Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa
File:                     c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa (raw, json)
Hash identifier:          G3VUV5XvFF4pX8nAg4FYaGuRzKLQJZxXmhsElkAGDqw=
Subject key identifier:   6A:6C:E7:E5:FE:FE:0A:8F:82:C9:24:75:EF:9C:5E:A7:F7:D7:8B:72
Certificate issuer:       /CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc
Certificate serial:       010D0C9F4328584E4AEF6E718860BEB655DC6500
Authority key identifier: 8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     65003
IP address blocks:        192.75.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:6e:71:88:60:be:b6:55:dc:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=9c6dad7a-c138-4031-88fb-f14deada64bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f3:ab:36:a8:1b:8a:72:65:b7:26:83:35:3f:
                    6c:93:e3:8c:bf:63:1e:3e:43:9e:12:71:82:1f:f8:
                    1d:a8:ca:9b:20:43:00:bd:89:92:36:79:1a:ca:f7:
                    6b:c0:e9:22:60:85:d5:9f:66:0c:3f:48:dd:65:31:
                    40:43:98:64:bc:05:a3:8e:b4:4d:85:f7:81:23:21:
                    89:a6:b2:5d:b5:9a:08:d1:74:8e:ef:66:07:a2:c9:
                    5f:2b:62:93:77:5c:6e:70:54:ed:4e:24:1f:22:38:
                    b6:58:a3:5b:e8:45:f7:dc:eb:07:4b:25:0e:4d:f2:
                    94:f1:f5:71:93:6f:99:60:94:ee:72:45:6e:53:8b:
                    77:8a:dc:fa:31:7c:74:18:25:a3:12:26:cb:8a:39:
                    6a:0a:23:93:65:e5:b1:ad:7d:0e:74:ee:12:1c:b0:
                    87:71:8f:1f:80:66:6a:46:0f:9f:98:40:43:2d:26:
                    eb:1a:95:4e:af:12:6f:23:a1:c1:64:c6:dc:47:ad:
                    bf:11:80:23:eb:c3:ad:90:3a:9b:28:b0:6e:dc:60:
                    c8:36:1a:76:e2:00:65:8e:a8:a7:28:23:48:98:ec:
                    27:6f:c2:55:c3:c5:14:12:73:b1:78:4c:3f:bc:8e:
                    78:62:ed:6b:8e:d9:20:7d:2b:76:8e:77:19:f2:dd:
                    33:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6C:E7:E5:FE:FE:0A:8F:82:C9:24:75:EF:9C:5E:A7:F7:D7:8B:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/c9e4e8f4-ec0e-34b2-9270-2cc31c6c53d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.crl

            X509v3 Authority Key Identifier:
                keyid:8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:14:eb:be:1c:ce:b3:70:a4:7a:78:43:17:df:05:80:52:9c:
         29:0c:74:a2:d5:1c:1f:c4:87:e8:17:ba:eb:40:3b:3b:bd:fe:
         ce:2e:82:74:48:11:65:92:39:57:0c:36:a3:b2:1a:22:16:8c:
         99:12:89:15:f0:d2:48:4f:1c:aa:fb:d7:41:36:e5:68:5e:66:
         18:0e:da:dd:6a:eb:54:4b:2a:60:8e:eb:d4:55:5d:b3:15:9a:
         36:16:c8:3c:b5:1b:fd:57:9f:84:3c:45:a6:93:fd:db:eb:b2:
         17:ac:7e:e7:19:64:72:91:e4:5e:9f:0c:37:5a:d1:1e:a7:71:
         48:e1:07:96:1c:3f:ef:a1:64:3f:ea:0b:1d:48:c6:03:ec:03:
         a7:2e:9e:3c:5e:62:b9:a9:5c:6e:f3:00:a2:33:af:2e:4e:06:
         cc:b2:5c:f4:e2:86:dd:68:a7:61:ba:19:3e:07:c6:e2:32:59:
         8a:65:e3:6d:36:c1:d2:9e:b2:06:56:90:0e:d6:d1:6f:d9:d1:
         f5:5c:f2:cb:c0:cb:fd:11:a0:14:c8:8f:55:60:ca:36:c7:83:
         2c:69:a4:cb:2d:50:0f:f9:73:3c:d5:0f:40:1a:68:16:46:0f:
         05:eb:a4:ef:d6:c4:02:ad:67:5f:2a:72:3e:91:45:74:b3:51:
         a5:04:df:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:20:26 2026 by rpki-client