Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa
File:                     c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa (raw, json)
Hash identifier:          V2cDVkAgv2AnTZWKsJhAirbifAJfrcuSGSmO2RA6LlE=
Subject key identifier:   5B:F0:8C:E9:82:01:93:46:11:1E:8A:21:DF:D9:EF:19:74:D3:CF:2E
Certificate issuer:       /CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
Certificate serial:       010D0C9F4328584ECBD1D31B402C1AB48CD73920
Authority key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     2906
IP address blocks:        192.173.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:d3:1b:40:2c:1a:b4:8c:d7:39:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=76ebbdf0-e1a9-4e27-8e43-e23122ddb119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8e:c2:fd:ae:9e:e5:a4:15:d6:4e:59:b4:c2:
                    dd:a8:4e:11:08:b3:0e:dd:e5:12:16:c4:c7:51:b9:
                    34:bd:f2:1f:d3:2f:12:3d:20:38:d1:b2:d4:fa:9a:
                    56:e1:ea:0d:72:9f:22:46:8c:99:6d:95:bf:49:d4:
                    3b:ae:be:b4:b1:99:6b:97:4e:ab:38:3b:ea:fb:05:
                    06:a5:06:3d:3d:d8:b4:f0:36:05:e0:ce:79:46:f9:
                    96:b6:1f:0f:2d:76:a5:3b:98:8f:46:17:f4:3a:e8:
                    c5:bc:bf:c6:13:48:69:b8:59:04:a5:4e:ac:99:0d:
                    a8:ba:13:2a:2b:b3:e0:ba:b3:69:17:f9:36:cd:82:
                    81:f8:61:31:ea:b5:8c:36:41:e0:29:b2:e4:54:18:
                    03:96:d8:02:cf:30:04:03:94:1f:66:34:dc:65:05:
                    3e:74:fe:22:b8:10:61:c6:0b:e4:67:8b:27:a3:1b:
                    95:36:a9:7d:fe:f7:17:fc:ac:f1:36:ef:f3:f5:1e:
                    cc:9b:03:ec:66:d0:80:9c:89:2f:7b:d6:6e:37:17:
                    9f:61:00:a4:34:d7:b8:91:c7:ed:cd:d7:44:63:f4:
                    b0:dc:0d:0e:7f:a9:9d:9e:3c:fe:76:b7:ed:f7:ef:
                    8d:1f:07:e1:f6:b2:51:0d:b1:21:22:94:a5:7a:a4:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F0:8C:E9:82:01:93:46:11:1E:8A:21:DF:D9:EF:19:74:D3:CF:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/c446cc6c-7387-3dba-951b-1ead1b34d2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.crl

            X509v3 Authority Key Identifier:
                keyid:58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.173.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:e0:a2:9c:bf:14:ba:d4:a0:bf:7b:78:14:48:f3:2e:56:80:
         1f:38:1c:9d:a9:c0:fc:35:76:93:a7:7f:35:a9:0b:51:aa:7e:
         a9:a3:8d:c1:01:89:f6:0c:22:41:2b:23:0f:3b:6e:ad:62:fd:
         f3:4f:0b:dc:26:86:88:a0:25:d3:e1:27:6a:68:77:6e:bd:4b:
         eb:b2:75:fa:96:7e:f7:5a:2a:d8:23:1d:25:d0:10:8e:a8:7e:
         9c:e5:12:bf:c5:2a:46:37:b2:12:06:84:45:3f:a2:b0:ad:f5:
         61:81:01:d1:74:a8:b3:43:22:af:55:0f:74:07:ab:73:53:01:
         1f:af:6e:a8:8d:bd:27:8e:4b:7e:67:0a:68:9d:50:db:9e:bc:
         e0:d6:47:96:60:8b:da:64:16:5b:80:0b:73:c1:93:f3:a8:9e:
         ae:cb:de:2d:f9:f3:b4:7e:22:2c:a4:0a:be:13:d4:43:d6:91:
         65:86:44:d9:a1:c2:db:cb:58:4d:9d:cd:10:bb:8f:09:94:0b:
         cb:3c:e5:f0:20:4a:59:9c:fc:c9:ce:62:d6:ff:a4:3c:29:06:
         bd:f9:72:c0:5c:3a:b6:22:59:9b:e4:5a:16:f2:45:5d:cf:4a:
         87:8a:85:b8:93:68:f9:99:b2:bd:8d:98:a9:1a:80:0e:94:98:
         e5:b1:a9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:19:42 2026 by rpki-client