Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/89497639-b474-3049-bf36-ec4bc0d6f185.roa
File:                     89497639-b474-3049-bf36-ec4bc0d6f185.roa (raw, json)
Hash identifier:          H7zazRkurHShJNKJrYVcqGaJyeDbcBDtFaDVfjdglTs=
Subject key identifier:   2E:1D:8F:5E:5D:8F:65:64:CB:07:AE:A4:93:25:CC:A6:61:0A:80:78
Certificate issuer:       /CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65
Certificate serial:       010D0C9F4328584F0ED22E2794EDC0BF6BDC8380
Authority key identifier: 3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/89497639-b474-3049-bf36-ec4bc0d6f185.roa
Signing time:             Fri 04 Sep 2026 01:00:12 +0000
ROA not before:           Fri 04 Sep 2026 01:00:12 +0000
ROA not after:            Thu 03 Dec 2026 02:00:12 +0000
asID:                     30286
IP address blocks:        192.225.156.20/32 maxlen: 32
                          192.225.156.21/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0e:d2:2e:27:94:ed:c0:bf:6b:dc:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb9f3dc5-4d82-4d82-ae22-349c75195f65
        Validity
            Not Before: Sep  4 01:00:12 2026 GMT
            Not After : Dec  3 02:00:12 2026 GMT
        Subject: CN=c63b8d30-9784-42ab-ac18-7ecb5569c406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1b:12:c2:f7:fb:8c:f8:ac:59:48:a7:82:1d:
                    6f:83:e3:32:99:24:21:8f:85:a9:37:0d:17:e7:ff:
                    c2:f5:70:a4:a8:b1:e7:64:45:fe:16:ad:40:3c:34:
                    cc:2a:31:8d:c3:2e:f1:91:09:5c:83:5d:ab:75:e1:
                    3f:fd:52:67:02:0f:2f:d8:7b:e2:b5:79:63:be:11:
                    c1:18:fd:bf:3d:c0:bb:68:1a:a7:36:6b:da:03:2b:
                    7c:bf:96:bd:85:1b:4b:c8:a5:5b:9b:c1:9c:a5:f9:
                    53:2d:89:f9:66:16:7c:25:38:c6:43:df:c4:8e:c1:
                    bc:02:66:2b:2f:01:a0:9b:40:f9:00:d0:ea:b2:1f:
                    68:da:7c:d4:99:fb:b6:0a:78:8e:51:0c:52:85:73:
                    e8:b1:66:3c:31:88:42:d1:24:4e:31:2a:bc:69:b6:
                    2b:c5:b7:ec:0d:1f:77:5c:38:39:89:27:c6:11:44:
                    be:b5:7c:89:90:0f:48:6c:b0:ef:48:ec:7c:f2:81:
                    cf:8d:64:64:63:5d:96:22:d1:20:64:12:b2:5e:a1:
                    c5:71:bb:55:1e:b3:cc:ed:2c:55:cc:eb:7f:36:59:
                    a7:ec:ab:76:e0:d1:a7:43:e9:9f:02:8d:ca:1f:2d:
                    4d:2f:0e:4d:0f:a0:17:b9:d7:a3:a9:26:7d:ca:fc:
                    b2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1D:8F:5E:5D:8F:65:64:CB:07:AE:A4:93:25:CC:A6:61:0A:80:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/89497639-b474-3049-bf36-ec4bc0d6f185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65/cb9f3dc5-4d82-4d82-ae22-349c75195f65.crl

            X509v3 Authority Key Identifier:
                keyid:3B:9B:BA:FC:6C:3C:EF:C2:F5:8A:A8:A5:BA:88:C5:16:10:2E:A5:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cb9f3dc5-4d82-4d82-ae22-349c75195f65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.225.156.20/31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:bc:e5:a5:57:5d:ad:ba:87:85:a5:a3:65:27:f0:bd:3f:ec:
         f4:d6:0b:db:91:dd:81:5a:1e:70:e5:9c:db:2d:14:58:25:bc:
         5e:90:84:5a:db:d7:76:be:d2:40:a4:7e:82:33:60:9b:20:90:
         1f:1d:e8:b9:47:83:c4:6a:9c:c9:e5:e5:9a:2f:4c:b7:69:b7:
         f7:89:8a:d7:d3:45:25:e5:57:b1:33:b7:60:b9:7e:bc:fd:f9:
         2a:1a:74:f0:63:33:60:6a:8d:b7:c7:90:66:75:87:af:e6:dd:
         6f:d2:b0:98:81:1f:4a:82:a0:24:c8:4b:c2:96:9e:56:bf:61:
         c2:be:0a:cf:20:e2:ac:fc:7c:a5:72:d3:b7:c9:74:00:d8:27:
         b7:6c:8c:05:6e:74:5f:a3:00:55:1b:4a:92:de:d4:37:ef:7b:
         70:0b:df:6d:4e:5a:96:5f:80:99:fe:0a:93:b0:dd:53:94:8c:
         59:1e:8d:9d:b1:94:ac:e7:84:8d:bc:ce:ff:ad:a5:02:7a:b5:
         8c:54:7d:04:0d:5d:91:36:45:d4:be:3e:33:27:e7:06:e0:4b:
         54:85:65:35:89:da:d4:52:b9:f3:f9:b0:d2:db:a5:23:8b:81:
         15:2c:a8:78:8a:c3:3c:00:92:6e:1c:d1:16:62:0e:af:a6:06:
         b8:fb:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:18:16 2026 by rpki-client