Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa
File:                     5322ee79-9c85-3eee-9d78-27a6894643bc.roa (raw, json)
Hash identifier:          x941aOcfhWdw1JyNJaZDB99aFptUu0kjzUyrIZdREKo=
Subject key identifier:   ED:F1:A1:76:A7:CB:49:B8:31:A0:C1:75:A0:0B:50:05:F7:A7:55:87
Certificate issuer:       /CN=9050423a-b7ae-4879-a880-ea3be6e193a8
Certificate serial:       010D0C9F4328584EF2E769AA62C6E02E6E5A7900
Authority key identifier: E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        192.111.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:69:aa:62:c6:e0:2e:6e:5a:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9050423a-b7ae-4879-a880-ea3be6e193a8
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=81a2ec66-01c2-456e-ad68-c1bdcd1d79dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:2c:2c:5f:f2:37:10:3e:7f:14:de:b5:27:
                    ea:fd:86:f0:93:ca:6d:be:5d:f1:c1:f0:3d:ed:2c:
                    24:83:65:e9:cb:cd:ab:16:cf:d3:93:ab:81:79:20:
                    12:ee:09:39:1c:73:57:e8:e2:f5:bb:e3:b2:7a:49:
                    da:75:61:02:6c:52:11:68:fe:da:bc:80:b5:23:fb:
                    19:0f:a1:20:c3:26:70:be:56:15:c5:04:e0:8b:14:
                    89:14:e5:81:07:f1:13:8a:88:fb:32:a8:c0:e8:01:
                    83:b5:97:71:09:f6:ae:0e:81:7e:62:87:7a:dd:6e:
                    d1:16:26:7a:12:c9:ca:fa:37:63:ff:17:06:d0:6a:
                    e4:c7:30:0f:6d:f2:f0:aa:ea:b2:1f:2e:fc:b7:07:
                    06:eb:5e:61:fa:c9:4c:0e:6b:88:53:71:0e:6a:eb:
                    e1:2a:f9:2c:22:d1:6d:c2:5a:6f:db:ab:63:29:c6:
                    d3:8d:eb:38:4e:59:51:30:cb:b9:15:8b:27:3b:7e:
                    32:e6:16:b0:f9:cd:28:f2:df:f3:c5:3c:42:d3:5e:
                    80:3d:a4:67:33:88:50:37:92:52:7e:55:89:26:ce:
                    cf:74:eb:13:c0:7c:14:b5:6e:7a:92:07:ba:ee:31:
                    02:20:13:a9:98:75:4d:88:bc:20:fd:72:93:b9:5c:
                    ef:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F1:A1:76:A7:CB:49:B8:31:A0:C1:75:A0:0B:50:05:F7:A7:55:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/5322ee79-9c85-3eee-9d78-27a6894643bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8/9050423a-b7ae-4879-a880-ea3be6e193a8.crl

            X509v3 Authority Key Identifier:
                keyid:E7:C5:42:5E:A0:DF:33:80:77:AB:80:B8:30:18:49:53:42:A5:B6:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9050423a-b7ae-4879-a880-ea3be6e193a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:a8:bd:2b:f5:eb:29:65:25:0d:d0:f9:57:20:4b:a9:0a:c7:
         7f:c8:25:de:2f:fa:cb:83:5d:22:be:dc:4a:85:55:f8:b4:07:
         45:ed:7e:3d:9d:5f:3b:c6:db:62:b7:75:a7:78:10:db:8f:2e:
         de:a2:93:ed:7d:42:8d:6b:a1:d5:c9:4e:38:95:65:ea:53:ea:
         4e:3a:ba:d4:22:53:20:f1:fd:26:cc:a4:20:e1:52:21:d4:8a:
         e5:1e:d2:09:22:3d:a1:b8:3b:91:29:f5:f9:e8:27:13:74:28:
         ea:cc:9b:78:46:e7:7f:16:44:1c:f8:5b:21:6a:53:c1:10:d4:
         f9:6e:98:0b:85:96:90:c1:d8:ea:18:cf:a2:1c:42:43:3b:3e:
         5e:28:17:3f:c1:20:45:89:ec:d2:2d:e0:94:95:dd:f3:39:af:
         1b:ff:2f:c8:d9:a2:73:c0:8f:2b:8c:f0:8d:fc:94:dc:ec:98:
         51:c2:00:ba:b2:93:8a:3c:c6:f2:c4:b6:37:3c:2d:a2:87:3c:
         b8:f0:de:30:a9:a7:94:ae:b1:90:71:80:8f:1b:26:38:a5:42:
         97:fc:2d:9a:e0:f2:92:04:e8:3c:7a:d9:cb:52:41:0b:e7:b8:
         c3:5e:cd:9a:13:b1:e8:a9:f0:d5:f5:35:98:2c:af:d8:94:34:
         f5:00:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:34:49 2026 by rpki-client