Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/14842e5d-ad09-3b78-bf54-277a31112e14.roa
File:                     14842e5d-ad09-3b78-bf54-277a31112e14.roa (raw, json)
Hash identifier:          /QSBLjDDf/uALDuYujyG0LjK7nhLuN86yMNgoWF7O5s=
Subject key identifier:   07:19:97:97:E2:45:4F:EC:C7:4F:05:59:0D:B3:41:C3:19:5B:13:FA
Certificate issuer:       /CN=857f4763-aacf-4784-828d-557ab7b55809
Certificate serial:       010D0C9F4328584DB4A589791CCD8E11E68E6680
Authority key identifier: 60:6E:A9:6B:80:47:38:44:DB:DD:10:A6:72:70:6D:0B:97:DC:72:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/14842e5d-ad09-3b78-bf54-277a31112e14.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     393811
IP address blocks:        192.67.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:89:79:1c:cd:8e:11:e6:8e:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=857f4763-aacf-4784-828d-557ab7b55809
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=ddc110bf-b4a1-4f90-a234-8e62c0f0e3dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:16:73:c3:21:24:c7:62:c9:d8:33:be:c3:dc:
                    74:70:dd:1d:67:86:a5:85:cc:fb:a1:53:e2:42:39:
                    81:81:cb:36:53:d3:48:88:f9:34:56:56:03:e3:7d:
                    ac:15:85:71:6e:1e:27:72:02:a4:bc:26:cb:c3:85:
                    e4:6b:c5:9b:ca:47:f6:ae:1d:27:64:3a:a8:22:9a:
                    20:d3:c3:8a:57:c0:03:4b:bd:d3:b7:35:2f:3b:f7:
                    d9:db:e1:09:f5:a6:77:47:e9:29:58:18:bf:4b:90:
                    df:52:5e:24:ab:2a:1e:1c:f6:3b:74:b0:8e:3b:25:
                    b3:a7:f9:b1:c0:1e:5a:48:53:3d:23:d1:1f:e5:bb:
                    0c:58:53:55:33:a8:4c:09:07:b6:38:3f:06:8d:29:
                    00:a4:ae:26:a0:3a:e7:15:dd:c6:46:a5:a8:e1:9d:
                    66:64:85:69:6e:26:2c:1d:d4:92:df:ad:b7:20:ed:
                    7e:02:1b:7b:86:01:8f:b0:3a:60:c9:c7:38:60:ad:
                    c6:c1:52:cc:45:04:df:55:8e:b6:29:b3:c4:83:e7:
                    86:c0:3f:cb:c3:30:fc:74:a0:96:e3:58:22:68:ef:
                    70:69:c4:24:27:de:90:a5:01:b3:f6:a5:23:c8:fd:
                    24:ab:ec:e8:1c:57:e3:56:f9:d5:4a:4c:0b:5e:27:
                    49:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:19:97:97:E2:45:4F:EC:C7:4F:05:59:0D:B3:41:C3:19:5B:13:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/14842e5d-ad09-3b78-bf54-277a31112e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.crl

            X509v3 Authority Key Identifier:
                keyid:60:6E:A9:6B:80:47:38:44:DB:DD:10:A6:72:70:6D:0B:97:DC:72:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:63:ae:18:ae:aa:2a:1f:b2:43:e3:54:48:97:2b:8b:a6:50:
         b0:69:97:41:53:80:b7:c5:72:90:32:d5:78:e1:b9:12:56:65:
         51:c3:bc:0d:42:72:22:08:da:de:cb:3e:ee:da:77:83:f0:23:
         bb:0a:6f:a5:7e:c6:f9:c8:24:87:ee:9d:23:78:aa:ba:77:c4:
         0e:69:e9:fd:89:9c:97:e5:76:07:03:ec:15:34:8a:96:7c:66:
         33:0a:2e:21:d0:fd:2e:1c:60:38:d8:cf:eb:45:da:e8:96:a8:
         f2:db:98:08:38:28:9a:00:d7:53:c9:76:c0:09:c3:ca:69:12:
         a0:e0:aa:23:77:a1:da:55:53:dc:48:27:5b:6f:09:74:93:4a:
         13:5c:78:a9:22:2b:ef:66:d0:a3:58:b5:50:c3:ed:15:13:8c:
         d9:2b:89:81:4c:13:4d:fb:62:57:c1:f3:b8:34:0e:dc:5e:14:
         47:5b:2b:e3:a8:a8:c1:73:fd:ab:fd:d3:0f:69:80:2f:4c:26:
         fa:fb:6d:ec:1d:05:55:60:68:dc:5a:a9:15:61:88:da:d0:bb:
         5b:0d:68:f9:dc:f5:57:a4:d5:06:75:7f:c1:b3:5a:a1:fd:70:
         7d:55:93:13:18:7e:0d:ba:d5:61:87:a4:99:a7:b6:c4:b5:26:
         e6:e1:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:02:07 2026 by rpki-client