Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/95df7630-80ac-3426-806b-4815cc0fd331.roa
File:                     95df7630-80ac-3426-806b-4815cc0fd331.roa (raw, json)
Hash identifier:          z8DKPJ98AX/so0io0/ac8nnHccbGYtA7x3y3pfa5TP0=
Subject key identifier:   7C:E6:7B:D4:E5:B9:CC:03:8E:1B:43:F2:A3:05:9F:76:0A:5C:38:F7
Certificate issuer:       /CN=170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca
Certificate serial:       010D0C9F4328584F093D135B138A9927EF9ABE00
Authority key identifier: 1F:B2:DF:F8:09:2C:B0:75:06:BA:6A:2B:CF:43:01:E6:B0:3B:17:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/95df7630-80ac-3426-806b-4815cc0fd331.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     40505
IP address blocks:        192.64.22.0/24 maxlen: 24
                          192.64.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:13:5b:13:8a:99:27:ef:9a:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=c58b3a8e-6e16-419b-b0d2-9dadd149a9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5b:c0:03:1f:fc:6b:4a:c6:68:02:6f:ab:09:
                    5a:0e:39:85:fa:0e:9e:1e:99:0d:32:0a:a5:1c:2d:
                    51:bd:bf:3d:d7:73:59:20:cc:1d:84:10:9c:b8:34:
                    d1:92:92:e4:a0:5d:d1:17:c2:3e:24:f7:3b:a5:b4:
                    e1:f6:39:c9:dc:4f:6d:0c:86:48:6c:d2:dc:cb:92:
                    5d:46:ae:ab:fe:10:dd:2a:48:69:62:39:dc:b4:e3:
                    1c:3e:c9:73:39:30:22:a0:31:b1:f1:ca:e4:d5:7c:
                    f0:c8:b8:46:76:3c:97:36:1b:9a:d6:94:d5:ca:5b:
                    d1:32:37:5e:ca:1a:f4:2e:57:a4:49:97:fd:2a:b9:
                    da:56:4e:ad:51:f7:f0:21:b3:b8:37:6b:f4:54:7d:
                    23:64:52:9b:16:a8:47:4b:84:96:78:eb:47:ca:1b:
                    69:7e:f0:88:9e:40:3b:da:2c:3a:10:1b:48:38:87:
                    34:76:21:ab:e6:e8:5a:d8:8c:2f:2d:dc:c8:cb:6a:
                    de:11:f3:e0:d6:59:a7:03:ae:0f:31:60:3c:ac:c6:
                    4d:7b:a4:cc:41:df:eb:6f:d4:3a:b6:d2:03:e5:9c:
                    1f:bd:fb:d1:1c:2c:f4:88:27:fb:1b:8b:3c:4b:72:
                    7a:fb:b2:ec:69:aa:93:2d:72:24:98:f8:2c:1a:66:
                    91:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E6:7B:D4:E5:B9:CC:03:8E:1B:43:F2:A3:05:9F:76:0A:5C:38:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/95df7630-80ac-3426-806b-4815cc0fd331.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.crl

            X509v3 Authority Key Identifier:
                keyid:1F:B2:DF:F8:09:2C:B0:75:06:BA:6A:2B:CF:43:01:E6:B0:3B:17:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/170f06cc-7ad0-4334-88b2-4aa7f9cfc6ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:87:b9:3d:b0:47:00:3c:2e:30:8d:d9:c2:ee:be:53:3d:
         da:a4:3c:14:4c:3c:2f:66:34:34:d8:e5:c7:f4:ed:83:70:c4:
         aa:b2:73:c3:cc:10:74:9d:35:92:46:1b:81:a0:66:f6:6c:ee:
         36:0c:26:41:09:75:19:b7:32:b1:5d:ec:bc:8a:dd:1d:80:df:
         80:d4:cc:a9:4c:2c:18:c5:39:f5:ac:27:c2:f2:d8:b4:a6:74:
         36:d4:e0:b0:a7:30:1d:e2:11:a7:4a:63:3e:f4:1b:c9:22:a1:
         3c:c0:11:c7:93:69:0c:0d:d0:e5:16:a7:50:e0:bc:7a:48:e5:
         ca:96:d2:b4:d1:66:5f:ba:74:81:b5:87:d1:83:44:b2:80:01:
         c8:cd:f6:5e:62:ae:e8:f6:cd:d0:96:69:ed:38:f3:63:93:00:
         f0:50:d9:84:a0:36:32:fc:ad:d3:21:c7:00:c5:4f:09:cc:3c:
         c7:9e:91:2b:9d:2c:6c:cb:24:50:cf:29:4a:b8:f9:14:82:3b:
         bb:3e:aa:c4:3c:b5:5c:2e:c1:e6:d1:e6:51:cc:3c:55:a9:38:
         b0:65:d5:61:b1:53:78:37:20:e8:0f:2f:d9:3c:c4:bc:54:d7:
         65:ac:c5:b7:06:84:ce:47:9a:a3:f4:cb:13:73:59:28:5d:cb:
         b8:8b:63:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:38:47 2026 by rpki-client