Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa
File:                     4788700d-5f68-32af-b8a9-fbb0558d4b24.roa (raw, json)
Hash identifier:          elGAdNSVWdqMFZ8N9ssri/NQnLzdEcmFPM2jctufSfs=
Subject key identifier:   A0:12:62:73:98:96:DD:4F:AE:68:AB:A3:67:98:E3:E5:56:46:D6:F9
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F498505E8DB7FA84543DBAA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        173.194.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:05:e8:db:7f:a8:45:43:db:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3c528dd5-e444-4f67-a822-abf1ab572f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:30:39:d2:16:78:eb:d7:91:82:20:f6:0c:6b:
                    63:5f:19:b8:b2:9f:85:af:82:aa:0a:63:e9:fa:79:
                    01:85:b0:95:68:c0:bb:b9:1f:9d:51:58:86:06:47:
                    07:5e:c6:07:b8:e6:8a:c3:56:a5:9c:ac:69:a0:bf:
                    e3:4f:a7:f2:90:62:95:7b:7d:49:0f:0f:20:01:60:
                    2f:f7:78:5b:0d:64:05:bb:dc:30:85:19:92:1b:03:
                    90:a3:f2:97:27:b7:cd:b2:ed:8b:00:e7:df:3c:a1:
                    56:dd:a6:8c:28:4c:39:15:e2:ee:30:52:0e:22:7d:
                    0c:6b:bc:ef:b5:a0:90:28:e7:4a:78:05:be:8f:82:
                    00:9a:b7:79:82:42:f7:b0:3b:88:4f:84:a0:da:45:
                    a3:ae:80:73:1b:e4:a8:b1:7f:0a:c3:11:ae:9f:18:
                    d2:9c:91:16:49:f8:02:bc:00:42:d8:60:7a:65:fa:
                    62:e7:33:20:6b:5c:e7:4f:c9:bb:24:35:0c:e7:69:
                    3f:f5:c4:87:26:1d:f5:93:44:53:12:02:0a:75:ce:
                    0d:24:c1:6c:a8:6f:ab:70:d8:d4:82:6b:2e:33:73:
                    57:54:6e:a9:28:77:37:89:a2:82:f6:d9:97:aa:25:
                    00:ae:a1:99:12:16:35:b1:7d:86:b7:27:5d:3d:63:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:12:62:73:98:96:DD:4F:AE:68:AB:A3:67:98:E3:E5:56:46:D6:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:eb:fb:98:f3:b9:d3:ec:2d:ae:eb:17:b7:3e:ac:c0:20:66:
         eb:36:e1:1c:ca:f2:72:95:e5:56:2e:cf:d9:49:15:34:48:f1:
         97:13:7d:39:79:7b:e3:cf:f4:ff:79:67:39:40:b5:93:8d:f4:
         db:af:ce:1c:91:14:c2:01:db:e1:e0:41:2d:4a:81:a8:43:98:
         eb:d8:60:82:b0:59:51:10:79:79:cc:a1:b9:70:71:d5:94:9d:
         99:89:5d:b9:13:f5:14:9a:b5:91:1a:90:ec:fa:2e:2d:aa:f1:
         59:1c:07:6d:c5:7f:1f:8a:69:e2:ec:82:99:3d:db:f5:3c:46:
         4c:06:13:83:6b:08:ff:fc:63:27:e2:8e:b6:7a:80:29:88:6c:
         52:ab:c3:5c:b5:88:e0:3a:68:0a:c4:a5:8c:cf:27:bb:0d:2f:
         85:94:fc:b3:fd:1d:fd:61:d7:3e:a7:2f:9d:08:67:65:46:d6:
         87:21:44:96:04:3f:ad:c0:6e:d6:79:77:81:54:cd:a4:f4:e5:
         c7:fd:30:2a:4b:b4:dc:cf:a4:dc:9b:11:67:3d:0a:3b:bb:5f:
         5b:13:c9:7d:7e:6a:64:96:70:41:7b:18:32:ad:62:c0:ad:b7:
         43:90:dc:82:69:ba:06:4d:a1:4e:af:df:a7:87:e3:98:fa:f4:
         51:ac:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:37:19 2026 by rpki-client