Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/00a37318-afa8-384f-b4e4-90f8dd8523ea.roa
File:                     00a37318-afa8-384f-b4e4-90f8dd8523ea.roa (raw, json)
Hash identifier:          gKtVyLHfEV7EA748O/6fEAP3IFo1u67zSZYgcQfgMrs=
Subject key identifier:   92:B5:99:2E:92:9D:51:65:E2:7A:02:92:5F:09:68:79:2C:C7:3D:6D
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584EA7943A107680F426480A8C80
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/00a37318-afa8-384f-b4e4-90f8dd8523ea.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397373
IP address blocks:        192.154.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:3a:10:76:80:f4:26:48:0a:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cd9e45d5-cdb0-4491-a886-88c44e2bdee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:2d:2a:a9:bd:ae:36:b3:a2:f7:31:92:be:
                    a9:bd:30:df:17:a0:ba:66:6d:92:fe:ce:c6:fb:79:
                    bd:3c:45:d1:53:3e:96:e8:d1:e5:e8:b0:3c:65:6c:
                    dd:7a:fa:83:52:f8:8c:c6:0c:f6:48:a8:dc:ff:08:
                    66:21:ee:67:15:99:39:ae:cc:d1:73:4b:da:67:f9:
                    c0:1e:18:23:6d:91:c6:4d:5a:ee:3c:25:27:63:e2:
                    eb:8d:5a:eb:06:4f:ea:4e:10:00:81:28:37:53:2d:
                    b7:23:f7:5e:35:57:45:c1:c2:8b:d3:fd:af:ff:c3:
                    99:39:ab:81:6b:ed:a1:cf:40:76:67:e2:07:55:0e:
                    84:2a:68:8b:cf:d5:df:ed:0f:16:f3:6a:66:a5:36:
                    bd:38:41:b2:35:d4:cb:ad:25:6e:33:72:21:fd:38:
                    ef:8d:1b:de:6c:dc:e0:18:e2:8c:fb:fd:58:61:d1:
                    6b:14:ea:b9:ec:98:4f:fa:0c:0d:4d:3a:69:9a:42:
                    4b:88:4d:02:d2:70:e9:cb:4d:7f:04:e0:66:e5:b7:
                    7f:4a:ed:df:16:8c:bb:58:fb:29:c2:2a:c6:ed:4d:
                    c6:21:25:b3:f9:1a:12:38:05:ab:61:2c:92:11:b3:
                    ba:9e:ed:08:ba:25:19:a8:f7:44:a7:41:5a:7c:65:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:B5:99:2E:92:9D:51:65:E2:7A:02:92:5F:09:68:79:2C:C7:3D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/00a37318-afa8-384f-b4e4-90f8dd8523ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:09:d8:7c:2a:19:56:74:ab:10:a3:23:6c:68:7f:97:0c:59:
         8e:20:61:48:2a:d7:85:dc:13:69:7f:40:73:f5:b7:3e:f1:ed:
         bd:b8:4d:6d:4a:34:44:d5:8c:83:6e:3f:7e:a2:82:86:34:79:
         c0:8e:55:83:7b:88:0b:e2:3f:f6:6c:d4:e5:48:ac:88:09:2f:
         64:0c:cb:c2:69:bd:46:99:94:0b:f9:35:7b:1f:6e:ee:cb:49:
         2e:56:fd:47:fa:8e:35:70:ba:55:1d:36:87:78:36:f4:d4:7f:
         5a:f4:c0:8c:b3:32:82:dc:01:fd:20:8a:e3:51:1e:61:63:32:
         35:34:fa:4b:17:22:ff:c0:00:cc:00:d5:6e:f4:e1:15:8e:dd:
         eb:af:48:a9:72:99:58:33:23:26:cd:82:02:2d:0b:f2:c9:dd:
         71:6f:77:77:1e:a9:f3:d4:0d:7c:a5:4c:70:b4:6b:7c:f6:1b:
         a0:5d:d0:6a:19:bc:31:67:83:40:c2:12:ed:95:17:81:64:4d:
         c7:f6:9b:e9:9d:32:4b:5c:08:14:4f:9c:c1:98:e3:96:78:be:
         8f:39:9a:b6:03:0c:dc:d1:d1:c0:83:00:99:53:89:04:f3:3c:
         ed:26:2b:c3:9f:49:36:b5:0c:b6:13:3e:7c:d6:75:37:09:a7:
         3e:68:dc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:40:46 2026 by rpki-client