Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ac2f3c8d-8fe8-31b8-a9c1-c3c90daf75d9.roa
File:                     ac2f3c8d-8fe8-31b8-a9c1-c3c90daf75d9.roa (raw, json)
Hash identifier:          xxR1vIbC+f+192aL27I5ClWpVLq6PTxfn56RF0/fMNg=
Subject key identifier:   0F:EE:11:C9:14:A5:76:0B:52:E1:6A:20:42:4B:13:03:F6:17:87:E9
Certificate issuer:       /CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
Certificate serial:       010D0C9F4328584D8EF588E47E0C1C55F4943100
Authority key identifier: BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ac2f3c8d-8fe8-31b8-a9c1-c3c90daf75d9.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     1742
IP address blocks:        192.131.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f5:88:e4:7e:0c:1c:55:f4:94:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87417fe6-1790-481a-9bdc-6574c0ef7d7c
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=f4f32457-31a7-4a61-9dbd-5358ead44287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:54:e0:32:06:f7:34:2c:e9:af:75:da:75:
                    bb:bb:04:a9:9e:eb:dc:db:ee:62:ce:b1:e0:4f:d3:
                    f9:85:cf:0f:9a:36:43:9c:41:00:c7:38:57:ab:bd:
                    65:4a:32:49:75:2d:8e:9e:4b:39:37:03:de:9c:cd:
                    ee:3a:47:d9:f5:e9:9f:6c:32:23:c8:85:b7:b5:ea:
                    6a:f0:1d:05:22:33:02:2e:64:cd:2b:35:a0:44:77:
                    42:84:06:1a:95:5a:eb:8c:04:d7:37:ff:38:b7:f3:
                    fd:f3:84:62:e1:7f:9e:14:de:a8:15:58:2a:fe:22:
                    45:74:18:74:08:ba:0c:c7:b9:6e:3d:68:12:d6:40:
                    ce:65:1d:12:82:68:51:3a:88:01:b8:09:86:70:bd:
                    98:95:38:b3:bc:39:fd:63:49:a3:e5:ca:db:c7:42:
                    51:ab:00:20:c7:55:be:98:54:b5:be:29:3a:c2:ab:
                    ad:e0:fe:d1:91:1d:5e:0f:0b:ad:1e:18:fa:20:5e:
                    80:cb:fe:63:cf:4a:d1:fa:a9:43:1c:1a:81:ce:0b:
                    e1:7e:4c:36:7f:a0:48:16:13:64:60:7d:b4:e0:a8:
                    76:38:e9:90:1f:57:42:a9:a2:67:b4:6e:cb:8c:6f:
                    21:8b:5d:3c:e0:c4:aa:cf:4f:d5:c4:f2:43:cc:53:
                    18:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EE:11:C9:14:A5:76:0B:52:E1:6A:20:42:4B:13:03:F6:17:87:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/ac2f3c8d-8fe8-31b8-a9c1-c3c90daf75d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c/87417fe6-1790-481a-9bdc-6574c0ef7d7c.crl

            X509v3 Authority Key Identifier:
                keyid:BA:B7:0F:02:DE:9A:71:72:A4:F0:E9:40:13:AF:00:0E:D8:9A:5C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87417fe6-1790-481a-9bdc-6574c0ef7d7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ad:1c:50:a7:d9:da:cd:21:04:89:83:2d:53:22:80:93:78:
         45:b2:fd:c7:1d:b7:17:b1:9b:79:4b:88:f4:9b:b8:c6:1b:05:
         6b:1b:b8:7d:a7:ae:05:e2:c0:5e:50:96:a1:9b:11:a0:fa:6e:
         40:48:3b:d2:b1:5f:59:d9:6c:e9:34:ff:36:90:f7:c0:76:26:
         e0:21:d1:f9:d1:ae:bd:3e:3f:12:14:52:44:ac:1f:5a:ac:df:
         02:8a:12:bb:cf:34:aa:23:bf:18:cd:17:8d:52:e5:c9:bb:61:
         94:bf:cd:9b:19:0c:0f:c4:48:51:31:80:5f:c9:34:36:ea:af:
         f1:6b:a8:2e:01:b5:6f:4c:a1:d7:c6:33:ad:46:d9:22:bf:bb:
         8b:de:2e:2a:96:a5:db:7b:31:13:55:6e:e0:d2:06:72:f9:82:
         0e:67:ef:13:69:39:ed:79:7f:61:a2:48:6d:b7:32:e2:a9:7f:
         4d:3a:fa:a8:c1:40:52:c6:04:a8:97:50:96:08:69:31:f2:1c:
         23:ef:6f:36:e8:41:d0:95:f4:b2:70:e1:a5:83:c9:ad:53:77:
         96:a9:be:07:3b:86:7c:b1:db:3c:36:98:ff:a4:6b:ba:d3:38:
         73:94:87:03:79:98:7a:77:39:8b:d9:e0:f9:02:dd:af:9b:1b:
         d9:d9:01:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:07:35 2026 by rpki-client