Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/9eae65fe-90c5-376e-bd01-14862516eeda.roa
File:                     9eae65fe-90c5-376e-bd01-14862516eeda.roa (raw, json)
Hash identifier:          nNUFjU51Xr0UtgGj45GHp5443R7B7fxcTQGv7eKlz5Y=
Subject key identifier:   25:72:47:F7:FE:84:DB:7C:21:24:99:9B:2F:C3:9A:6F:A5:91:B3:D6
Certificate issuer:       /CN=88119593-ed92-40c6-8543-9a9b06b6a64f
Certificate serial:       010D0C9F4328584E50849B7BB0E0ED4C9FDEF080
Authority key identifier: 86:5B:00:52:5A:03:DF:2A:F2:1F:6F:A9:66:B8:60:8F:D2:3E:30:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/9eae65fe-90c5-376e-bd01-14862516eeda.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     16509
IP address blocks:        192.81.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/88119593-ed92-40c6-8543-9a9b06b6a64f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/88119593-ed92-40c6-8543-9a9b06b6a64f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9b:7b:b0:e0:ed:4c:9f:de:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88119593-ed92-40c6-8543-9a9b06b6a64f
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=00fd7513-367d-446e-b517-2685e7b918d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:b3:74:9c:d6:57:e1:89:d9:13:4c:a9:b7:
                    8e:35:46:9e:b6:c7:48:e6:0f:63:16:97:20:fa:5d:
                    78:0b:4e:d4:8f:e4:8a:12:12:05:fd:60:e7:d3:e6:
                    64:af:3c:8b:85:97:79:27:e9:dd:75:c7:bd:f2:a7:
                    01:9a:c4:6e:5c:2f:ee:c4:f1:20:0a:8f:17:3a:0d:
                    75:28:0f:d9:fa:db:fd:31:7e:76:e4:0c:9e:99:73:
                    95:8a:49:2e:be:b7:10:9f:85:36:a1:fc:66:64:63:
                    d7:a2:7e:f1:39:11:9a:d3:4c:1c:0b:1d:a7:ff:c4:
                    54:71:6e:93:4c:df:6c:98:63:69:b1:de:07:e0:66:
                    9b:45:2a:c7:6c:4a:d7:81:4f:6b:6b:72:f5:76:e0:
                    55:b9:20:9b:c1:9e:a0:ba:c2:20:e2:76:ce:11:78:
                    ff:e8:53:cf:cd:59:a2:67:23:0f:cd:2c:2e:3d:90:
                    ab:66:32:63:39:43:ba:99:9c:8b:b2:e9:f2:91:37:
                    48:d0:7b:f8:a7:5b:3d:c9:8e:68:f3:49:85:bf:f4:
                    63:79:52:1d:fd:a0:f8:00:bf:64:dc:39:1d:4d:79:
                    87:6d:de:98:21:e0:33:59:f3:15:2c:d3:6d:9b:52:
                    fa:93:ab:92:7b:df:a4:be:63:a5:34:4c:ae:80:3d:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:72:47:F7:FE:84:DB:7C:21:24:99:9B:2F:C3:9A:6F:A5:91:B3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/9eae65fe-90c5-376e-bd01-14862516eeda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f/88119593-ed92-40c6-8543-9a9b06b6a64f.crl

            X509v3 Authority Key Identifier:
                keyid:86:5B:00:52:5A:03:DF:2A:F2:1F:6F:A9:66:B8:60:8F:D2:3E:30:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/88119593-ed92-40c6-8543-9a9b06b6a64f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:2b:e1:71:8e:45:3a:a5:a0:65:76:b9:6b:c2:5a:4d:1e:c0:
         01:57:76:58:0e:f2:5a:21:43:08:cc:55:ca:cf:83:dd:10:df:
         b7:42:95:6a:c3:81:d3:c7:30:57:c0:40:dc:ff:79:ee:41:ff:
         99:f6:85:1b:4a:94:56:b6:63:ab:a4:ef:cf:47:d7:15:0b:5d:
         f6:17:dc:8d:fd:71:61:d0:f0:8b:f1:ca:4d:b1:8b:e3:5b:50:
         97:4d:27:83:e4:08:26:08:4b:21:9d:dd:c9:af:31:1d:65:fd:
         6e:ff:73:e5:eb:a6:3d:2d:08:99:7c:e4:d0:48:c1:27:d2:7c:
         9f:8d:e8:c6:ea:32:df:48:8e:b2:38:cb:06:22:c0:46:a7:da:
         f2:10:ab:dc:fa:10:4a:f9:ee:a3:d8:dc:6c:f9:f6:40:09:3f:
         59:7c:32:ad:fa:c3:ee:19:e9:8f:be:23:26:48:eb:55:b5:77:
         c7:2a:ac:4f:2c:0a:80:4a:3e:f2:54:6c:8f:40:9f:9e:7d:c4:
         d8:2c:a7:5e:ca:a6:89:c5:1f:5a:f4:bd:06:4e:54:98:aa:98:
         de:d2:be:75:5d:59:5c:d2:fa:09:e2:27:1f:08:bf:1c:41:df:
         2d:e8:44:39:00:76:81:74:0a:74:54:9a:da:65:05:4e:76:5a:
         f2:1d:8b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:01:40 2026 by rpki-client