Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/eb8a6289-85e4-328b-a1ba-fe1cf8e38653.roa
File:                     eb8a6289-85e4-328b-a1ba-fe1cf8e38653.roa (raw, json)
Hash identifier:          J9uY5A25izjCOAGc43EAQG+NhR4toDOakuqU0sHdjss=
Subject key identifier:   D8:DF:44:BC:D1:57:98:52:92:83:14:65:89:0C:C9:C9:98:BA:A1:04
Certificate issuer:       /CN=86375a98-0294-4970-a5b8-3fec0469382c
Certificate serial:       010D0C9F4328584ECD371795D967413B7A8F0010
Authority key identifier: 49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/eb8a6289-85e4-328b-a1ba-fe1cf8e38653.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     3783
IP address blocks:        192.91.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:17:95:d9:67:41:3b:7a:8f:00:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86375a98-0294-4970-a5b8-3fec0469382c
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=1726f6b1-1a39-4544-9072-a60d621bd0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:eb:2d:1c:03:d3:b0:00:70:8b:e5:d1:5b:fd:
                    a6:ec:ee:f0:da:11:49:51:7e:42:ab:5f:21:1c:82:
                    63:02:90:2f:c3:b0:b5:f7:a8:fc:50:b2:a0:7a:60:
                    c5:46:ca:37:f5:be:a4:f8:ae:ce:d4:b2:d5:e3:7c:
                    c0:07:d5:0d:d8:a3:6f:57:ab:4c:97:c9:2a:5e:43:
                    0e:11:bb:2d:72:c7:63:de:43:58:af:6e:2a:5a:ad:
                    59:62:04:8e:e9:9f:16:08:a2:c9:96:92:d6:b8:99:
                    3a:40:f7:6f:25:6d:88:08:e1:e6:7b:e1:08:6a:3a:
                    6e:3c:39:f5:52:40:6a:40:46:87:3b:0d:04:ed:b6:
                    75:41:1a:c7:fd:e0:6f:08:c3:ac:05:47:e6:23:b8:
                    90:1b:a0:51:33:fa:97:74:55:5a:b7:36:a4:06:ac:
                    9d:e9:c4:a1:bc:48:3c:3b:84:84:d3:42:9f:bd:21:
                    53:00:c4:13:04:97:bd:2c:eb:6c:c5:42:13:c8:c9:
                    9e:8b:bd:8f:33:51:c5:ec:74:b0:96:e7:62:9e:94:
                    da:51:e8:9f:2b:ba:e6:34:cc:92:ff:f5:6b:a0:be:
                    d6:70:c6:07:67:e0:21:13:aa:c2:7d:d5:99:c2:36:
                    31:1d:f6:19:4c:5b:39:6d:72:79:44:ba:bd:30:e8:
                    f2:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:DF:44:BC:D1:57:98:52:92:83:14:65:89:0C:C9:C9:98:BA:A1:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/eb8a6289-85e4-328b-a1ba-fe1cf8e38653.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c/86375a98-0294-4970-a5b8-3fec0469382c.crl

            X509v3 Authority Key Identifier:
                keyid:49:E7:FD:D9:B1:0B:A2:3D:7A:75:9E:08:39:AD:37:BA:D3:18:01:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/86375a98-0294-4970-a5b8-3fec0469382c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.91.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6a:d3:d0:8f:09:47:0e:af:39:04:a7:5e:7e:cf:2d:b1:7d:
         52:87:66:27:f8:a4:0c:c1:08:4c:fc:e4:bf:f0:ab:58:b9:e6:
         1b:91:ba:d8:3e:3d:7a:1a:24:ed:5d:2d:44:d5:71:bc:3e:24:
         b9:6e:e2:f5:2a:45:b7:b5:95:8d:b0:2b:fe:d4:80:3f:bc:5a:
         44:53:c2:47:0a:68:67:10:07:e0:4e:2b:e7:7f:ae:a3:75:02:
         77:a5:96:f1:6d:6c:88:49:21:c8:8e:f0:61:51:d7:74:9d:0e:
         cd:18:2a:88:ea:52:ac:a2:a4:5d:7c:fe:42:49:c0:94:fa:08:
         81:0d:dd:36:59:49:40:2e:38:79:03:ef:76:df:2f:49:49:5d:
         82:f7:25:9b:88:98:4b:91:7e:02:0f:63:db:be:5a:15:21:bf:
         ff:d0:0a:8c:02:86:56:82:60:ac:99:29:31:aa:46:8f:51:5f:
         4c:5c:5c:6e:33:79:2c:af:b3:e8:a8:1a:25:de:e8:5d:b8:8b:
         4a:c0:d5:07:58:8b:5a:7e:07:c0:49:51:b8:b0:2d:43:a6:5e:
         84:8c:22:f4:52:ee:39:e2:5f:09:ca:03:34:31:5d:12:58:94:
         27:d9:26:93:6f:d8:28:97:29:f3:78:b8:6f:1a:e2:e7:72:24:
         43:56:4b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:49 2026 by rpki-client