Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/745636c2-ac99-35a4-b899-f64b23092830.roa
File:                     745636c2-ac99-35a4-b899-f64b23092830.roa (raw, json)
Hash identifier:          maG5r4BMNkDOOtEBZQHe7UI8zjtdJcnHvZzpgGD16Z4=
Subject key identifier:   66:58:01:5B:81:A9:88:A2:01:EF:E7:E2:90:07:BD:E8:01:D6:7C:E8
Certificate issuer:       /CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
Certificate serial:       010D0C9F4328584F497535F776860F5EB4487DC0
Authority key identifier: DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/745636c2-ac99-35a4-b899-f64b23092830.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     54665
IP address blocks:        192.195.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:35:f7:76:86:0f:5e:b4:48:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=435c5779-0e0b-4ca5-9213-6edddad9bc55
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=76b035da-ba4b-4ac4-98cd-86361709d64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:6f:d5:a3:57:a4:8f:21:cd:bc:b1:f6:0f:
                    cd:65:b4:33:c1:06:5c:c2:4f:2e:e7:91:e0:e0:02:
                    7e:aa:ee:c6:a6:3f:50:48:b0:38:41:4f:c1:8e:c0:
                    8c:b2:ad:4b:ae:13:76:77:dd:a9:b4:79:7b:af:1e:
                    8b:3d:a8:4f:ae:f7:1c:84:2f:bc:85:c4:3e:90:4b:
                    27:29:e8:1d:8e:fc:df:8f:e6:43:1b:9b:16:6c:77:
                    a0:3f:d7:59:78:d1:a6:54:6f:d6:7b:8f:32:35:9d:
                    b7:0b:ff:0c:52:2c:ed:21:4e:b1:4d:1a:7d:b3:ec:
                    ce:8c:fb:5a:8d:38:b7:0a:16:13:8d:08:50:62:7c:
                    7c:d2:ff:a1:35:b1:0b:a2:fe:e4:52:40:12:7b:b4:
                    7d:32:fb:8b:95:00:0d:43:49:55:4f:84:a8:f2:4f:
                    88:1d:3c:62:bb:59:4c:cb:e7:45:e6:93:a4:04:3a:
                    f6:94:79:32:fb:a6:3b:ae:bf:ea:4d:af:77:36:94:
                    b0:6f:d9:8d:cc:31:f5:56:cb:8a:ef:ac:28:c1:77:
                    88:42:18:9a:9c:f6:a0:61:cb:14:18:8f:e9:f7:3b:
                    ce:21:fc:35:78:e8:25:0b:c9:e0:44:8d:cc:b2:e2:
                    45:51:5e:5c:85:55:39:c0:a0:3b:80:d3:e9:c7:76:
                    f1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:58:01:5B:81:A9:88:A2:01:EF:E7:E2:90:07:BD:E8:01:D6:7C:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/745636c2-ac99-35a4-b899-f64b23092830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55/435c5779-0e0b-4ca5-9213-6edddad9bc55.crl

            X509v3 Authority Key Identifier:
                keyid:DB:A6:6E:42:9E:45:12:61:0C:B6:F4:21:58:35:BD:86:01:15:06:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/435c5779-0e0b-4ca5-9213-6edddad9bc55.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ba:f3:c7:11:f7:3a:6f:9a:1c:8d:7f:30:ba:d7:cf:b2:83:
         03:a9:e4:bf:17:90:3a:9e:68:c5:00:f6:07:9a:09:e7:9d:b3:
         90:c4:cd:34:2c:18:94:08:f1:25:f8:2c:04:f7:07:3c:4d:33:
         1c:79:ef:81:00:e4:58:bf:4a:0d:f5:ec:43:c1:e6:89:24:dc:
         07:39:30:15:af:31:fa:95:cb:97:fb:f8:21:73:20:87:7f:33:
         15:b9:41:67:63:3a:37:a0:56:5d:b3:9f:82:3c:47:df:ec:0e:
         f9:b2:cf:cc:c1:79:1f:69:e7:82:f2:54:43:ad:b8:26:0f:98:
         6f:3f:8f:f4:3c:74:90:0a:ed:5a:e6:7e:7c:47:92:5e:14:59:
         08:ba:06:87:33:57:ed:5b:69:79:ed:b3:53:85:76:24:fc:b1:
         93:06:e7:73:8e:58:f4:54:ec:3b:2b:e9:b4:a3:2b:66:e3:a4:
         e6:43:3d:dd:84:e3:35:fe:4a:25:fa:ca:47:32:5a:eb:de:7a:
         40:dc:f2:63:cc:f5:d3:f0:40:67:c6:40:30:45:e4:29:27:a7:
         06:92:6f:d0:55:ca:2b:cb:62:7e:8d:cf:90:8a:53:6b:69:de:
         ba:5c:36:bf:24:61:11:6f:2a:a6:6f:cc:ca:43:1a:27:a5:0c:
         8f:28:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:46:46 2026 by rpki-client