Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/d3546048-56a4-3bbf-9a5d-090fd3d997ef.roa
File:                     d3546048-56a4-3bbf-9a5d-090fd3d997ef.roa (raw, json)
Hash identifier:          SNRlMHnpChcgCKk+CSyBf96MBBwSkD0XGw+SmUYOeOw=
Subject key identifier:   35:F4:6E:85:D0:DB:28:2A:86:2A:C0:DF:27:C2:EA:9A:FC:AE:19:0D
Certificate issuer:       /CN=7ed23894-86e6-4cc5-bf0f-6e077e092448
Certificate serial:       010D0C9F4328584F8DD8915CE0EC3B925AD5B540
Authority key identifier: FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/d3546048-56a4-3bbf-9a5d-090fd3d997ef.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     3925
IP address blocks:        192.5.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:91:5c:e0:ec:3b:92:5a:d5:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed23894-86e6-4cc5-bf0f-6e077e092448
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=d033bdaf-bee6-4859-a137-94da71ef67a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:89:63:40:b3:b3:f4:f8:15:5d:ae:30:16:13:
                    f1:5d:18:bc:11:c3:7c:6e:2c:81:3f:b7:d0:6a:31:
                    b1:06:f9:57:75:71:53:82:df:d7:ac:6f:1b:52:68:
                    09:08:71:52:9c:ae:55:36:47:67:52:e6:73:22:a8:
                    80:15:d4:ba:f1:07:0f:b1:db:6c:ac:5b:d1:bc:b7:
                    30:d5:18:6e:0c:b3:e0:1c:67:0b:f5:cd:e2:31:06:
                    10:2c:26:44:a8:e6:a8:eb:4c:3d:43:ac:db:42:be:
                    bd:a0:0e:56:78:40:d9:10:2d:68:12:4a:9d:b2:71:
                    52:c6:94:56:2f:41:aa:6c:bf:9e:5a:94:03:63:fe:
                    79:78:c6:db:8d:61:e9:f6:98:2a:8c:3f:63:d9:f7:
                    fe:11:a3:44:cd:96:9f:05:1b:1c:9f:29:17:77:7e:
                    d2:3f:08:be:85:ba:2b:64:2a:bf:2a:64:7d:52:b8:
                    b9:a4:2a:9d:ad:c8:27:3b:92:ff:b4:a4:b5:1e:4a:
                    64:ee:e0:1e:42:db:14:41:41:db:41:4b:6a:19:ef:
                    f5:50:8e:80:3c:f5:6a:7f:2d:c2:bc:1d:b6:5a:c1:
                    0d:f0:84:95:44:dc:17:6b:1f:45:a3:df:de:fd:a9:
                    bc:4f:97:26:09:7c:bb:9f:60:09:37:9b:ac:f2:b0:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F4:6E:85:D0:DB:28:2A:86:2A:C0:DF:27:C2:EA:9A:FC:AE:19:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/d3546048-56a4-3bbf-9a5d-090fd3d997ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448/7ed23894-86e6-4cc5-bf0f-6e077e092448.crl

            X509v3 Authority Key Identifier:
                keyid:FB:7B:B8:33:51:D5:9E:1A:A0:1A:6D:F5:67:A0:13:78:0C:D7:31:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ed23894-86e6-4cc5-bf0f-6e077e092448.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:19:95:48:b7:18:db:04:b6:06:9d:41:f2:f7:71:66:62:86:
         1a:04:02:9f:7b:ff:0e:2f:e1:bb:93:33:6c:89:f6:53:e7:92:
         79:b9:f0:80:7f:e4:63:15:6b:c6:d8:18:08:29:25:1b:21:ba:
         3c:ee:87:26:d2:b0:1c:b1:ed:41:8a:7c:03:3c:3f:d8:e5:09:
         a6:39:64:7a:1f:ba:f3:e6:a4:2d:30:9f:e4:7b:90:c9:3c:6f:
         a5:ce:99:d2:6e:4d:e3:f2:e0:3d:27:5e:91:74:d6:10:fc:2d:
         b7:17:ab:f2:27:78:07:b1:d4:a6:93:59:2f:fb:a8:05:6a:15:
         06:e7:fc:58:c9:4b:a0:cb:93:a0:f3:17:dc:b0:af:68:95:c7:
         92:77:a2:51:71:e6:35:32:fb:a1:0a:4e:b1:52:df:c1:be:6d:
         2b:0c:f0:f7:a4:84:b9:05:82:f5:3f:a8:6a:9e:f2:ca:cd:16:
         19:61:83:bf:2a:9e:9d:b3:23:17:88:41:86:1c:ab:19:a8:1c:
         04:27:51:06:d4:dd:df:9f:17:0e:aa:6d:31:fc:9b:35:f4:bc:
         64:32:57:52:a2:fc:71:cb:ad:64:64:89:6a:28:31:ce:b2:9f:
         5a:d5:d7:63:22:cc:bb:bd:75:df:bc:70:b7:8e:cb:07:93:62:
         90:20:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:46:08 2026 by rpki-client