Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c35a9027-7df0-310e-bb21-9385cdfbc5f4.roa
File:                     c35a9027-7df0-310e-bb21-9385cdfbc5f4.roa (raw, json)
Hash identifier:          G3XQs/tktWqQg92Jq8ZinqN3ZRg5uyYgqA+fG9RruPs=
Subject key identifier:   D3:66:37:B9:1D:30:D9:7D:A4:59:56:99:B5:5E:90:31:FA:2E:7E:1A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA4452723A68D7639E313F900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c35a9027-7df0-310e-bb21-9385cdfbc5f4.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     15169
IP address blocks:        192.179.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:27:23:a6:8d:76:39:e3:13:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=d43bddfc-92b8-4552-97d0-119e1f73e94e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:d5:cc:ea:05:46:66:03:03:60:da:cb:b4:
                    33:fb:12:8e:76:0a:a3:06:79:8c:a8:59:ea:4a:4a:
                    51:de:9c:64:ad:8b:3a:8d:fa:b2:1d:8e:f4:7d:e2:
                    8d:85:2d:6d:1c:6a:06:9c:9e:2d:8a:76:a5:2d:55:
                    78:61:50:5a:97:b4:18:ca:ca:20:00:a5:62:3f:98:
                    1f:31:f5:c6:09:68:de:ad:24:c9:be:76:55:fd:61:
                    fc:3d:a1:57:21:21:80:13:a7:4e:5b:10:51:5b:60:
                    ed:d2:1a:f9:01:b2:f2:1d:97:4b:32:be:3a:6d:53:
                    90:3f:a3:43:46:3b:73:63:f7:ce:07:2b:0a:a3:77:
                    d6:03:a3:b1:71:f5:20:24:13:51:1b:a1:c1:52:1a:
                    c9:1f:6c:6e:71:89:aa:7e:cf:0b:28:72:50:22:7e:
                    34:55:df:7c:e4:53:b4:08:36:9e:04:06:86:28:8c:
                    e8:36:ce:d6:eb:c7:5d:34:8d:7a:3e:02:92:57:0f:
                    fa:86:b0:08:49:4e:79:c3:42:bf:8c:d5:66:f0:36:
                    9c:9c:17:66:02:8c:9e:c5:b4:b8:db:e9:27:f5:85:
                    ed:20:4c:21:72:ee:57:81:1e:e8:4e:9e:df:f5:b3:
                    52:09:b1:d4:04:9b:b0:c0:f7:b6:aa:1c:9d:dd:33:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:66:37:B9:1D:30:D9:7D:A4:59:56:99:B5:5E:90:31:FA:2E:7E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c35a9027-7df0-310e-bb21-9385cdfbc5f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.179.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:34:ea:c7:b9:de:63:a7:06:f1:4b:7a:38:7e:6b:ed:12:c5:
         fa:cd:5d:f8:a6:e3:72:08:5f:c3:9c:99:82:bc:d6:60:16:be:
         e0:aa:b9:92:06:eb:50:50:60:47:88:f8:52:a7:2f:26:b6:99:
         85:b9:e2:56:6f:b1:af:bd:df:29:f1:ad:51:db:c2:39:8b:3f:
         8e:56:21:97:11:7f:12:23:52:69:6d:fd:2f:40:24:df:6d:73:
         31:2c:02:a4:68:fe:5a:37:dd:f7:c5:8b:a7:78:41:0d:ed:3a:
         78:ec:10:28:b6:f8:29:6f:8c:5b:ca:28:31:5d:c8:e3:85:46:
         4a:06:b0:be:76:98:d5:67:dd:bc:82:84:a9:3c:44:db:96:ef:
         ba:2c:32:b4:bf:c5:f2:7c:cc:44:8b:84:b7:1a:36:57:39:a2:
         1d:b4:f3:a6:a2:be:4f:bf:dc:1d:88:1f:ec:bb:f2:18:ef:6c:
         24:fe:7b:42:e6:08:ef:f2:87:bd:60:b4:07:8a:50:e3:8d:18:
         b4:04:0d:62:68:95:f1:46:58:98:e4:e2:7d:97:3d:20:f2:49:
         cc:08:8b:81:17:45:c1:0e:85:64:5a:4b:f3:c6:27:55:1f:94:
         fd:1f:ea:84:ef:68:23:d9:95:53:bb:28:c1:0a:57:a8:f6:45:
         a8:f1:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:28:43 2026 by rpki-client