Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/80de212f-d67c-35b7-91e1-6a07e2aa5221.roa
File:                     80de212f-d67c-35b7-91e1-6a07e2aa5221.roa (raw, json)
Hash identifier:          SUpx+T3Tz5epJlHJC7gURVFI4YKI4zlqxNWgOj8EObQ=
Subject key identifier:   4D:F2:46:5C:0B:E0:89:79:8F:26:79:F6:83:B5:68:15:6C:BA:04:2C
Certificate issuer:       /CN=4e2aa2db-3714-4200-b480-469b49ebedb9
Certificate serial:       010D0C9F4328584F612D65C1C3CCFCF3C8116AE0
Authority key identifier: 77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/80de212f-d67c-35b7-91e1-6a07e2aa5221.roa
Signing time:             Sat 03 Oct 2026 13:00:13 +0000
ROA not before:           Sat 03 Oct 2026 13:00:13 +0000
ROA not after:            Fri 01 Jan 2027 14:00:13 +0000
asID:                     397913
IP address blocks:        192.147.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:61:2d:65:c1:c3:cc:fc:f3:c8:11:6a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e2aa2db-3714-4200-b480-469b49ebedb9
        Validity
            Not Before: Oct  3 13:00:13 2026 GMT
            Not After : Jan  1 14:00:13 2027 GMT
        Subject: CN=384154b1-47c0-45ca-9459-e3f15f480df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fe:05:75:1b:db:da:20:68:d4:37:ae:ed:20:
                    9e:dd:66:62:9e:6d:a9:47:4f:47:be:9b:a4:cd:2f:
                    f8:86:02:1b:bb:8f:43:b4:ec:94:40:12:3a:df:2b:
                    05:21:cf:c0:9c:4f:1c:27:e0:30:1f:d4:49:98:b8:
                    b6:0f:07:10:c3:0d:cb:95:da:4b:42:31:b9:14:84:
                    3d:31:59:82:77:60:b4:b9:ce:eb:81:04:d5:8d:a5:
                    d4:07:10:ce:b8:46:e2:54:1f:2a:c5:b5:bb:04:4f:
                    bc:23:de:fe:06:69:4a:50:06:a4:d5:c3:67:84:53:
                    e7:e4:18:a1:bc:a9:b5:54:ce:7a:54:9c:69:97:66:
                    f5:43:b9:8f:9d:cc:96:df:86:19:64:a1:a5:99:d0:
                    79:38:9c:6b:a9:2f:f6:99:57:89:7c:ac:b0:00:89:
                    6c:6f:b6:5d:3c:23:12:39:97:31:e4:36:7f:e4:4b:
                    61:e0:d4:e8:29:ef:45:ae:b8:2b:46:5e:66:7d:a7:
                    c8:da:a0:0c:c9:ff:40:e3:b6:10:61:90:b7:b7:ba:
                    93:ff:42:8e:4f:94:d5:69:0f:16:88:38:ed:d1:f5:
                    96:5c:fa:3b:c4:de:d0:a7:24:d1:68:62:ee:d5:78:
                    91:ac:45:a9:a0:ba:30:f8:d4:49:7e:73:58:41:bd:
                    64:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F2:46:5C:0B:E0:89:79:8F:26:79:F6:83:B5:68:15:6C:BA:04:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/80de212f-d67c-35b7-91e1-6a07e2aa5221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9/4e2aa2db-3714-4200-b480-469b49ebedb9.crl

            X509v3 Authority Key Identifier:
                keyid:77:3A:4C:84:19:B6:F0:92:89:35:1F:C0:4E:21:91:53:F1:B8:3D:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e2aa2db-3714-4200-b480-469b49ebedb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.147.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:a9:07:6f:a1:ee:d6:02:4c:c3:b3:80:81:af:20:cf:2f:0f:
         87:b5:6b:03:f9:4b:6c:40:54:5c:e7:a1:ed:f4:93:5e:88:03:
         0d:91:61:00:cc:41:29:f4:65:b3:7b:d5:57:22:29:ff:ab:cc:
         79:aa:24:cc:c5:60:c3:b1:50:fe:b5:aa:fd:b5:48:33:3c:ae:
         cf:2c:33:26:11:63:fe:ce:09:3d:c5:05:1c:f5:1c:ca:fd:73:
         ec:e4:61:b5:bc:20:8b:92:43:05:f1:fd:52:fb:14:82:3c:5b:
         a8:b3:15:69:37:ce:84:fb:9d:84:b5:03:f1:e9:e7:1d:31:42:
         ee:bd:c1:50:9b:ac:8b:02:20:73:9c:42:ed:6f:67:c2:38:b7:
         e6:6f:c2:a0:c0:c5:20:c5:9f:a2:49:64:ca:65:2e:fc:05:0b:
         b2:f0:2c:41:6d:e0:fd:57:b7:c8:06:c6:0e:48:f1:29:bf:14:
         9f:dd:0c:54:f1:ac:c2:b8:02:c1:a5:6a:85:28:00:38:82:31:
         a7:b1:fb:2b:ae:fb:7b:45:5d:0b:f6:69:18:60:ba:73:eb:c3:
         9b:7b:3b:78:9a:f1:2b:53:20:71:47:a5:24:22:03:85:81:ff:
         b9:0f:13:2d:df:b9:4e:39:cc:24:70:15:78:92:2e:27:93:07:
         4b:2a:d7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:29:39 2026 by rpki-client