Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2591496d-2f46-3cc4-9079-475ca3a87c7e.roa
File:                     2591496d-2f46-3cc4-9079-475ca3a87c7e.roa (raw, json)
Hash identifier:          VJ1lSnTnSz61B6O1aeZYpoD0bnWCIZH5AfcAD48yKSM=
Subject key identifier:   A7:C7:B2:36:72:67:03:70:3F:44:DA:94:B5:67:00:91:BC:11:AF:45
Certificate issuer:       /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial:       010D0C9F4328584E7634D79A0F2A031B60811CC0
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2591496d-2f46-3cc4-9079-475ca3a87c7e.roa
Signing time:             Sat 11 Jul 2026 09:00:12 +0000
ROA not before:           Sat 11 Jul 2026 09:00:12 +0000
ROA not after:            Fri 09 Oct 2026 09:00:12 +0000
asID:                     396905
IP address blocks:        192.105.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:76:34:d7:9a:0f:2a:03:1b:60:81:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
        Validity
            Not Before: Jul 11 09:00:12 2026 GMT
            Not After : Oct  9 09:00:12 2026 GMT
        Subject: CN=941575ea-84be-4eba-bccf-a9e73b55b76b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:19:22:f2:1b:c6:7c:fa:12:af:e1:a3:2d:
                    c2:3c:c7:c8:be:89:ac:ba:61:94:b5:b3:62:58:85:
                    8d:fc:4d:3b:ed:0a:8f:5d:8a:4e:65:df:f9:ed:d8:
                    ad:59:69:ca:1a:a2:23:eb:01:7d:7a:1c:16:bc:b8:
                    ac:53:d6:71:aa:38:95:d0:8e:b5:08:36:c7:ca:c9:
                    6e:d3:a1:6f:a2:42:cd:93:d7:ba:51:b0:48:37:4e:
                    c3:96:e1:b4:53:a3:1c:cb:23:4c:5d:b4:80:62:2d:
                    bb:e8:3b:ae:b2:33:c6:6a:36:00:f4:a3:27:a2:b5:
                    9b:5d:f7:ba:54:3e:f4:90:60:22:25:ac:b0:ee:8b:
                    42:e4:dd:e4:46:ff:23:21:47:2c:a8:a2:7f:e6:d9:
                    39:d4:ad:c6:d8:9c:0f:86:74:58:45:3e:27:42:78:
                    7d:f4:f8:8d:fb:6f:2a:f7:4a:fb:f9:a7:6e:36:f1:
                    cc:e2:87:5f:f7:89:ee:7d:6d:3d:1c:88:d9:c6:79:
                    c8:86:d2:19:92:68:fb:48:57:e0:d1:5f:7b:9b:4a:
                    5c:48:d8:0b:d0:e8:1c:4a:5a:2c:06:3e:38:f6:32:
                    e3:5f:77:95:7a:7a:90:86:51:4c:fa:f9:a8:78:b6:
                    8c:7a:f0:ec:93:20:73:80:97:c2:b0:0b:77:1e:63:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C7:B2:36:72:67:03:70:3F:44:DA:94:B5:67:00:91:BC:11:AF:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2591496d-2f46-3cc4-9079-475ca3a87c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.105.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7a:7c:62:ec:65:95:74:a1:7a:a0:90:8f:64:c6:89:1f:8c:
         82:f7:1c:50:1d:cd:03:6b:47:d3:00:fa:a4:e7:6b:1a:66:1f:
         f6:6c:a9:f8:8d:9d:05:c6:0d:3f:59:31:ed:fd:04:3e:3e:7c:
         d7:7b:42:98:79:c4:12:c4:92:d0:db:7f:4a:95:18:23:9d:21:
         34:c6:8f:55:60:32:a4:5b:9f:7d:d0:59:41:e4:3c:c1:6e:c4:
         6b:e4:53:9d:86:74:b7:31:f3:7a:0f:52:8a:0d:f8:42:5d:13:
         aa:24:04:13:87:94:0b:3f:92:07:02:45:0f:4a:8a:c2:a6:19:
         10:8f:1d:f9:06:f6:0a:4d:ec:21:8a:41:d2:9c:20:80:73:00:
         75:cd:42:5a:7c:0d:fb:d9:39:c4:59:bd:2f:0f:c6:53:19:a8:
         10:4b:60:c7:f3:ad:04:9d:3f:95:3a:98:6e:e2:4e:76:9f:ea:
         69:02:e1:d8:3b:c0:48:f5:3d:41:e5:0c:23:01:7a:f7:b1:71:
         01:91:4e:51:6f:d6:f3:62:45:31:cd:e0:76:e5:d3:f2:89:2a:
         d5:bb:c4:b6:cc:c6:9f:a2:c7:32:d7:4c:7f:b1:25:07:a6:71:
         de:8c:17:20:56:23:69:a6:42:65:a0:5f:74:10:1c:93:15:ea:
         89:ac:df:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:16 2026 by rpki-client