Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/01a855ab-1dcc-3dd5-8f48-bff5ff9253c8.roa
File:                     01a855ab-1dcc-3dd5-8f48-bff5ff9253c8.roa (raw, json)
Hash identifier:          SHavHh9QOx+Nd1jd8bhv/Ey3DZYlfRqsVvX0TKT6JBw=
Subject key identifier:   FA:3D:F0:9F:16:D3:FC:02:EF:C1:B3:2F:47:12:E2:33:9C:E1:10:D0
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F4328584E82C4D95C4383EFB6DF46E580
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/01a855ab-1dcc-3dd5-8f48-bff5ff9253c8.roa
Signing time:             Wed 15 Jul 2026 21:00:12 +0000
ROA not before:           Wed 15 Jul 2026 21:00:12 +0000
ROA not after:            Tue 13 Oct 2026 21:00:12 +0000
asID:                     293
IP address blocks:        192.188.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:82:c4:d9:5c:43:83:ef:b6:df:46:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Jul 15 21:00:12 2026 GMT
            Not After : Oct 13 21:00:12 2026 GMT
        Subject: CN=cca81b3e-2f80-468e-88cc-031f9c5177dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:ca:e2:a7:29:79:03:cf:b9:6e:b8:45:5f:
                    e2:ca:b7:08:7a:be:db:53:f3:ce:e4:30:12:48:b8:
                    72:53:dd:b5:ee:fb:f3:dd:a4:3c:49:c8:1d:a9:88:
                    08:74:f5:cf:1c:9d:e8:28:97:e5:92:2d:1d:0f:df:
                    03:62:3e:49:97:27:1a:3d:c4:49:a2:f2:82:37:07:
                    de:e2:21:0f:74:47:8a:62:75:15:02:d6:46:c0:cb:
                    20:5d:3e:20:3b:66:51:5f:8d:cf:f2:12:b5:6f:9a:
                    71:eb:b0:58:bc:1b:78:df:3c:b6:1b:45:18:47:d2:
                    68:b0:8d:09:d3:07:47:5a:54:16:99:27:54:20:01:
                    5f:fc:49:d9:e3:62:41:99:69:31:e0:1a:3d:86:4e:
                    5e:4c:3d:e1:79:34:f9:80:e7:b6:9f:29:8c:45:a4:
                    67:d6:76:a3:bd:e4:5f:7d:b5:ca:43:40:bf:93:c9:
                    fe:68:60:15:ed:b4:d9:62:dc:9b:06:f7:80:9f:1b:
                    07:0f:5c:ff:20:e9:5e:10:be:15:e1:50:9f:ee:00:
                    5b:68:f8:d2:dd:e8:fb:f0:fc:88:3b:07:72:79:b7:
                    52:93:19:18:97:76:fb:16:27:76:04:f5:f6:42:f6:
                    7a:92:86:c5:98:c0:26:22:1a:46:94:f0:a6:33:ab:
                    69:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3D:F0:9F:16:D3:FC:02:EF:C1:B3:2F:47:12:E2:33:9C:E1:10:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/01a855ab-1dcc-3dd5-8f48-bff5ff9253c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:60:20:e1:06:e1:7c:85:d4:ab:b0:db:dd:8b:7a:46:bf:6e:
         43:1b:be:33:7d:9a:47:1d:7a:ae:4b:7d:0f:1b:a1:11:75:9e:
         8d:38:7d:04:c2:e5:2a:d8:5d:bb:fa:55:f9:8b:e3:3f:4c:3f:
         25:ea:ee:5e:c0:69:c8:d8:67:47:03:e9:c0:52:77:c9:43:af:
         5c:82:89:92:0b:f9:aa:8b:c5:8e:b9:8d:d9:2d:9d:9d:0b:96:
         e5:ee:b7:97:f6:27:89:41:82:9c:e8:2a:e6:ff:86:63:96:21:
         36:ab:dd:51:69:1e:36:67:a1:2f:2e:55:13:8b:26:8a:c8:2c:
         71:4b:2b:34:2c:92:d6:e2:fa:ee:7b:52:96:27:50:8b:e6:bc:
         9c:61:19:61:21:5a:53:ad:d2:17:82:d5:7b:59:d9:bd:d9:ad:
         1c:7d:63:fc:da:d9:fa:56:be:fa:ff:fc:a5:3f:f6:30:c5:cb:
         d2:44:bf:b5:82:12:73:01:28:33:14:6a:2f:e4:61:90:03:18:
         64:95:ec:68:49:d7:ce:a8:c8:76:52:c8:e4:a1:28:11:78:2c:
         ab:fc:a4:a8:fc:e1:7f:67:f0:f9:fb:72:3f:b5:c9:1b:a5:e1:
         14:10:f5:21:1e:f2:23:5a:ca:ad:9c:36:cf:78:31:e0:a0:e6:
         94:82:36:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:23:17 2026 by rpki-client