Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/d458cc6c-96e8-376d-b714-a03dc2e3e288.roa
File:                     d458cc6c-96e8-376d-b714-a03dc2e3e288.roa (raw, json)
Hash identifier:          FPaEoEL/hVQ2VBtu/JMl/AtKZvnYxTzt/5+XjADwuMU=
Subject key identifier:   39:6B:66:95:35:F6:8E:05:BF:80:93:4C:27:6F:12:8A:45:6B:38:39
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584EC7A1D0D0A07CA1CBEB3248B0
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/d458cc6c-96e8-376d-b714-a03dc2e3e288.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     55178
IP address blocks:        192.230.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:d0:d0:a0:7c:a1:cb:eb:32:48:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=a6fdd258-4c26-4dca-b9bb-01f9bcd35a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:50:95:84:b6:fc:12:6f:f8:9f:60:6c:3b:11:
                    dc:c0:bb:94:ff:82:08:69:7b:b9:40:6e:58:6e:2d:
                    ca:db:f3:f3:64:18:e4:9d:5a:2e:e4:84:e0:ec:d3:
                    b2:48:3b:61:1e:8a:89:8c:82:aa:4d:d1:31:53:f9:
                    18:b5:0f:77:a4:ff:b8:36:aa:0b:c3:4c:4f:09:84:
                    90:12:38:cc:50:96:f0:cb:a3:b3:6f:cb:a4:f0:9f:
                    30:d4:8a:3a:92:d4:76:20:fa:ef:1a:0a:ca:a3:ab:
                    00:a9:8b:68:f4:4e:d2:46:26:43:83:47:fb:fd:7a:
                    50:2b:2d:9e:bb:df:85:00:e7:e1:55:a2:a2:fe:cc:
                    32:1d:31:66:ba:0a:15:69:dc:d0:8f:be:f0:62:10:
                    00:a5:c9:3b:ce:99:7b:76:59:1b:a9:e7:2e:1e:47:
                    c9:a2:1b:f9:48:af:26:04:87:29:bb:70:f9:13:d5:
                    62:4e:f4:c0:7e:c6:79:8a:61:17:50:6f:86:d2:9f:
                    90:e1:a0:2d:4d:db:00:05:be:ae:15:b1:4a:6b:9c:
                    6a:61:7a:bc:41:da:e2:11:98:fe:fd:18:cd:3c:83:
                    81:7f:77:9c:83:ee:77:e0:97:06:86:dd:72:a5:fa:
                    1a:f2:ff:16:e3:95:5e:1e:49:80:1c:cb:63:d7:e1:
                    01:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6B:66:95:35:F6:8E:05:BF:80:93:4C:27:6F:12:8A:45:6B:38:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/d458cc6c-96e8-376d-b714-a03dc2e3e288.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:65:81:c9:8d:1f:ee:f0:80:24:c1:ba:6d:00:d3:ba:d8:da:
         9b:81:bb:8f:1c:6f:be:9f:58:6b:0b:db:ba:d9:30:f4:f8:11:
         fe:ad:e5:8c:6c:7d:c6:1d:62:47:af:3f:38:fc:66:8a:8e:a3:
         dd:de:1f:55:af:75:99:0f:dd:ce:1f:ba:c1:59:40:d8:d1:4e:
         4e:df:d4:a9:3b:1d:39:a7:b9:6a:36:17:51:e6:51:20:39:26:
         a3:0d:2f:b3:63:a1:4e:bb:43:b6:d8:ec:bd:84:10:8b:da:04:
         00:0b:f9:ca:39:03:6b:2f:a6:a8:01:d2:1e:1d:bf:d7:cd:a5:
         b0:35:ec:16:cd:af:8f:13:40:90:7b:66:01:9c:e5:ab:56:d4:
         ec:3c:3e:47:63:2c:56:98:9d:ba:d5:9f:ed:be:4e:fc:df:0c:
         cf:fa:59:a4:4d:37:bf:ed:98:91:91:1e:31:2b:aa:69:8c:45:
         11:14:a9:6e:b8:08:bd:71:12:f5:ab:9d:b8:2c:4c:2d:42:40:
         34:1c:f9:e0:21:40:78:4f:7c:1c:0c:81:3b:80:9a:21:cf:28:
         c1:1a:4c:93:61:3b:7a:d5:3d:10:e1:41:09:9f:a1:0c:9b:41:
         db:12:61:66:a1:56:88:21:d6:77:98:39:7f:81:d2:9e:91:b1:
         1a:da:29:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:05:10 2026 by rpki-client