Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/b4165463-05b7-3277-8d84-a123821f0e24.roa
File:                     b4165463-05b7-3277-8d84-a123821f0e24.roa (raw, json)
Hash identifier:          NVKMxM7DrHqgJH6VSdwJyTPBCWxSf4ItUFbuTZk/Iqk=
Subject key identifier:   60:40:C1:DA:6A:86:88:20:6B:CA:AA:88:36:8F:BB:C4:19:E3:70:61
Certificate issuer:       /CN=a76bf35a-3814-474d-acdf-c225c790ed7d
Certificate serial:       010D0C9F4328584F698D7CF75D5023CF39EB3480
Authority key identifier: 08:B3:F0:5B:C8:38:CE:D8:DC:B8:9A:E0:17:93:61:68:7C:50:58:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/b4165463-05b7-3277-8d84-a123821f0e24.roa
Signing time:             Tue 06 Oct 2026 13:00:13 +0000
ROA not before:           Tue 06 Oct 2026 13:00:13 +0000
ROA not after:            Mon 04 Jan 2027 14:00:13 +0000
asID:                     26827
IP address blocks:        199.193.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/a76bf35a-3814-474d-acdf-c225c790ed7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/a76bf35a-3814-474d-acdf-c225c790ed7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:69:8d:7c:f7:5d:50:23:cf:39:eb:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a76bf35a-3814-474d-acdf-c225c790ed7d
        Validity
            Not Before: Oct  6 13:00:13 2026 GMT
            Not After : Jan  4 14:00:13 2027 GMT
        Subject: CN=f6c7d4eb-dce1-4fd6-871d-f103de1a4f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:af:5d:93:d6:3a:94:03:d3:9f:9d:45:91:ac:
                    1a:3d:88:85:e2:1b:ac:0e:f3:85:4f:10:3f:09:f0:
                    76:57:cd:d5:54:f7:bb:54:d9:69:29:2e:1a:0f:1d:
                    36:8d:ef:29:ad:d1:4f:c5:e6:c3:14:57:2b:62:92:
                    e6:de:bd:97:55:9f:1f:94:ee:c5:87:f5:9f:52:34:
                    48:ea:c9:6e:9e:eb:dd:b0:6b:dd:11:be:26:c7:47:
                    1b:8f:c8:ff:c4:3d:75:a0:d0:7e:b2:15:65:6d:7e:
                    ad:0c:53:b1:51:68:6d:17:96:4e:45:d2:b3:6d:eb:
                    54:dc:02:43:b5:55:ac:5b:2e:c2:01:bd:66:14:b4:
                    5d:62:f6:1f:ec:c4:9d:34:d7:ba:c6:c4:6f:62:3f:
                    23:a2:e5:e3:d9:b0:65:b5:c7:11:7d:81:5f:8d:b9:
                    df:3f:98:97:12:68:d0:eb:75:eb:62:ce:67:ab:c1:
                    a1:8e:f7:e9:a2:e5:50:b9:33:66:03:01:6f:04:da:
                    dd:50:41:08:44:b2:98:1e:4a:59:98:2b:6e:f8:37:
                    cb:6f:e5:8f:71:12:d7:69:10:d2:a5:9f:7f:b0:da:
                    fd:46:30:b8:d4:2e:d5:f7:f0:ca:d3:42:32:f5:ec:
                    50:24:57:b2:c5:da:e3:06:9d:f4:1e:b0:29:f0:09:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:40:C1:DA:6A:86:88:20:6B:CA:AA:88:36:8F:BB:C4:19:E3:70:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/b4165463-05b7-3277-8d84-a123821f0e24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d/a76bf35a-3814-474d-acdf-c225c790ed7d.crl

            X509v3 Authority Key Identifier:
                keyid:08:B3:F0:5B:C8:38:CE:D8:DC:B8:9A:E0:17:93:61:68:7C:50:58:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a76bf35a-3814-474d-acdf-c225c790ed7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:a2:4c:0b:67:71:04:ed:2f:dd:d5:aa:29:33:51:0b:71:ea:
         4a:29:3e:69:f5:49:df:86:35:e4:48:5b:c1:dc:8a:e7:47:36:
         53:56:5e:e4:58:d0:8c:2a:b4:77:3f:f7:63:2c:9c:34:59:6e:
         8a:a2:fa:d2:0c:4d:66:65:97:28:0b:3e:46:a6:63:c1:36:f3:
         50:0c:69:11:0a:bc:83:af:63:eb:0c:5c:dd:84:4e:6d:14:d9:
         1c:48:64:6d:a5:aa:58:85:76:ee:db:01:5b:1f:08:62:0e:5f:
         b7:ba:72:b2:41:f5:76:87:0b:55:bb:b0:90:e0:8e:f0:8c:98:
         d7:5e:65:58:ee:69:6f:d1:22:fa:6c:4e:83:46:ca:c0:e3:9c:
         6e:34:05:9d:a8:b2:4a:61:a9:16:da:6c:39:6e:69:74:c0:5d:
         a6:c8:8f:d4:f8:b6:5a:f6:a3:d3:b0:7e:12:0d:f9:82:21:a4:
         72:65:c6:ef:c7:a3:dc:69:b1:75:a5:b2:54:bf:c9:5d:95:75:
         97:a4:0d:be:f9:e1:e6:cc:7d:fb:09:94:44:9d:2a:f5:07:bf:
         2c:31:ec:2c:1c:a8:c7:e4:f4:2f:74:63:9b:f2:26:8a:11:23:
         2d:c8:17:e7:ef:de:72:8e:6a:b2:c3:df:9d:e0:b8:37:b1:3e:
         63:0e:95:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:06:18 2026 by rpki-client