Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/4aceb28e-2058-3b15-a0b6-b4509a4fdd94.roa
File:                     4aceb28e-2058-3b15-a0b6-b4509a4fdd94.roa (raw, json)
Hash identifier:          2Lbl4C/dnAsNU8ctorEYK81QRhxykgLTzXE1h1VLsEQ=
Subject key identifier:   32:3E:45:63:33:9B:BA:61:3A:60:A7:E3:BC:8E:EC:0B:4A:FB:B9:43
Certificate issuer:       /CN=3628f031-d746-4562-973e-3312db1465a2
Certificate serial:       010D0C9F4328584F4989B0501D69D0EC5C8A6900
Authority key identifier: 92:46:91:5F:8D:D2:B6:25:A9:D2:56:8B:4B:2E:E9:E0:BF:09:B3:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/4aceb28e-2058-3b15-a0b6-b4509a4fdd94.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     32603
IP address blocks:        192.83.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/3628f031-d746-4562-973e-3312db1465a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/3628f031-d746-4562-973e-3312db1465a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:b0:50:1d:69:d0:ec:5c:8a:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3628f031-d746-4562-973e-3312db1465a2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c655ea53-948e-4304-a9ac-9459be297bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4d:80:9d:d9:ee:41:f4:89:f6:a9:74:dd:ca:
                    dd:4d:0a:a4:12:d5:c1:5c:2b:a1:f4:9b:29:9d:e2:
                    17:c0:b9:3d:ad:68:7b:82:7b:0f:63:f3:b2:f7:78:
                    af:35:9a:df:e7:3d:52:bd:c8:6d:fd:72:8d:49:c5:
                    88:1f:80:68:7b:eb:94:74:06:88:0c:c3:f4:8a:0a:
                    75:0a:f0:a6:a7:27:a6:12:42:e1:37:a0:02:b0:7f:
                    22:d8:08:ea:3d:32:52:e2:8f:7f:ca:c3:78:1c:d4:
                    df:02:e8:c3:d8:16:0e:70:fe:3a:49:1c:b2:7d:6b:
                    62:71:67:71:b1:9d:45:d1:a3:73:2e:f4:23:f6:c2:
                    b8:13:e4:73:d0:a6:60:7c:c8:2a:2e:89:72:cc:5d:
                    32:70:de:3b:53:4e:4c:93:ba:ed:74:a7:c7:3b:bc:
                    8f:16:46:2c:c2:6e:33:17:0c:1a:5a:4e:9a:85:09:
                    59:f4:0b:8a:44:ed:f4:47:09:2a:75:18:3a:b1:07:
                    bd:69:eb:9e:42:b0:1c:28:03:6d:29:7d:29:70:eb:
                    19:82:55:de:7b:90:3a:5a:09:4e:74:34:b2:1d:fc:
                    12:ba:e9:77:be:03:cf:da:31:c7:a3:ef:a7:42:0c:
                    4a:2e:c1:98:61:e4:a1:77:49:d2:3a:98:7c:ae:af:
                    5b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3E:45:63:33:9B:BA:61:3A:60:A7:E3:BC:8E:EC:0B:4A:FB:B9:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/4aceb28e-2058-3b15-a0b6-b4509a4fdd94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2/3628f031-d746-4562-973e-3312db1465a2.crl

            X509v3 Authority Key Identifier:
                keyid:92:46:91:5F:8D:D2:B6:25:A9:D2:56:8B:4B:2E:E9:E0:BF:09:B3:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3628f031-d746-4562-973e-3312db1465a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.83.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:fe:a7:58:77:26:14:ab:e4:ae:4f:2b:66:cd:e3:d5:12:
         0a:4f:bf:60:ba:92:23:76:b7:df:e4:8c:18:44:37:76:34:b9:
         b3:85:31:b4:fb:96:ba:e0:b8:ef:74:50:7c:5c:0f:77:81:71:
         e5:b6:1a:12:4d:2e:b3:fd:a4:63:7a:9b:a8:49:b0:c6:dc:58:
         e9:32:61:45:a0:09:4b:7b:5d:20:fc:d1:4b:d1:1f:3f:ea:05:
         30:a6:fe:42:29:a6:5e:d8:2e:49:61:e6:29:a4:24:a6:e7:e6:
         95:8f:6d:86:ca:43:b3:e6:ae:44:49:66:df:55:0f:6c:27:b2:
         6a:bf:e4:54:ed:57:cb:24:0e:f3:e3:cb:18:b2:2e:4a:c6:af:
         7e:e1:ea:cb:b5:f4:8a:5f:4f:ff:ee:03:7b:8f:ce:89:89:6b:
         fa:9b:32:19:83:8e:6c:f9:81:05:aa:72:59:c1:4a:24:b7:55:
         0e:59:01:0b:81:d3:f0:68:81:bb:9e:6a:ac:30:86:1e:16:4a:
         d5:0f:b9:ed:7c:2d:e4:7c:87:09:1d:87:48:ac:38:77:24:78:
         2a:ff:5e:95:ce:0d:3e:2e:b3:d2:92:1d:12:86:98:7c:dc:21:
         a2:a7:33:47:ef:fe:8e:a2:90:eb:8f:5c:35:ec:0f:5c:0d:f5:
         99:0f:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:59:38 2026 by rpki-client