Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/4197c8d9-c5a1-3163-a6ce-7018638e0e32.roa
File:                     4197c8d9-c5a1-3163-a6ce-7018638e0e32.roa (raw, json)
Hash identifier:          cpaREKRzK+avMM3Tkt+LA4wyzgpO5rjGJX4coPTCvFA=
Subject key identifier:   FC:B5:27:A5:24:A4:BE:E5:FF:DB:46:6F:17:69:D3:5A:7F:FC:E8:33
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584E986FAAE81853B0701FB85640
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/4197c8d9-c5a1-3163-a6ce-7018638e0e32.roa
Signing time:             Thu 23 Jul 2026 15:16:23 +0000
ROA not before:           Thu 23 Jul 2026 15:16:23 +0000
ROA not after:            Wed 21 Oct 2026 15:16:23 +0000
asID:                     134038
IP address blocks:        192.6.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:98:6f:aa:e8:18:53:b0:70:1f:b8:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jul 23 15:16:23 2026 GMT
            Not After : Oct 21 15:16:23 2026 GMT
        Subject: CN=3b9d8aca-adbc-494f-8130-2504fd2a523a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:49:97:77:ba:a3:a9:1b:42:7e:8e:c5:4a:83:
                    f6:3a:cb:e1:1b:b3:9a:1c:fd:87:6b:aa:ec:b2:42:
                    61:d0:9d:df:98:17:d6:8c:16:62:a1:49:77:66:98:
                    16:47:4b:95:6c:ed:d4:d0:a6:e9:57:d1:ee:83:96:
                    c3:42:04:f2:f5:19:3c:4a:d6:df:9d:8e:d9:98:f9:
                    cc:ff:7e:b6:3e:72:10:be:68:62:60:64:58:77:1f:
                    c6:39:2b:b5:9b:8e:33:8d:82:c1:20:3f:22:d9:7b:
                    e4:93:18:30:9f:b9:95:84:0f:1b:7f:71:bd:d6:c4:
                    f4:e7:3e:68:88:04:ad:f3:7e:90:23:fb:f2:48:51:
                    45:65:21:c2:be:ec:f4:d0:f5:39:3e:d6:b5:85:69:
                    f1:50:ca:a8:89:3e:1f:77:b3:8e:0a:f7:66:d4:20:
                    2b:a3:2b:59:83:fc:22:18:04:90:bd:8f:b4:ea:03:
                    27:b4:dc:4b:49:76:da:85:a3:65:e2:49:60:6c:f8:
                    8b:cb:64:f9:11:72:7e:59:68:0c:f8:c7:be:c0:3c:
                    09:da:e0:51:db:75:cc:3b:43:af:b0:ae:34:77:ee:
                    02:d6:56:62:1e:59:f2:35:07:1e:3f:34:50:cf:6f:
                    16:c2:62:5a:7f:e6:0b:08:ae:d1:99:fc:17:09:c2:
                    69:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B5:27:A5:24:A4:BE:E5:FF:DB:46:6F:17:69:D3:5A:7F:FC:E8:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/4197c8d9-c5a1-3163-a6ce-7018638e0e32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.6.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ac:b8:c8:a5:2a:39:06:a1:e1:c0:e0:eb:57:3c:35:17:cd:
         88:9a:26:72:ab:24:83:73:f8:cb:3a:22:ca:68:a3:79:cc:f6:
         6d:ba:c6:3c:f0:6b:fc:5e:66:b1:0f:ec:43:5f:54:c1:3c:7c:
         8e:82:9a:73:52:e7:f1:62:1a:d7:0c:c2:ae:32:1d:66:a0:db:
         53:85:9a:02:46:05:46:ca:b0:92:a0:d9:95:fc:c1:07:5a:08:
         af:f8:cc:50:ff:52:5e:a6:fe:d3:2a:dc:e8:39:5f:7a:8f:f6:
         ce:91:c2:71:b8:6e:63:c5:1a:f8:aa:c7:91:1e:be:83:02:73:
         e3:08:00:05:6b:db:64:0c:f8:74:e7:71:3e:93:8b:e3:52:3e:
         58:09:03:a8:51:83:cc:72:13:47:2e:91:c9:0b:cd:1a:54:02:
         19:f2:25:b1:14:8b:b1:ce:0f:99:e5:5e:8f:67:ea:0a:87:38:
         89:ed:27:27:6d:ef:56:79:f1:28:b9:09:ce:78:90:c0:12:03:
         d4:c1:5d:01:8d:c2:1a:6e:d2:9b:2c:5e:e4:31:b3:e8:90:46:
         e6:1a:8a:86:95:a8:e2:fa:6d:66:6b:43:17:8f:76:8b:04:3b:
         2c:5c:09:15:93:6f:b1:7e:fa:1d:68:73:d6:60:cb:d4:bc:bb:
         b6:2f:c2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:50:56 2026 by rpki-client