Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/ed0318aa-11f5-3f5b-a258-9e175c6bd5ff.roa
File:                     ed0318aa-11f5-3f5b-a258-9e175c6bd5ff.roa (raw, json)
Hash identifier:          j8+QzxbMWj2/YH4CDFXiFZqpZo+PIRiT4SGlp+fkZ50=
Subject key identifier:   54:11:DE:0F:B2:8F:E3:75:5C:1B:3C:ED:4B:1C:15:E4:A5:BB:51:0F
Certificate issuer:       /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
Certificate serial:       010D0C9F4328584D95F00BAE9C078F80EE97A380
Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/ed0318aa-11f5-3f5b-a258-9e175c6bd5ff.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     27198
IP address blocks:        192.12.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:f0:0b:ae:9c:07:8f:80:ee:97:a3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=f5d55b0e-b7a0-48e8-a259-5a90e02da61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:56:be:92:33:cc:4b:d3:64:c8:2c:97:16:
                    97:3c:e5:50:88:33:5f:3a:9c:f1:ad:9b:88:f3:95:
                    4e:a7:94:69:ab:8f:1a:e0:95:0b:bf:e4:ee:ee:f8:
                    d1:d6:6e:71:25:7e:1e:cf:60:d8:58:df:5f:e2:4b:
                    00:7c:ed:94:bc:b5:5e:4b:51:a2:b2:4e:2c:78:32:
                    93:35:7b:5c:33:99:ac:56:20:41:27:bb:c3:4a:1c:
                    7d:23:5f:f4:1c:42:dc:8d:8b:4c:e4:8c:23:4f:3e:
                    01:41:3c:5e:31:03:e3:a8:3f:f1:f4:6f:21:fa:e9:
                    f6:40:a1:31:a3:ef:6c:26:1c:33:f8:d5:9c:45:72:
                    5a:ba:56:ca:3d:65:9d:8a:37:f4:5b:86:a4:5a:68:
                    77:33:6b:6c:f3:43:d2:53:52:83:d4:40:d0:ea:d5:
                    9b:74:fa:e3:97:2e:86:f6:93:78:72:e2:ad:bd:03:
                    47:b9:f6:ae:09:2c:9d:6e:e9:4f:dd:14:87:7b:99:
                    80:10:22:e4:0d:22:9a:80:34:53:d7:f0:a1:c1:89:
                    d3:c6:a2:53:90:3c:9f:f3:48:78:ed:e8:6a:41:29:
                    8d:c6:ce:e7:b1:43:da:92:ac:89:5d:26:47:70:7f:
                    b9:e9:dc:fc:53:1e:71:45:93:8b:d0:36:b5:4f:6f:
                    ba:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:11:DE:0F:B2:8F:E3:75:5C:1B:3C:ED:4B:1C:15:E4:A5:BB:51:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/ed0318aa-11f5-3f5b-a258-9e175c6bd5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl

            X509v3 Authority Key Identifier:
                keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:50:35:19:db:ce:5a:1e:00:60:90:9e:fd:3b:5a:39:ed:76:
         ac:58:f5:53:17:d0:d2:4d:d8:2b:8d:43:0a:4a:31:36:7f:ef:
         bf:a3:c5:4d:09:c7:2a:f4:cf:6c:d2:75:27:3b:09:24:5e:62:
         8d:02:b7:b9:6c:9a:ea:ea:76:73:3b:8c:b5:82:0a:20:2e:51:
         9f:d2:89:de:1d:4b:57:fc:bd:d7:f2:98:42:3e:87:a9:a7:02:
         f7:2b:a8:39:0e:d9:64:a9:72:dc:9b:1c:db:5e:ed:6e:2c:7b:
         ea:ed:76:dd:c3:d6:39:13:b4:85:94:9f:79:04:d8:ba:51:75:
         84:e4:4d:2d:31:20:7c:fa:2e:a2:35:43:85:78:23:d3:94:f3:
         ba:ef:6f:ac:1a:d7:86:5f:9b:6f:3f:1b:c7:29:c3:44:c3:d6:
         70:bb:c7:fb:f4:8a:0b:12:bc:58:66:df:35:7b:8b:e2:fc:f6:
         ed:4b:5c:75:12:7e:25:1b:b4:1f:22:f0:c8:64:80:aa:9b:b8:
         93:cd:1f:c4:20:ba:d8:7b:bc:c1:4d:d5:a1:fb:bf:bb:39:68:
         d0:10:de:4f:9a:4c:ec:9c:43:e2:75:63:7d:4e:78:64:a6:2e:
         73:ce:c2:2c:88:55:7e:38:ef:cc:8a:b8:e4:7f:fa:b0:81:ab:
         5d:e7:b0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:09:38 2026 by rpki-client