Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/0ee1071a-423b-3d60-959f-226738682d8b.roa
File:                     0ee1071a-423b-3d60-959f-226738682d8b.roa (raw, json)
Hash identifier:          rheU+ZIVJ7MngnyPtk9AbP6dp6S1h2vGOvOAemRLPZE=
Subject key identifier:   5E:E3:ED:09:4D:35:40:0E:57:C2:1C:8F:2C:82:42:D9:BB:B1:9C:AA
Certificate issuer:       /CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
Certificate serial:       010D0C9F4328584F49731C9ACFD78EF83005D380
Authority key identifier: B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/0ee1071a-423b-3d60-959f-226738682d8b.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        192.25.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:1c:9a:cf:d7:8e:f8:30:05:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42d7728-7f0c-4717-8b1c-6287fc440d94
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=49c84e7c-f73a-4d69-80c4-4be314aa694c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:97:e1:9e:a6:a1:e1:fa:5b:d5:3f:91:6a:36:
                    28:d3:5c:0f:e9:86:6b:0b:fb:de:5a:ac:11:0a:a6:
                    c9:3f:c7:5c:d6:09:2d:75:3d:56:1c:e4:75:d0:78:
                    c8:ee:fb:b2:ba:fd:4f:26:dc:7d:b0:3e:29:6c:79:
                    12:57:b7:60:6b:3a:87:9f:cb:1e:bf:97:dd:65:36:
                    56:5e:93:36:41:97:0f:b1:86:b7:e4:ba:87:35:54:
                    46:ee:13:09:dc:34:7f:b5:be:7c:5b:55:68:ba:d6:
                    f8:ba:4a:c7:ba:b7:da:a8:42:7d:23:72:d1:fe:62:
                    53:0d:55:7c:a6:dc:ff:13:0a:5f:e9:85:d4:24:3c:
                    9b:f0:2c:3f:07:d7:fa:e5:43:25:02:7d:88:ea:8c:
                    58:46:1e:76:b2:56:32:ed:cf:28:81:7d:fa:7c:47:
                    1d:d4:91:01:a9:69:00:6a:a3:7a:7d:a4:a6:ca:62:
                    74:61:68:92:f8:af:aa:4f:2c:57:d6:bb:40:60:34:
                    2c:bd:bb:67:77:32:9a:dc:93:95:19:2a:55:d3:ad:
                    e2:54:23:ac:6c:35:ff:cc:8a:27:ad:d5:b5:0d:f8:
                    77:bc:9f:8b:8f:6e:a5:9b:1a:1f:7a:31:c9:8c:48:
                    4d:f6:7e:1c:2c:e6:7e:66:d7:0b:a6:fb:f1:89:a3:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E3:ED:09:4D:35:40:0E:57:C2:1C:8F:2C:82:42:D9:BB:B1:9C:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/0ee1071a-423b-3d60-959f-226738682d8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94/a42d7728-7f0c-4717-8b1c-6287fc440d94.crl

            X509v3 Authority Key Identifier:
                keyid:B1:D2:0A:86:B1:F1:E3:E3:02:C7:EF:CF:42:28:B7:BD:71:50:05:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a42d7728-7f0c-4717-8b1c-6287fc440d94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.8.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:bb:6e:c3:02:23:bd:30:0c:62:1c:6f:09:61:33:da:46:2e:
         2e:fa:da:d3:0e:41:8c:01:ec:94:c5:87:b4:d8:f1:ef:2b:a5:
         f8:50:fd:0f:45:c0:1d:db:c1:aa:f2:7a:3f:ed:8f:30:9b:bb:
         61:79:0a:25:c4:03:d7:74:54:8b:ec:c4:7d:60:86:0a:08:8f:
         e1:18:1f:ca:1b:ec:79:87:cf:f5:36:7b:a2:e5:d2:3d:96:a3:
         73:6b:92:d2:d2:0d:96:99:a8:54:2a:6d:6b:64:8c:96:c0:e4:
         1f:7f:70:47:39:1d:66:76:3f:41:bf:c4:6e:51:0e:c1:ef:83:
         dd:dd:36:f4:04:c4:2c:0f:1a:18:d3:b1:4c:0f:ed:50:a6:3a:
         d5:d0:6b:8f:20:65:f0:c5:73:50:53:22:4c:8b:6a:78:36:7b:
         03:4c:65:f7:67:16:f6:9d:59:41:fe:16:74:f3:3e:a3:3a:a6:
         4a:9f:86:7c:ff:44:e0:fe:70:b3:e5:31:85:d8:5a:a3:11:32:
         e5:98:19:be:ad:fc:71:9a:a6:8b:2e:76:99:71:fb:95:26:d3:
         95:a9:5d:d2:95:40:c3:28:70:63:c8:41:c2:45:26:27:75:84:
         28:ee:e4:f0:58:b0:6f:16:40:81:92:44:80:88:91:25:61:e8:
         dd:49:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:59:13 2026 by rpki-client