Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa
File:                     9f89589a-17cb-34cc-9116-cdb2d9be527e.roa (raw, json)
Hash identifier:          OTC86/HG2ynGlqR+P5sqMHkct/0qNbNc4maEeOyOeCs=
Subject key identifier:   89:77:70:F8:B5:7F:92:A7:33:3E:7F:41:B1:E8:7C:4E:79:86:E5:89
Certificate issuer:       /CN=a619cbd3-121a-4de5-b31a-efa0c294c430
Certificate serial:       010D0C9F4328584DBFD05CC3D237579D0DE325C0
Authority key identifier: 20:E3:4B:44:25:30:34:A0:86:8F:A3:75:96:5E:65:DA:D8:BE:16:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     16509
IP address blocks:        192.206.146.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:5c:c3:d2:37:57:9d:0d:e3:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a619cbd3-121a-4de5-b31a-efa0c294c430
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=b8e69996-bfd9-4fd4-afe0-409ad0d8a857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:09:8f:2c:d5:10:e1:70:4b:14:41:7a:69:b5:
                    6e:fc:3c:06:a5:08:c5:e4:ab:ed:2b:7f:0c:58:07:
                    9a:4f:ef:df:24:1d:d6:89:bf:20:0c:5b:36:a8:f3:
                    6f:e1:e8:d2:41:a1:a0:45:dd:c1:0c:a0:c3:ca:cf:
                    df:f0:47:43:fb:7c:bd:52:2c:c2:fc:16:9b:a7:f8:
                    fe:b2:b2:83:ae:91:86:73:f4:9b:09:3b:ba:e6:3a:
                    f3:72:6a:16:f0:f5:ac:e8:60:18:88:39:d4:7a:1f:
                    ce:8d:ab:05:a3:4e:e0:5c:7f:9d:cc:c7:8f:56:e1:
                    d9:c2:79:2a:5d:4e:5c:b2:c8:bb:16:65:08:e9:ab:
                    34:f8:38:68:5b:75:f3:fc:99:46:43:2c:1c:34:fc:
                    fd:bb:29:a9:c8:57:7d:31:83:c6:0a:04:a3:80:40:
                    89:3f:30:ee:ca:30:64:9f:68:66:27:cb:06:90:c6:
                    c6:cd:4b:b8:b4:e4:35:91:eb:25:8f:7f:00:34:dc:
                    e5:43:79:81:cc:ed:4e:9f:d0:b2:3f:83:c5:69:2b:
                    af:b6:6c:8c:43:b7:41:c5:84:b8:bc:81:10:2f:71:
                    80:b3:77:25:c5:31:5b:3e:42:e5:4b:79:9e:26:56:
                    92:73:d4:10:83:0b:60:ae:ca:4c:a8:cb:46:8c:c0:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:77:70:F8:B5:7F:92:A7:33:3E:7F:41:B1:E8:7C:4E:79:86:E5:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/9f89589a-17cb-34cc-9116-cdb2d9be527e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430/a619cbd3-121a-4de5-b31a-efa0c294c430.crl

            X509v3 Authority Key Identifier:
                keyid:20:E3:4B:44:25:30:34:A0:86:8F:A3:75:96:5E:65:DA:D8:BE:16:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a619cbd3-121a-4de5-b31a-efa0c294c430.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:60:b5:38:0e:3c:4d:bc:94:57:b6:ef:2d:8a:c9:47:17:c4:
         54:fa:4e:0f:a9:e9:11:72:3a:a8:61:a7:ed:87:98:36:cd:14:
         b1:b1:38:21:02:f9:ca:8e:e4:05:79:d9:3e:28:97:89:82:5f:
         84:83:4b:95:35:ba:d1:1b:48:b4:c9:7d:45:10:9a:59:24:80:
         f7:6a:8e:9e:64:f2:f4:33:ef:79:df:1b:25:c1:0a:8e:cc:aa:
         c0:fe:ce:d8:31:a3:fe:84:78:f3:f9:da:45:d0:39:8c:5a:2a:
         5e:b1:07:10:46:93:83:0c:46:9e:81:52:80:05:62:c4:6a:d6:
         1c:4c:c1:12:bf:4c:af:37:7f:cb:60:21:a1:47:27:2f:d8:69:
         f6:1d:ce:38:a4:dd:5e:fa:80:9f:3c:49:72:bd:b3:5f:3a:3b:
         27:a3:de:de:60:d4:92:6b:e6:78:3d:9a:9a:11:e7:03:73:cd:
         ec:9d:db:3b:fa:7d:33:7e:2b:85:c4:f7:77:bf:b8:73:54:26:
         17:21:cc:5c:3d:68:f6:75:f8:fc:b1:17:bb:4d:fc:29:bc:78:
         a2:28:da:8b:0b:fe:9b:45:a9:4d:d0:1e:03:88:f3:a6:ad:96:
         16:cc:bd:13:c7:88:b8:7a:bb:9c:84:d6:59:08:b3:17:27:1f:
         17:03:c6:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:21 2026 by rpki-client