Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa
File:                     c1539d45-e25a-3367-9754-f7eba01827f3.roa (raw, json)
Hash identifier:          JIBb3nifUzYnjbjnTbVUkTvAiQnfOF98MOgWhOj6oyQ=
Subject key identifier:   49:5A:15:92:0C:F6:54:F9:C2:52:A5:A5:9B:79:CB:5A:72:3A:A9:DA
Certificate issuer:       /CN=968bda65-4161-4dee-a348-29486c17acb2
Certificate serial:       010D0C9F4328584E296F1A2E2E21AC3D23F93570
Authority key identifier: C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        192.30.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1a:2e:2e:21:ac:3d:23:f9:35:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=968bda65-4161-4dee-a348-29486c17acb2
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=59bf7671-225d-4aab-84b7-80ecaac6d4be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:49:76:0d:b4:0d:58:b2:6c:e6:70:61:c5:56:
                    de:1e:df:31:a4:62:3f:06:0d:67:28:c1:f0:75:bb:
                    fc:3b:18:3f:fa:65:c5:f9:e0:84:fc:a5:75:04:82:
                    dd:62:75:00:98:40:3a:f9:7b:bc:1d:b2:4a:be:2d:
                    66:ed:ed:57:cb:d9:6c:70:ea:a5:1c:05:7c:68:a1:
                    a9:12:24:d0:28:07:91:5f:24:96:af:50:94:77:41:
                    d1:7a:ff:30:57:28:34:b2:a4:ca:95:20:c4:28:90:
                    03:81:44:5e:a4:30:7c:4f:a3:ae:3a:cc:7c:42:00:
                    75:1f:d9:e8:ef:7a:fd:de:95:aa:b6:4f:8e:c2:d9:
                    1f:fe:d3:48:c1:78:7f:f2:a0:c2:ff:9f:be:87:98:
                    f1:66:e2:ac:3e:8d:c2:79:74:87:2f:66:87:cc:e3:
                    4c:8a:6f:af:f8:3f:4e:00:bc:cb:65:9f:22:ba:d6:
                    f7:11:c6:f9:cd:05:b7:1f:82:55:d6:8f:34:b4:76:
                    8f:a7:c6:94:2a:82:86:ab:04:25:f5:42:f2:63:a8:
                    19:d8:e4:53:32:81:a8:61:fd:7d:ec:97:2a:75:da:
                    f3:dc:07:10:b4:89:ce:66:b7:f9:56:7a:04:3d:cd:
                    90:c7:57:97:c3:89:bc:f7:f6:31:ae:a0:bd:ef:d1:
                    c5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5A:15:92:0C:F6:54:F9:C2:52:A5:A5:9B:79:CB:5A:72:3A:A9:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/c1539d45-e25a-3367-9754-f7eba01827f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2/968bda65-4161-4dee-a348-29486c17acb2.crl

            X509v3 Authority Key Identifier:
                keyid:C1:27:54:97:DA:CC:09:8C:4C:78:60:01:D1:F3:4E:01:B1:F1:3A:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/968bda65-4161-4dee-a348-29486c17acb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:31:fa:03:83:07:71:eb:5f:44:c6:23:47:a5:7e:0e:b9:e0:
         36:b3:44:c3:84:a3:70:af:77:a0:34:60:ac:c6:c3:47:02:3a:
         bb:16:71:62:f4:b5:4e:75:e7:b1:88:47:c1:25:00:ca:86:c7:
         06:02:81:98:4d:e9:16:5a:41:28:15:2c:07:87:93:aa:05:30:
         5c:62:86:a5:35:6f:3f:29:5c:b8:70:cd:c2:b9:ea:5b:ae:8e:
         a9:96:b1:04:32:f4:9b:c2:72:0f:50:e2:9b:de:6c:30:ac:8a:
         ae:6d:20:b9:ff:03:cc:32:50:7a:bf:63:2f:f3:f2:5d:3f:5c:
         2a:e8:43:57:a8:97:52:31:2c:8f:c9:67:13:aa:e1:8f:de:c7:
         9e:bd:8e:93:f0:75:6e:10:79:17:95:77:c8:fa:e2:64:35:df:
         34:fb:71:51:ae:0c:26:42:54:a3:b0:8c:f2:b7:3d:59:cb:f9:
         ef:b8:a6:24:0c:5c:a8:83:6d:27:19:d4:26:05:7d:f0:97:b0:
         bf:b8:7c:a9:29:50:7e:d8:c0:99:43:15:71:bf:ec:89:4c:df:
         bd:62:db:a0:dc:76:99:97:a0:a8:9c:a6:16:65:ba:35:de:da:
         d8:24:92:62:14:e4:52:a0:cc:52:e3:eb:85:ac:d8:61:f8:c3:
         35:76:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:12:42 2026 by rpki-client