Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
File:                     1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa (raw, json)
Hash identifier:          WMCGi5Hqo6yKibaqZl/PCno/vZlVvvvOL21HFGV0/Y4=
Subject key identifier:   E2:16:E4:90:F3:0B:BA:81:C8:F6:12:31:97:50:A2:45:03:E2:7B:6E
Certificate issuer:       /CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Certificate serial:       010D0C9F4328584E815F95F1C685191BC0880540
Authority key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     61317
IP address blocks:        192.48.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:95:f1:c6:85:19:1b:c0:88:05:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=ac7ae261-5b8c-46db-a2de-cc51ef823f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c0:4c:a9:ca:81:2d:70:ec:97:c7:19:65:f3:
                    66:ce:c2:af:d0:85:e5:1f:e9:a2:ba:32:88:ff:10:
                    f0:72:b1:66:42:b6:78:6f:36:97:59:b1:49:d9:08:
                    00:cd:0c:62:2b:51:6b:bd:78:35:2f:99:58:64:50:
                    a0:53:62:08:5b:46:11:fe:e2:41:2e:99:75:13:a8:
                    81:11:19:2e:48:f0:f6:34:df:d0:ca:2a:0c:87:0a:
                    45:66:10:d5:4a:95:1d:6c:8e:62:b8:b5:9c:a3:ff:
                    f8:7f:d8:7a:4c:44:5b:99:3c:e2:65:c4:7d:18:4d:
                    a7:0c:14:b2:ee:07:04:e4:0b:57:f3:a2:69:27:f2:
                    c3:1a:dc:dd:3a:2e:39:c7:ba:c9:71:c9:ff:70:48:
                    79:eb:29:33:a9:ab:13:84:5e:a4:98:86:0a:4e:62:
                    6d:43:73:1e:05:73:4f:a3:a7:90:71:05:fe:ad:b7:
                    9a:f2:05:fd:5d:20:57:3b:71:3f:00:f0:e3:d4:9d:
                    0e:10:33:ba:aa:ee:08:6d:06:84:fe:9a:bf:c7:b9:
                    27:5b:6e:c2:80:c4:4a:60:35:c1:45:8e:12:e5:fe:
                    04:b0:25:8c:6e:ea:21:9f:07:1f:11:1b:ab:87:18:
                    a0:20:36:35:8d:b1:cb:2f:5a:c4:a0:90:a9:9b:f2:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:16:E4:90:F3:0B:BA:81:C8:F6:12:31:97:50:A2:45:03:E2:7B:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl

            X509v3 Authority Key Identifier:
                keyid:17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:83:85:75:9e:7a:78:f4:32:9b:d6:3e:1f:ee:7c:ce:af:50:
         3c:2a:8f:e7:6c:63:12:5a:1f:ce:b9:9e:fc:fd:46:26:9e:0c:
         1e:02:f0:17:78:4b:b8:c2:af:04:32:29:ff:76:3e:e8:9e:37:
         5e:58:8d:5b:dc:6f:e6:cb:c9:d9:f6:e5:63:09:9e:b8:9e:94:
         2d:93:93:e3:9e:b2:d7:5a:e5:97:bf:45:1a:eb:14:92:ff:cb:
         ff:2a:d7:54:0f:a6:9a:73:fe:16:3a:bd:bd:bd:4e:18:5c:85:
         4b:47:6e:47:fe:4b:79:f3:78:48:f5:8d:0f:ef:9d:85:a1:96:
         3b:ae:9f:28:22:c4:89:de:42:35:c5:18:87:55:92:70:08:23:
         3c:30:af:ed:88:c3:e0:cb:b2:c3:55:de:22:92:a7:6a:7f:db:
         7f:fb:26:71:64:3c:11:1f:92:22:ae:2d:2b:2d:2d:4a:bf:c7:
         80:bb:72:c4:8e:ee:b1:5b:bd:1a:de:32:33:04:5e:eb:07:15:
         7a:9e:ed:d6:77:34:b1:40:db:b0:dc:51:7d:89:11:c0:e3:59:
         ca:fa:b6:30:b3:45:1d:cc:f4:54:3d:39:3d:6a:87:14:ed:6a:
         24:07:f2:78:ed:f7:8d:11:28:e2:52:dd:96:7d:bd:f4:4c:30:
         70:64:30:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:05:33 2026 by rpki-client