Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ace3c49a-a43c-3c1b-8339-19905b27cd4e.roa
File:                     ace3c49a-a43c-3c1b-8339-19905b27cd4e.roa (raw, json)
Hash identifier:          qVrXbIrk5UShGuMv7FWHZ0K4A9LTxANh1TRbmLASZqo=
Subject key identifier:   24:5A:4F:93:81:DD:2F:26:AA:1D:DB:2B:4D:40:B7:3E:F1:4E:24:54
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F8F3DB6C422F14CEE0D74C880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ace3c49a-a43c-3c1b-8339-19905b27cd4e.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     24319
IP address blocks:        184.28.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:b6:c4:22:f1:4c:ee:0d:74:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=13424e7f-a27c-4b37-8ecc-33fae5ad5213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f1:7a:18:7b:4d:b8:c8:41:34:8a:12:9c:fa:
                    2d:15:85:e5:e3:e7:f9:bd:99:4b:8c:33:e0:2d:ab:
                    b1:14:fb:55:63:2a:37:69:c6:60:a0:ca:fe:11:30:
                    59:d8:51:fe:ba:fd:b5:9a:c7:80:d5:e8:42:19:de:
                    cd:84:ca:81:13:67:39:c8:ef:fc:2b:89:bf:25:d0:
                    e6:24:4a:d5:b7:df:05:2b:ae:e1:b0:9b:01:6b:7d:
                    e8:5b:54:7d:2f:d4:fe:96:f6:8f:6d:b5:17:3d:0e:
                    dc:bd:f2:37:68:ac:71:5f:88:fb:68:c7:0a:db:08:
                    d7:83:6a:49:ea:c0:4d:74:44:fc:85:43:d0:25:b7:
                    8c:85:77:f1:93:da:3d:a9:42:00:06:80:61:0b:74:
                    dd:e6:4a:6d:71:f4:0b:60:42:8b:1e:c4:d7:b3:76:
                    f1:d8:3f:19:7a:7b:92:16:0d:11:ef:6c:45:b0:74:
                    a2:d1:48:2e:bd:5d:f3:63:f0:97:2e:91:5f:58:b4:
                    83:65:e6:a1:2a:ed:70:fa:2f:f8:42:8d:82:7f:1c:
                    9e:a3:f3:5f:a5:ef:2d:fe:7e:f2:06:d6:0c:84:15:
                    9f:a2:5c:57:f6:2b:8d:94:25:ba:81:44:c2:cb:29:
                    3b:4c:ce:8b:ed:19:2c:8f:d2:88:99:9e:d8:1a:69:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5A:4F:93:81:DD:2F:26:AA:1D:DB:2B:4D:40:B7:3E:F1:4E:24:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ace3c49a-a43c-3c1b-8339-19905b27cd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:cc:f4:a5:70:15:73:d3:13:9b:fc:c0:e3:c3:91:ad:b0:8c:
         2a:60:dc:67:6e:e5:14:46:a8:d9:11:21:34:3a:aa:c2:a1:b0:
         af:bd:02:9a:46:dc:5b:ab:bf:1d:4e:14:84:15:cf:0d:7f:a8:
         74:8c:29:bb:84:96:a9:e8:08:7b:8d:76:41:30:d1:14:f9:91:
         39:90:f5:1b:c0:bf:15:3d:ed:d2:41:b3:a8:e8:f8:ba:e4:4c:
         ae:3e:96:84:80:0a:1f:ba:a9:b4:c4:05:cd:34:de:2d:4b:7b:
         e1:2f:fd:57:94:e9:42:ed:d9:df:d0:ce:61:9f:c6:f9:53:09:
         c7:78:1e:13:4e:b7:c5:10:ba:14:d5:e6:30:09:99:06:4c:7d:
         6d:a6:b9:3d:07:02:75:4d:7c:8b:2a:9c:c6:51:aa:33:cb:88:
         73:e8:55:8e:cb:82:7f:e6:a3:16:9d:c6:7a:e2:7e:c0:e6:3e:
         13:74:79:9b:f6:e1:b2:85:1c:f8:47:80:10:dd:b3:39:2d:7a:
         28:44:99:23:95:ee:dd:99:e4:42:40:5b:90:83:ee:33:1b:bf:
         eb:ca:f5:cc:ea:16:1d:ec:4b:ad:74:b6:a5:41:c3:b1:b4:00:
         a2:32:15:a6:ea:29:5f:c3:1d:c9:50:6f:55:62:47:d5:46:2f:
         4a:1f:ac:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:48:44 2026 by rpki-client