Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b9eb070b-0e17-366f-bca7-2671dea8598a.roa
File:                     b9eb070b-0e17-366f-bca7-2671dea8598a.roa (raw, json)
Hash identifier:          p4tmfkdtMaEMhFnG/7rUXPxcOoB8C2QBusvY9S7DN+Y=
Subject key identifier:   00:43:BD:8C:C5:A4:E0:C4:B1:2B:A9:97:6E:02:2A:17:CA:F2:22:48
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584F305281A47CC57719FFC32100
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b9eb070b-0e17-366f-bca7-2671dea8598a.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     394437
IP address blocks:        205.196.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:81:a4:7c:c5:77:19:ff:c3:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=4143d398-8272-4a83-9ef4-daf39932e845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c8:57:6d:d7:0a:98:29:ad:86:75:99:57:f2:
                    53:56:bd:5f:bc:91:aa:4a:a0:0e:a5:f3:21:0e:94:
                    2c:58:2a:78:11:cc:07:f8:1f:1a:ca:cd:e4:82:73:
                    72:b3:c3:ff:dd:8f:78:8b:50:0a:58:77:26:74:9f:
                    94:7e:ae:95:86:72:87:18:57:a1:7b:12:ff:2a:20:
                    26:2d:f8:b8:5f:32:cb:b4:af:05:bb:5f:d6:75:d9:
                    e2:39:a1:fb:68:93:8e:cf:5d:49:ea:93:32:81:1e:
                    ab:36:fa:d4:e7:c4:4f:5c:c7:5a:21:31:1d:5c:fe:
                    22:38:1d:e6:4e:61:42:a2:06:1a:ed:a6:21:e4:bb:
                    91:ed:33:89:19:41:c4:80:82:3d:c7:c7:65:b0:81:
                    d0:07:ca:4b:f4:d6:4f:38:ad:c0:37:02:b1:bd:28:
                    95:21:c2:a8:ee:fc:0d:c9:67:99:1f:99:15:b7:d9:
                    37:98:be:6b:f5:cf:06:36:2b:44:eb:59:ae:07:e3:
                    bd:e4:ce:61:d3:7a:46:70:74:41:27:80:07:a8:6c:
                    bb:b2:da:f9:0c:9b:aa:a9:a9:01:83:2d:9a:28:b5:
                    fc:86:f7:1c:59:b9:0a:ef:12:a4:63:27:91:04:c6:
                    00:85:99:ec:3a:7e:05:4b:d0:be:98:1a:e6:71:16:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:43:BD:8C:C5:A4:E0:C4:B1:2B:A9:97:6E:02:2A:17:CA:F2:22:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/b9eb070b-0e17-366f-bca7-2671dea8598a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.196.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:68:2a:60:01:e5:df:47:0e:55:79:76:7a:cd:44:73:64:c7:
         4e:12:5a:50:11:c3:ac:82:32:02:8e:f8:e4:02:33:9f:9d:72:
         72:02:34:3f:9d:7b:e7:ab:92:10:ab:6f:ad:57:c4:69:c4:69:
         99:2a:ba:ee:44:28:a6:b7:12:78:64:3e:ce:f4:5a:d4:86:d9:
         60:63:00:a4:8b:0d:5d:23:35:65:01:ba:41:0a:1f:32:e9:5f:
         e1:b4:0c:ff:f1:9d:52:b9:ae:86:21:13:c7:f1:11:11:eb:c3:
         13:b5:eb:e3:03:2b:7d:e5:94:37:89:ad:d7:9f:ef:9f:b2:e8:
         a3:4d:d7:3d:d5:55:d3:ed:0e:75:cc:2d:94:46:3a:40:f2:7d:
         d5:aa:9f:cf:11:57:4f:59:56:ac:17:16:24:44:c5:a1:00:a0:
         f8:20:bc:d9:8c:ad:f8:1d:07:4c:58:aa:fb:bc:a1:62:d8:cc:
         a2:b7:fd:ef:79:25:68:ea:22:7d:f7:7b:ed:4e:8c:fe:fb:dd:
         9e:16:95:96:7c:2d:aa:b8:9e:dc:35:65:b3:72:02:a4:f9:d7:
         de:67:22:e7:fd:28:1e:02:83:75:b5:ad:84:d7:93:70:2f:7f:
         fa:81:ea:10:fa:35:3f:72:f7:00:3d:d4:1a:67:27:a2:2e:47:
         11:f1:a1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:49:05 2026 by rpki-client