Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/24b4937e-473b-3a85-a189-5b0d94e3a661.roa
File:                     24b4937e-473b-3a85-a189-5b0d94e3a661.roa (raw, json)
Hash identifier:          +AJ657geNYoZSe9y83IoMLzgNxSgwwvVv9YTE+a3PMY=
Subject key identifier:   5C:8C:48:7B:C9:17:69:49:09:37:D1:75:46:4F:34:24:8F:84:A4:F0
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F5A331913F9E764924CF69300
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/24b4937e-473b-3a85-a189-5b0d94e3a661.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        141.164.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:19:13:f9:e7:64:92:4c:f6:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=3796ae61-1811-44fc-897b-7b83569fd494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6a:d4:66:ec:00:2a:b9:e1:24:45:8b:b7:78:
                    32:cf:ec:03:71:f8:d0:e3:44:e2:40:b5:a5:a6:37:
                    b6:90:d3:81:fc:68:78:c3:e2:9a:31:28:07:4c:4e:
                    76:55:2c:dd:58:24:54:b9:46:27:3b:4f:74:4a:26:
                    a2:b9:3d:09:54:13:f4:ab:57:1c:81:cb:2e:71:52:
                    0d:67:cb:d8:63:51:d2:12:c3:15:da:6e:82:22:d4:
                    16:09:48:c2:28:78:31:a8:87:47:0a:e2:20:4c:9f:
                    be:a8:c3:05:54:cf:2c:81:5c:0d:8e:86:8a:3a:a7:
                    26:3d:81:4e:e6:27:5a:a9:a1:a3:e3:68:bd:b2:c1:
                    64:d2:fc:10:bc:7b:56:4b:38:08:4b:38:c1:c9:d9:
                    c8:8a:3c:a7:71:0e:89:34:2c:30:23:a4:8b:ad:2f:
                    7b:84:18:eb:7a:fb:15:9b:79:55:5b:eb:32:f0:33:
                    45:89:bf:02:c0:03:e6:7c:03:56:0e:17:31:f7:e5:
                    4d:49:3b:a0:d3:ad:35:ac:1b:28:19:2e:c8:c9:27:
                    8c:e1:4a:d8:31:cf:e3:67:b1:af:c7:3d:e6:5a:48:
                    f3:b1:02:85:68:46:bf:24:e9:6e:1c:7f:5f:5e:9f:
                    19:2e:52:94:8d:52:82:9b:70:7a:b1:6f:f9:90:88:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8C:48:7B:C9:17:69:49:09:37:D1:75:46:4F:34:24:8F:84:A4:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/24b4937e-473b-3a85-a189-5b0d94e3a661.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ba:4c:98:f6:49:e1:f6:8b:b9:02:09:3f:3e:66:f7:a8:12:
         85:91:83:a6:f0:05:49:21:77:45:1b:fd:95:9a:72:1b:77:cb:
         68:53:6e:8a:1a:f4:50:8c:b6:e2:e7:85:f0:69:ab:7b:f1:6a:
         73:e4:f0:f7:08:f3:64:ee:2a:da:96:17:e5:d7:c9:a6:2f:44:
         53:e6:ca:84:62:67:80:9e:96:d3:64:5d:d0:6f:e3:a5:9d:4c:
         10:69:55:40:66:8b:27:fb:97:c2:8e:1b:88:5f:fa:6b:ad:f1:
         4f:6c:1b:b2:66:38:48:20:c2:00:06:87:db:23:b9:36:6d:06:
         a4:99:b5:4f:fc:b1:bc:8f:01:8b:22:8e:ad:86:fa:5f:dc:89:
         96:a5:ea:a0:b0:2f:e3:f6:66:9e:83:f4:83:b5:94:81:0d:30:
         46:f1:3e:b3:53:1b:b2:3c:5b:b2:18:1a:09:76:b3:c6:d3:6f:
         53:2f:d7:c6:e3:e2:b6:97:41:c3:ca:95:c8:21:0b:ed:c3:27:
         9a:e1:3e:d2:76:4f:07:24:f4:3b:08:6b:76:85:9c:27:26:52:
         47:78:ba:93:d3:cb:af:bb:aa:13:a8:14:18:cb:bb:52:b1:e3:
         ec:25:cb:3c:99:84:17:25:4e:df:48:e4:2e:86:54:3c:4d:b9:
         07:37:78:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:05:30 2026 by rpki-client