Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d8d5192f-d1d7-3948-b69c-113cd296c428.roa
File:                     d8d5192f-d1d7-3948-b69c-113cd296c428.roa (raw, json)
Hash identifier:          U+8Y+rckWar0KmO+tlaLRzXL0KG9726UDplOZPA+WpY=
Subject key identifier:   96:34:E3:45:D6:3F:15:D6:0B:A7:F8:F3:3C:C9:FB:24:72:31:7F:4A
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584E90BA4D1BDCC5186657A3FC80
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d8d5192f-d1d7-3948-b69c-113cd296c428.roa
Signing time:             Mon 20 Jul 2026 21:00:11 +0000
ROA not before:           Mon 20 Jul 2026 21:00:11 +0000
ROA not after:            Sun 18 Oct 2026 21:00:11 +0000
asID:                     19901
IP address blocks:        208.160.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:90:ba:4d:1b:dc:c5:18:66:57:a3:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Jul 20 21:00:11 2026 GMT
            Not After : Oct 18 21:00:11 2026 GMT
        Subject: CN=aac2c03e-c4f2-4303-a0d9-364f2ae7d6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b8:53:a0:74:af:22:7a:6c:7e:d7:55:d1:82:
                    af:da:90:54:f7:a8:f3:86:45:a0:8f:87:4d:59:b5:
                    93:88:56:d5:65:12:12:6e:44:1a:99:50:af:0e:e5:
                    3b:04:43:62:e4:ca:fb:b8:2b:7d:66:07:60:df:f6:
                    bb:9c:17:ad:7e:2c:48:70:d1:89:d9:ad:2c:fa:0e:
                    eb:d8:5f:77:1c:be:c3:81:25:01:a0:35:e7:4b:14:
                    36:a0:a3:5e:f3:c3:99:76:26:cc:0c:03:87:46:be:
                    99:36:3a:8f:a9:ad:e2:16:cf:be:c4:4c:59:b0:ab:
                    f9:2b:ab:54:26:bd:cd:8b:13:a4:34:a7:e0:64:90:
                    1e:ef:8b:ce:bd:41:17:9c:90:3a:ad:9b:e3:c6:88:
                    9d:01:60:a5:e9:e9:99:98:d9:fb:b9:e0:af:74:81:
                    ae:dc:92:1e:d0:85:74:bb:5f:e4:3f:f9:e6:12:ba:
                    cd:57:5e:c7:9c:c9:02:97:83:e5:2e:29:9b:31:1f:
                    a7:a8:4d:61:e4:98:bd:52:4b:71:b6:39:14:d2:11:
                    b3:72:e4:fb:fc:1b:e2:7a:44:cd:03:99:6b:8c:88:
                    7d:8e:fb:e5:9d:ba:1e:82:29:fe:02:9d:7a:d1:a9:
                    bc:5e:5a:ac:ae:ef:6f:fa:57:62:c8:3d:ac:87:35:
                    90:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:34:E3:45:D6:3F:15:D6:0B:A7:F8:F3:3C:C9:FB:24:72:31:7F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/d8d5192f-d1d7-3948-b69c-113cd296c428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.160.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d6:b7:5c:f4:2a:4f:6e:a0:2a:be:ed:e3:a3:0d:94:82:02:
         d9:8b:c9:ef:2f:53:43:21:6c:10:a3:2e:49:3c:e1:88:a1:b0:
         87:e3:63:c4:61:2f:6f:fd:27:a5:32:ec:77:ee:90:21:40:90:
         b6:de:38:60:5f:08:59:1f:9d:50:4c:df:19:79:a5:5d:8a:40:
         c9:06:66:06:60:86:c2:ec:d7:ca:85:31:be:4c:1e:1c:6e:0d:
         d0:4a:2b:8d:2d:20:1e:07:bd:71:84:ff:aa:05:cc:38:48:fc:
         0b:23:32:d7:d3:fd:4d:e2:a1:17:ea:2c:a4:79:16:f5:aa:ff:
         af:1c:c5:9b:08:e2:9e:d5:bf:e6:16:e8:21:dc:4d:bc:65:52:
         86:24:bc:9b:20:de:7f:42:5e:7c:b2:4b:b3:5e:89:36:e3:b2:
         72:77:fd:44:c8:c6:6c:82:8e:ce:47:a8:57:5d:d6:35:e7:fe:
         78:eb:a8:0b:45:c0:9d:63:fd:79:b7:7c:4f:1e:72:9f:6d:02:
         7f:c4:04:09:90:8f:93:da:3d:38:8e:30:81:f3:e0:69:94:02:
         75:86:e7:26:2f:7c:43:c6:58:c4:58:d5:f1:5c:1a:10:fd:58:
         18:33:ff:bc:39:d0:9c:32:71:19:12:93:66:0e:e3:30:c3:c0:
         7a:4b:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:23:12 2026 by rpki-client