Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1fba552a-bbda-3a9e-b1a0-39c8b46fbd1e.roa
File:                     1fba552a-bbda-3a9e-b1a0-39c8b46fbd1e.roa (raw, json)
Hash identifier:          gxenU16Ilm/DvPXcTbNnLJ9pYY0bjIlDHzjU0+Z7T18=
Subject key identifier:   71:A7:CE:69:BF:E5:FB:CC:13:3F:06:EC:66:9B:B9:C3:8C:8B:3D:F7
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584F3052819890B2460B6A43F840
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1fba552a-bbda-3a9e-b1a0-39c8b46fbd1e.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     11124
IP address blocks:        205.196.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:81:98:90:b2:46:0b:6a:43:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=6492e5a7-c4ae-4687-a354-1273fb7cdc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:39:87:36:eb:8e:03:1f:2e:a4:a4:9b:58:86:
                    20:34:7e:a1:60:4b:e9:b9:e2:a9:fe:e5:c2:b1:e1:
                    f4:14:eb:20:80:92:25:62:b6:4b:81:58:0c:48:0b:
                    50:0f:43:67:c8:f2:3b:32:f2:1c:52:86:96:f5:60:
                    59:f2:6b:93:c2:54:a5:da:94:0e:7b:91:c6:a4:dd:
                    9d:ea:41:ef:62:d5:cf:63:4b:5e:38:66:b8:61:34:
                    88:e9:42:bb:6f:57:b9:58:93:a1:33:5e:79:83:5c:
                    f4:8e:28:0e:81:fb:4c:b7:84:65:1f:e8:eb:d1:06:
                    d4:86:9e:c5:ab:62:e9:4d:38:77:09:ce:32:35:02:
                    1f:dd:52:7a:a8:57:e7:3f:b7:ad:39:cc:6e:c2:71:
                    03:ea:69:ae:85:cc:1d:8d:dc:a0:8f:47:4c:8f:39:
                    9f:02:55:95:e6:9c:b1:4d:4f:a5:9a:41:10:ae:8e:
                    88:ef:4d:67:76:fd:ea:3b:9b:4e:17:81:e1:a5:cf:
                    5b:1b:50:0e:55:6c:30:44:ae:e5:8b:97:5e:cd:39:
                    4d:98:59:b8:11:e5:14:68:09:7b:16:72:d3:7c:09:
                    bd:da:32:63:7f:a8:13:c7:c4:f3:f7:d2:45:9c:c2:
                    95:bd:48:9a:ea:21:50:15:b7:7e:85:c7:f1:68:09:
                    a0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A7:CE:69:BF:E5:FB:CC:13:3F:06:EC:66:9B:B9:C3:8C:8B:3D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1fba552a-bbda-3a9e-b1a0-39c8b46fbd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:cc:ff:6e:5b:98:25:c4:08:b7:e4:de:fe:2a:9f:dd:6a:92:
         93:04:8d:f1:bf:f7:79:ba:a1:91:7d:b7:84:8d:db:e7:50:b1:
         b2:f7:a5:af:f6:1e:e5:90:4e:04:f7:26:5e:d7:3e:81:af:6b:
         60:7f:1d:da:bb:c6:f4:6d:a8:39:76:8f:f1:4b:90:6b:66:aa:
         84:e6:2a:2a:75:78:c2:b8:1b:22:71:45:e8:19:47:9b:e4:31:
         9a:f3:de:01:b8:e3:4e:22:cf:62:69:6c:b9:54:00:18:21:92:
         11:15:97:7b:b2:be:6c:5f:a0:93:8b:19:c2:aa:d0:e9:ce:1e:
         2c:61:af:4c:71:6a:b1:33:bd:16:36:33:25:2a:57:ea:9c:c4:
         f4:d0:a6:7b:d5:47:f7:d4:5b:6a:81:89:2b:a1:fe:50:0e:c2:
         bf:4a:94:1e:0a:e1:b3:4d:f4:4c:f8:0d:de:c2:e4:6b:8c:07:
         b1:da:0b:18:29:75:4d:53:57:a1:2d:76:03:bd:4f:43:b9:4a:
         6e:79:61:78:ad:9f:b4:a5:8f:9a:cd:20:0b:5c:71:a1:84:26:
         50:78:df:f4:97:a5:ed:68:7f:71:7e:40:37:19:a9:16:b7:53:
         91:b1:44:b4:0e:1e:16:2a:23:ef:09:ea:89:ad:3d:3e:a8:53:
         09:18:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:32:57 2026 by rpki-client