Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/393b44f8-5adf-321e-86dd-e66161f45087.roa
File:                     393b44f8-5adf-321e-86dd-e66161f45087.roa (raw, json)
Hash identifier:          kRISV3jVQLT1oQ9Pl7b/LlLjHsYNa7s+8rkxmySpxo8=
Subject key identifier:   CF:C7:17:62:B5:E0:5E:9E:26:0F:68:1B:98:61:33:2F:2F:8D:9C:C5
Certificate issuer:       /CN=500a41ff-bb2f-4415-8f47-796f36c37ec0
Certificate serial:       010D0C9F4328584E815F8C16D234F6389DE26870
Authority key identifier: C9:4D:56:DD:A6:66:DB:17:55:F5:D1:92:AF:AD:7E:F1:A5:C8:90:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/393b44f8-5adf-321e-86dd-e66161f45087.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     396291
IP address blocks:        192.190.172.0/24 maxlen: 24
                          209.94.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:8c:16:d2:34:f6:38:9d:e2:68:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500a41ff-bb2f-4415-8f47-796f36c37ec0
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=249a051b-e8ea-406f-ac9f-c10ea1896d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:74:1d:17:6c:68:f1:ac:32:bb:cf:a6:4d:
                    42:83:37:54:2b:54:66:e9:41:c0:9b:9c:82:1d:f3:
                    c3:33:25:5f:8d:ea:f7:77:77:51:d3:ea:4d:4b:01:
                    9e:e2:d2:0b:08:71:58:6f:ba:d2:7c:d5:34:3c:74:
                    78:e6:b2:21:a1:84:46:1b:2e:1c:b5:a4:a9:72:69:
                    3a:5b:ef:1e:38:75:11:27:08:c0:b6:82:6e:76:89:
                    fb:f5:d3:01:d4:2a:2a:2a:32:92:d5:b8:d6:f7:c8:
                    39:9b:57:6d:7c:d3:e7:33:3d:f9:69:7f:08:b0:50:
                    2b:26:85:d8:86:fc:26:28:b0:3e:31:41:f7:a5:83:
                    72:dc:db:9c:cc:8a:a4:6e:09:8e:79:32:81:87:15:
                    05:5e:d6:95:b2:88:6f:30:6a:79:da:5d:14:6a:74:
                    81:1a:38:18:8c:d6:22:3c:a4:34:ab:56:24:24:fe:
                    ec:ef:d9:3f:f1:9a:87:45:59:f0:7f:0e:4b:3a:cd:
                    40:10:6b:8b:cb:3c:b5:18:89:41:02:67:6a:ca:41:
                    cd:b2:3e:dc:b3:e1:b0:0f:67:1d:51:48:d0:82:85:
                    80:98:6f:15:22:e5:f9:e8:52:6f:05:fa:9b:56:af:
                    33:c1:90:2d:94:8e:c6:c3:bc:e2:bb:bb:ad:b7:da:
                    bc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C7:17:62:B5:E0:5E:9E:26:0F:68:1B:98:61:33:2F:2F:8D:9C:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/393b44f8-5adf-321e-86dd-e66161f45087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.crl

            X509v3 Authority Key Identifier:
                keyid:C9:4D:56:DD:A6:66:DB:17:55:F5:D1:92:AF:AD:7E:F1:A5:C8:90:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.172.0/24
                  209.94.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f1:60:c7:1c:7d:1b:3b:87:95:bb:db:e0:de:5f:df:6d:f2:af:
         f8:4c:69:4b:02:46:1e:53:9a:e3:61:89:5e:53:00:0c:e7:0c:
         c3:4e:ba:58:d2:2d:3a:3d:33:c8:9b:86:81:96:ae:a1:a8:de:
         65:f5:71:fc:68:b5:43:c9:61:62:de:d4:2c:14:ca:2a:ea:0f:
         ad:24:59:cb:22:cf:81:16:d7:07:c1:e7:87:f6:0e:ac:87:0f:
         94:54:92:c6:49:46:de:fa:3c:c9:25:66:a9:a4:e6:ce:8d:99:
         60:76:aa:f2:35:23:b2:f0:83:d3:85:3c:bf:ff:96:5b:04:e1:
         58:01:66:b8:c1:46:6a:cf:29:41:70:a6:11:e5:c2:24:b4:61:
         67:62:3b:43:96:48:c9:1b:a1:84:b5:00:5d:3c:c0:06:51:60:
         88:e2:50:cd:e1:38:aa:78:67:78:b2:85:9c:a9:07:f0:a1:87:
         bd:45:16:df:c4:cf:37:ee:4a:76:c2:e3:14:11:ae:8d:1e:93:
         3f:67:7a:54:27:17:e3:a8:04:ba:3a:8a:7e:1b:40:7f:97:cb:
         6c:d7:be:fc:a5:97:a6:71:f7:33:e1:7b:90:25:e2:1d:c9:4c:
         4a:78:93:50:6f:84:66:c7:9d:34:2a:f8:23:35:6e:49:85:a1:
         2e:71:8a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:13:47 2026 by rpki-client