Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e/39d8ed28-4414-3ae6-aa35-cc781b6cb320.roa
File:                     39d8ed28-4414-3ae6-aa35-cc781b6cb320.roa (raw, json)
Hash identifier:          FHgxhOSYNbGxbAYSfLBL4P2bW8joTrL2DnNe8/hg56A=
Subject key identifier:   49:EF:F2:82:17:67:8A:4D:50:83:55:E8:3A:F3:D5:A2:F4:EF:DA:DF
Certificate issuer:       /CN=a09ec778-c92b-4639-800b-b8fdb34a496e
Certificate serial:       010D0C9F4328584FA734A8C87BE21A53FE898200
Authority key identifier: 47:65:D0:E0:CF:74:16:E3:AC:BC:9F:22:0E:38:CA:E8:58:53:F1:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e/39d8ed28-4414-3ae6-aa35-cc781b6cb320.roa
Signing time:             Wed 28 Oct 2026 15:01:33 +0000
ROA not before:           Wed 28 Oct 2026 15:01:33 +0000
ROA not after:            Tue 26 Jan 2027 16:01:33 +0000
asID:                     400588
IP address blocks:        192.195.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e/a09ec778-c92b-4639-800b-b8fdb34a496e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e/a09ec778-c92b-4639-800b-b8fdb34a496e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a7:34:a8:c8:7b:e2:1a:53:fe:89:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a09ec778-c92b-4639-800b-b8fdb34a496e
        Validity
            Not Before: Oct 28 15:01:33 2026 GMT
            Not After : Jan 26 16:01:33 2027 GMT
        Subject: CN=019f2dfd-ef7f-4445-a591-7ef7ced640a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:bb:0a:e1:7f:22:39:df:1a:25:65:82:22:
                    8b:08:2e:2e:05:7d:38:17:5d:61:7b:ac:4c:f4:c2:
                    3c:13:a7:50:a1:54:42:ab:3f:9d:73:16:82:82:e3:
                    13:b3:90:7b:c6:01:e4:f3:59:ed:74:77:7b:91:e6:
                    bd:ce:61:6c:f3:ca:d7:65:43:31:75:18:de:4c:6b:
                    89:07:a5:fe:62:b0:18:42:88:3d:de:42:5e:f9:1b:
                    60:e2:2d:77:e3:ac:fe:db:05:05:28:52:a5:36:d6:
                    20:85:e2:ab:7e:2d:c1:68:80:29:14:4d:fa:65:05:
                    e1:f1:37:22:52:2c:70:5a:d1:5b:94:b0:ea:f4:09:
                    9a:12:ea:33:cd:84:de:9a:fd:3e:61:9d:21:31:ac:
                    90:d2:be:5d:82:7f:2e:6d:c1:58:4e:62:0b:7f:4a:
                    a7:2a:2f:97:24:ed:21:d5:dd:13:54:ac:8d:38:85:
                    ac:32:c2:bc:aa:fa:6b:62:5b:00:bd:1a:91:ab:08:
                    0e:7a:c8:43:d0:95:03:90:55:f1:86:cb:0c:16:d9:
                    b8:84:1e:c5:cc:31:85:ea:67:ec:22:7f:24:35:74:
                    71:52:04:ae:96:e7:f3:11:64:9f:82:5e:c4:71:80:
                    26:27:17:07:b0:44:bd:9a:e4:87:6a:8d:85:c6:fb:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:F2:82:17:67:8A:4D:50:83:55:E8:3A:F3:D5:A2:F4:EF:DA:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e/39d8ed28-4414-3ae6-aa35-cc781b6cb320.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e/a09ec778-c92b-4639-800b-b8fdb34a496e.crl

            X509v3 Authority Key Identifier:
                keyid:47:65:D0:E0:CF:74:16:E3:AC:BC:9F:22:0E:38:CA:E8:58:53:F1:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a09ec778-c92b-4639-800b-b8fdb34a496e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:15:c1:46:79:03:38:80:23:ab:33:da:b0:5f:82:e9:12:60:
         2d:b8:e6:e7:e0:6a:0b:28:69:7e:4f:5b:2a:2f:13:eb:83:b7:
         0a:a6:70:41:ca:ba:a1:5c:96:78:5a:04:0c:22:0d:db:39:8a:
         16:8a:63:21:d7:f1:7e:df:00:df:6c:10:0f:67:cf:c9:73:70:
         0c:d1:a9:e8:9a:d1:2c:f2:b4:54:e0:a6:f5:3c:45:37:b7:7e:
         6d:49:01:14:e2:56:ea:b3:99:cc:d3:0b:eb:0c:d3:66:3d:30:
         cc:f1:fe:e6:37:c1:77:45:24:dc:41:dc:0f:ad:c2:e3:c1:f3:
         92:db:1a:7d:c7:ec:b8:a0:5e:1c:07:64:02:a4:9a:a7:4b:52:
         d6:84:01:6a:3f:89:80:28:3b:9c:8d:3c:65:e9:b0:49:cc:16:
         e4:f0:e6:d1:70:ae:25:b3:e7:87:80:d8:3d:3f:58:87:0c:2c:
         57:1f:70:ff:43:10:c7:f0:9d:05:fc:85:76:fc:f5:6e:59:be:
         5d:f2:60:8a:ff:3c:2f:77:7f:cb:86:1d:77:b0:c4:47:0e:cf:
         31:ce:b3:35:df:87:a5:6a:31:e6:57:6b:00:bf:1d:bd:7f:1b:
         db:12:31:5d:a2:d9:3a:55:78:d7:0c:63:c8:2e:1a:4d:e3:ad:
         1e:98:ae:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 09:02:38 2026 by rpki-client