Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/5dc294f6-f75b-34a7-87f3-e8e909072ab6.roa
File:                     5dc294f6-f75b-34a7-87f3-e8e909072ab6.roa (raw, json)
Hash identifier:          0TBd7CW9e3snrpxhXrdg+t9i69QCg3U2FJy91EF+ME4=
Subject key identifier:   C5:26:45:E5:9F:C3:F0:B5:12:2E:87:F9:68:99:73:28:5D:E3:31:0A
Certificate issuer:       /CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
Certificate serial:       010D0C9F4328584F43DD57ACD1A0CA5F36DA1700
Authority key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/5dc294f6-f75b-34a7-87f3-e8e909072ab6.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     4185
IP address blocks:        192.104.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:57:ac:d1:a0:ca:5f:36:da:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=6dd6ed2f-1bd3-41e9-9cbb-859046bcce42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e8:aa:c2:0a:33:f1:02:0c:23:d9:ed:f1:58:
                    c3:58:d9:ad:89:33:9d:8f:7f:73:a4:7c:d6:83:b9:
                    69:76:b1:78:4c:d4:62:e9:ba:39:74:44:a3:ed:f2:
                    3a:26:a1:03:12:71:50:b6:e9:0a:ee:79:0a:f8:b0:
                    a4:a9:78:6f:e9:5b:dc:2a:14:72:bc:23:b6:30:92:
                    4a:e3:35:cf:39:3f:20:99:a9:2d:46:60:9a:c2:68:
                    34:e1:0a:6f:25:19:15:09:fb:c6:02:ff:bd:3b:95:
                    e3:50:19:72:fa:7b:c9:64:83:ad:b5:80:4b:01:34:
                    1e:fd:b2:8c:83:8d:3b:53:9e:a6:ac:04:fa:2b:18:
                    91:ae:4b:03:c5:6d:10:96:47:53:f0:63:6a:03:29:
                    eb:b7:c4:0f:ff:48:88:61:80:24:de:04:2c:cb:8f:
                    af:c8:3a:2d:cb:e2:ef:c8:d3:64:9d:97:06:0b:d2:
                    04:8d:3a:4a:09:bf:26:da:20:9d:6a:34:54:60:f2:
                    24:79:ea:33:45:12:a5:a1:88:8d:3e:9e:3c:e3:e2:
                    e1:0e:80:54:2f:d0:96:2e:f8:1b:23:24:17:a0:0a:
                    c9:54:ae:3b:8c:69:9a:2d:bb:4f:17:86:27:49:58:
                    71:37:f0:4d:a4:2c:a6:1b:fe:e1:22:f1:27:c4:76:
                    86:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:26:45:E5:9F:C3:F0:B5:12:2E:87:F9:68:99:73:28:5D:E3:31:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/5dc294f6-f75b-34a7-87f3-e8e909072ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl

            X509v3 Authority Key Identifier:
                keyid:46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.104.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:cc:83:aa:af:89:d2:c4:a0:e2:f0:36:41:f5:4b:ef:d7:20:
         c3:43:94:6b:54:a5:32:67:ff:c5:da:ec:de:70:cb:23:85:f2:
         53:46:3a:34:43:3c:fc:ae:44:e2:10:3c:e4:3d:c6:c5:f0:c4:
         85:20:f2:6e:53:fd:d3:dc:03:5d:8c:4e:da:15:b2:2a:62:1c:
         42:43:d5:e2:6e:e4:03:9e:92:3b:6d:4f:bb:6c:27:35:84:0d:
         e7:f5:dc:15:ee:f2:2d:5c:25:ff:4d:2c:b0:14:08:4d:e0:62:
         fa:13:4c:a3:f5:8f:a2:0e:89:ef:09:1b:08:d5:3a:fc:a9:b7:
         ed:d9:79:56:6b:ea:2d:81:c4:76:9e:f9:90:e5:d5:e8:23:dc:
         aa:c3:af:98:d0:77:78:96:44:79:60:70:e9:c1:82:47:9c:d9:
         ab:9b:ef:5f:9f:23:71:cd:d0:81:18:5f:99:6f:46:9a:80:88:
         2b:be:f3:61:c6:e3:02:a8:e5:6b:c1:b1:f9:89:73:12:e4:ae:
         16:84:12:62:13:a7:ea:c6:65:8c:8b:af:5e:ab:da:97:11:41:
         98:ed:c1:f1:80:47:33:28:81:e6:58:65:0a:76:32:cd:e5:d2:
         a6:d5:e3:e3:4e:38:9a:24:ae:a9:f9:d0:e2:3e:f9:b1:06:d4:
         8f:34:4c:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:05:08 2026 by rpki-client