Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ecb6e2a3-c4ee-38ca-a26d-4571a4292bb3.roa
File:                     ecb6e2a3-c4ee-38ca-a26d-4571a4292bb3.roa (raw, json)
Hash identifier:          jtDD0XymXSUEHio7SgIOf8B6veSqZtCGzAr4Bqoy1BA=
Subject key identifier:   F1:DD:6C:28:7C:73:C9:80:EB:6B:74:AF:4C:A4:E7:C9:85:F3:91:98
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F4972B738A51DA71AA0200900
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ecb6e2a3-c4ee-38ca-a26d-4571a4292bb3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20001
IP address blocks:        192.171.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:b7:38:a5:1d:a7:1a:a0:20:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=be7e08d2-70ce-4387-8aea-75b48b78cb24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:47:86:dd:21:57:40:5e:bd:6b:55:61:1e:a3:
                    ad:4a:e5:30:a6:47:dc:60:fd:91:cc:5f:ec:a0:b7:
                    46:60:be:88:c3:a4:f9:d1:a6:3f:71:d2:79:c7:e2:
                    60:18:de:9f:2e:f4:57:fc:de:a6:80:ce:df:9e:ed:
                    cb:9a:03:3f:79:80:67:a0:43:0c:20:46:83:6d:9e:
                    dd:9a:a2:de:82:c5:43:2e:d6:6c:93:f4:e8:83:56:
                    1d:6f:70:e7:d0:eb:43:44:6b:e6:09:ab:c4:ee:70:
                    56:84:92:9f:e7:00:97:18:94:6a:d5:c0:cc:2d:82:
                    09:70:13:17:d8:d5:ac:d3:44:57:27:23:f2:e8:7f:
                    c2:77:2b:ec:a2:d9:c9:8e:e6:7b:51:34:8b:64:5f:
                    90:1d:75:59:71:ff:34:d4:41:1c:13:91:b8:13:d6:
                    0b:dd:35:0e:36:28:3a:7d:e5:50:06:b1:62:50:48:
                    ff:e5:81:ee:e2:93:c5:5d:36:34:58:97:4c:a1:67:
                    09:7f:3a:58:70:e7:fc:9d:11:bf:09:d4:50:4e:dd:
                    30:05:df:d5:8e:52:92:d5:54:72:15:a6:8f:87:aa:
                    43:c8:a8:b9:dc:84:bf:af:d2:33:50:53:7c:45:4e:
                    d3:54:94:bc:90:7b:aa:9e:53:24:fc:0b:3f:a4:9b:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DD:6C:28:7C:73:C9:80:EB:6B:74:AF:4C:A4:E7:C9:85:F3:91:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ecb6e2a3-c4ee-38ca-a26d-4571a4292bb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:ed:34:c5:52:d8:2e:81:b5:6e:55:0c:40:9b:e2:aa:47:52:
         7b:d1:58:bc:11:a2:43:8d:21:00:7d:e9:73:42:52:55:44:49:
         b0:b5:81:cd:53:05:ae:d3:cc:34:cc:e6:02:0f:f0:45:9e:33:
         0e:2a:ee:be:1b:a0:b4:45:0c:40:7c:1e:77:1e:5b:08:23:5e:
         95:21:a2:f8:ef:77:b5:22:25:c7:79:c6:4b:aa:14:77:27:cd:
         99:97:5d:12:32:ee:6a:1e:c1:d5:1b:30:04:2b:5e:2f:f0:e6:
         8a:64:c5:e1:d0:c1:0c:91:0a:d9:6f:13:b5:4c:cf:0e:0f:4e:
         eb:04:d4:78:03:12:79:f0:a3:57:dc:68:7f:26:5d:0b:fd:e4:
         a4:5c:b0:0c:99:63:84:55:b8:47:1b:fb:c7:ba:d5:46:ac:13:
         85:1c:24:83:46:a9:dc:bf:bd:00:f8:fe:f6:6f:fc:43:ba:9f:
         51:de:0c:81:11:9c:29:69:0e:9a:4c:94:85:7d:9e:99:bf:2f:
         ab:3c:7a:32:75:1a:9c:8d:c3:c1:d7:35:7b:e1:4d:43:4b:65:
         f0:06:e8:f0:31:fc:c1:ce:8d:a6:77:1a:7b:06:7e:2e:9d:ed:
         68:4b:67:1c:e7:14:1c:dd:aa:92:f9:8b:94:98:cf:99:b3:62:
         ea:79:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:34:25 2026 by rpki-client