Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa
File:                     63906606-7983-3c12-8d4a-5461f3222ca9.roa (raw, json)
Hash identifier:          VQz+W6O9CqpGZF2yPk2L4BiTC7IUDthQGlR/V1Yj6TU=
Subject key identifier:   E1:13:5B:A4:1D:3D:A9:6F:80:44:5B:99:0E:78:CB:DC:7E:25:DB:95
Certificate issuer:       /CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
Certificate serial:       010D0C9F4328584F6C58379B55010D7FBC3FAA00
Authority key identifier: 72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     55178
IP address blocks:        192.230.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:37:9b:55:01:0d:7f:bc:3f:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8903a14-ef5f-4310-b694-60f49b1c61a9
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=669071d3-e13e-449f-9e52-3d08995c352d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b9:ea:9f:60:1c:96:bd:e1:fa:e1:e0:b1:52:
                    0a:7f:0f:8d:9e:ab:15:d4:c1:5a:8d:eb:8b:1c:25:
                    97:89:7f:d1:e5:2c:87:1a:8c:e7:7c:c9:19:98:ee:
                    f2:0f:62:a2:e3:e2:e2:c1:de:af:2f:dd:47:4f:7f:
                    b9:52:8a:c7:c0:f4:23:56:29:22:34:dd:90:d7:a6:
                    be:04:4a:db:04:9f:6a:73:34:ac:29:6a:4d:b2:ec:
                    59:8f:05:76:fc:e2:17:f8:26:52:16:e3:8d:ce:92:
                    96:17:e6:b2:d4:72:be:4f:47:13:6f:41:e5:ec:00:
                    31:bf:b8:41:4b:02:e4:a0:ee:f4:f2:7d:d0:ce:ad:
                    0f:c7:28:48:02:87:e0:54:a8:b7:b1:e1:e1:d2:e3:
                    68:81:3d:9d:89:76:0e:cf:71:18:54:29:4c:73:3a:
                    92:8b:91:26:69:d1:40:70:89:09:22:31:a6:55:57:
                    66:bc:de:58:92:e7:a0:0f:a2:54:87:08:24:5b:07:
                    4d:51:40:0c:41:72:30:f8:32:59:c1:3a:bb:dc:e3:
                    30:17:8d:c5:eb:c3:53:65:94:65:4d:69:27:b8:50:
                    fc:c8:2e:58:2d:26:36:e7:94:cf:ff:15:43:7b:7c:
                    4c:8e:bd:d0:21:9c:e7:80:d8:f2:c2:af:72:0e:b6:
                    b6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:13:5B:A4:1D:3D:A9:6F:80:44:5B:99:0E:78:CB:DC:7E:25:DB:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/63906606-7983-3c12-8d4a-5461f3222ca9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9/a8903a14-ef5f-4310-b694-60f49b1c61a9.crl

            X509v3 Authority Key Identifier:
                keyid:72:3B:E3:0C:30:A8:DD:D0:AE:FC:58:56:0B:A4:84:68:88:24:AB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a8903a14-ef5f-4310-b694-60f49b1c61a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a0:20:7a:6b:0e:49:96:ac:2f:77:4b:b3:a4:2a:48:a6:fe:
         77:d5:c8:ae:12:c7:a1:9d:5e:bd:3e:c7:7b:95:e4:25:74:52:
         23:98:13:cf:cb:51:78:3e:0e:58:39:18:8d:dc:69:39:61:df:
         2f:47:20:31:10:a8:d3:45:cf:da:bb:2f:23:94:0e:66:c1:56:
         4d:74:8b:aa:c7:60:2d:fd:4f:6b:33:3d:a1:6c:f1:e0:84:f8:
         59:fe:1b:dd:41:fa:26:53:a5:94:87:21:90:dd:12:04:0c:ec:
         e8:9d:20:0d:30:29:07:60:c1:19:08:c2:9e:ce:63:4f:8f:30:
         e2:43:77:8d:68:97:80:d5:29:34:e2:9b:9c:47:60:bd:97:6e:
         89:68:a4:ae:91:e0:2f:cf:5c:a8:59:82:c4:cb:72:9c:2f:29:
         d1:f7:23:2d:b4:2f:e0:16:6e:d9:ec:7a:e6:6c:ca:a2:2a:66:
         b4:0e:02:f5:00:ec:71:3b:86:12:2f:6e:8f:14:7e:67:91:26:
         54:51:a5:9f:c6:df:79:25:f5:27:48:86:e3:6f:72:9f:23:a0:
         5e:62:82:73:76:ee:90:d2:6c:43:dd:56:0e:cb:ce:fe:16:03:
         df:05:04:d2:0d:f0:97:73:95:12:7d:5e:04:15:d3:9f:69:23:
         2d:63:38:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:54:16 2026 by rpki-client