Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/d14dfc0b-5a9c-351b-b2bd-9cd67a1d81b4.roa
File:                     d14dfc0b-5a9c-351b-b2bd-9cd67a1d81b4.roa (raw, json)
Hash identifier:          3tZpIdOkFgrOqAF4FINprEWYLodwbRdj/YS30r7Rpxc=
Subject key identifier:   0C:01:22:3A:34:32:1A:30:27:5A:80:DB:9D:A9:91:BA:71:B9:AE:70
Certificate issuer:       /CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
Certificate serial:       010D0C9F4328584DAAE032766F1E30614B7C1A4C
Authority key identifier: D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/d14dfc0b-5a9c-351b-b2bd-9cd67a1d81b4.roa
Signing time:             Wed 29 Apr 2026 13:00:31 +0000
ROA not before:           Wed 29 Apr 2026 13:00:31 +0000
ROA not after:            Tue 28 Jul 2026 13:00:31 +0000
asID:                     14496
IP address blocks:        192.25.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:aa:e0:32:76:6f:1e:30:61:4b:7c:1a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=184f45bc-61b3-43dd-b858-0eb1a6a7b72e
        Validity
            Not Before: Apr 29 13:00:31 2026 GMT
            Not After : Jul 28 13:00:31 2026 GMT
        Subject: CN=2b42e5b7-3286-4273-81e9-65a01b330559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ef:f2:42:31:9d:87:a5:15:1e:81:ce:e9:b0:
                    d0:f6:e8:d7:45:54:6b:7c:fa:f4:4b:15:30:77:fb:
                    b6:51:d8:4a:9d:13:6a:e6:cb:8f:b9:ca:52:e0:0d:
                    d9:db:18:ba:29:a6:74:72:c3:66:87:2f:ac:84:42:
                    de:b5:0f:f4:ea:a7:74:4a:94:d8:92:ab:aa:d8:89:
                    b1:f3:7a:06:c6:39:ae:af:7d:21:ae:14:28:70:aa:
                    59:c4:38:a7:9f:d7:29:22:bf:e8:58:98:88:1b:24:
                    b0:f3:ed:fc:5b:2c:24:ea:c5:5f:b6:5c:42:83:1b:
                    f1:e5:e5:7a:2e:13:eb:22:bd:aa:ad:56:1e:71:7c:
                    fb:27:c8:67:79:9f:e3:87:5b:dc:e3:b2:60:5f:71:
                    f0:dc:42:d5:b0:80:61:fb:a6:89:6e:56:f2:d6:7a:
                    11:4e:85:fe:a5:34:44:ee:12:77:b2:09:b4:79:18:
                    d8:9a:d3:f5:cc:bb:f7:41:27:91:72:0f:71:a8:87:
                    60:c6:2f:5e:56:7f:5d:31:4d:88:4a:ab:f1:ee:21:
                    42:e1:36:3f:fa:df:67:5b:4d:67:a9:c8:df:a9:02:
                    cf:e5:3c:60:ba:15:2b:01:7b:83:63:31:4d:de:61:
                    2b:81:28:6f:6c:af:cf:54:92:3a:3e:de:84:ec:c5:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:01:22:3A:34:32:1A:30:27:5A:80:DB:9D:A9:91:BA:71:B9:AE:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/d14dfc0b-5a9c-351b-b2bd-9cd67a1d81b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.crl

            X509v3 Authority Key Identifier:
                keyid:D6:CB:B5:F8:5C:EB:C8:31:CE:32:FA:31:40:58:43:6B:B7:BB:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/184f45bc-61b3-43dd-b858-0eb1a6a7b72e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:5e:79:4d:b3:33:48:98:76:a1:5e:15:5e:e6:13:37:34:a5:
         87:a3:2c:96:56:30:12:aa:78:0a:d2:59:d0:ad:e1:1b:65:b7:
         36:9d:93:ab:23:41:27:b8:17:a5:69:92:fe:87:62:c7:8b:74:
         85:55:a1:c2:1f:7c:e1:ed:40:00:9a:c0:f9:b1:26:0a:00:f4:
         99:ff:9c:e1:02:62:7e:88:3d:87:d7:10:0b:77:f1:c8:72:c7:
         d6:6e:a2:61:95:97:e5:e9:6b:0c:b7:07:2a:b9:7e:f2:7b:24:
         16:8d:93:7c:e6:97:86:20:51:9f:04:c5:f1:0e:2f:65:d4:8d:
         0e:cb:87:a3:ce:1f:3d:89:ea:20:fd:75:ca:20:22:09:27:09:
         81:b5:86:54:17:8f:32:2e:59:51:79:c7:83:53:70:36:42:91:
         a8:c4:59:8d:92:a2:b8:c6:a9:40:e7:bc:84:5b:24:09:76:c4:
         52:bf:3c:b4:3f:04:d8:2b:81:43:f3:f1:0b:9d:be:3e:84:aa:
         7a:db:f4:6e:55:86:6f:3e:6b:73:db:6a:e6:c7:00:2b:0a:37:
         13:d4:b6:ba:1d:a3:74:4e:55:a9:6e:44:87:ae:1a:87:79:3c:
         f6:cc:e3:3c:72:68:85:be:22:4b:71:d9:79:13:01:c1:b2:85:
         f1:ab:ab:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:38:37 2026 by rpki-client