:24:a1:e0:91:
                    a3:1f:38:68:72:c7:ab:35:60:a1:d9:f4:0d:65:f0:
                    06:a3:77:b4:55:83:2d:f8:8e:9d:86:94:45:01:8c:
                    8e:38:a7:1b:4b:0d:a1:36:18:8a:95:be:39:55:59:
                    f0:5d:17:64:9e:49:2c:12:7b:d0:fd:40:4e:ba:8a:
                    1e:b9:89:7c:51:6b:f5:bd:a2:80:83:cc:77:c0:7e:
                    37:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:13:DC:C5:A5:59:C5:29:82:69:E7:D9:25:DA:B3:74:EA:0C:24:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:49:85:8e:bb:ff:42:c7:3d:83:72:c8:75:df:3c:07:50:d7:
         52:8c:be:07:6d:d9:88:14:5a:53:e9:3c:5e:15:79:07:8f:ae:
         06:f8:31:a6:0a:d7:83:bc:7d:6c:5d:b3:7b:97:e4:28:d6:df:
         3e:7c:36:22:ce:af:52:42:0d:a8:51:47:9a:20:94:f5:ea:7d:
         19:a6:bc:10:12:eb:5c:1c:2f:08:86:57:30:68:e5:22:25:bd:
         ac:12:b1:9d:96:00:23:b9:c3:51:76:13:02:e2:fa:f4:19:9d:
         ef:e1:ce:93:ef:ff:9a:7a:ac:b8:9d:da:f8:02:3b:f4:54:c3:
         02:c7:8e:d3:50:08:62:ae:13:15:f1:6c:99:eb:9d:24:a6:2d:
         1c:0e:34:fe:cc:cd:40:b4:4f:61:d9:44:5e:84:90:0b:a7:9a:
         9a:f7:de:19:c6:00:c6:44:d8:3e:6c:21:02:e4:54:c0:54:39:
         b7:b2:20:e8:01:12:7c:c1:e3:58:c0:08:ce:c6:18:71:12:82:
         1c:d4:2d:f2:25:82:cc:f1:0c:00:7c:a5:24:df:f1:a8:68:eb:
         55:3b:75:4f:36:50:e6:75:34:22:2f:83:2f:6c:8f:58:78:d7:
         85:8b:1b:a7:56:60:02:f0:e8:52:09:71:91:ab:c5:a0:40:1e:
         bf:ad:c0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 18:15:36 2026 by rpki-client