Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876/2ed4e28c-d012-3c4e-9b4c-a152b2da9e38.roa
File:                     2ed4e28c-d012-3c4e-9b4c-a152b2da9e38.roa (raw, json)
Hash identifier:          NFh8vVAjiRt0YZJOKmv63e4z4CKt2aQM/gMQgGS4XSM=
Subject key identifier:   85:28:7F:CE:31:45:82:98:B6:09:3E:CA:F4:9A:E4:44:9A:D2:FE:13
Certificate issuer:       /CN=975c10fb-9cfd-42ba-a4ae-5c3cc54e4876
Certificate serial:       010D0C9F4328584FB7D6809538303C299C88DE00
Authority key identifier: 79:F9:27:27:57:91:6B:D4:34:B4:53:48:57:CC:F2:58:A6:12:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876/2ed4e28c-d012-3c4e-9b4c-a152b2da9e38.roa
Signing time:             Tue 03 Nov 2026 14:00:13 +0000
ROA not before:           Tue 03 Nov 2026 14:00:13 +0000
ROA not after:            Mon 01 Feb 2027 14:00:13 +0000
asID:                     398641
IP address blocks:        141.193.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b7:d6:80:95:38:30:3c:29:9c:88:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=975c10fb-9cfd-42ba-a4ae-5c3cc54e4876
        Validity
            Not Before: Nov  3 14:00:13 2026 GMT
            Not After : Feb  1 14:00:13 2027 GMT
        Subject: CN=672a08b5-e712-42d3-889c-5e7dae21849d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:12:ff:c2:07:ac:9c:07:c4:c5:b8:e7:56:de:
                    b7:16:6b:b4:18:e6:1e:4c:e3:95:f0:a8:ae:08:ce:
                    b7:7a:4a:31:84:12:22:86:86:88:cd:7e:e3:84:dd:
                    39:75:f0:96:bc:b1:26:96:0e:27:fc:bc:ed:e0:a4:
                    de:27:96:d6:54:4c:26:5b:f4:81:9e:d7:50:10:8f:
                    5f:3b:ad:37:e2:17:ea:7c:5c:d3:3f:34:d1:68:0f:
                    3f:d7:d0:a6:07:17:1b:73:f3:e9:a9:c5:35:1e:a8:
                    6c:95:06:01:4f:fc:79:06:91:21:1e:e5:fe:5b:54:
                    50:a7:f8:cc:0c:45:d2:fa:55:96:c3:9b:ee:4b:30:
                    44:c2:6a:95:2c:ab:c6:48:88:d8:ac:25:bc:b7:06:
                    16:52:d2:61:ef:27:d0:43:cf:a5:3f:79:dc:71:f6:
                    b6:eb:e2:95:14:b8:c1:b2:5d:84:92:94:6b:62:53:
                    31:0a:c1:29:f6:f4:e9:d7:c3:0b:ad:76:8f:45:03:
                    0b:81:d8:54:cb:20:a4:6a:80:74:0e:6a:3c:c6:9f:
                    98:22:13:b9:b0:cd:e4:f5:73:56:60:7c:79:ff:e4:
                    10:29:76:9e:4f:f9:3a:e6:be:e7:f0:64:4c:ab:9c:
                    03:90:1c:33:6d:c3:23:dd:1b:cf:86:af:36:2c:7a:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:28:7F:CE:31:45:82:98:B6:09:3E:CA:F4:9A:E4:44:9A:D2:FE:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876/2ed4e28c-d012-3c4e-9b4c-a152b2da9e38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876.crl

            X509v3 Authority Key Identifier:
                keyid:79:F9:27:27:57:91:6B:D4:34:B4:53:48:57:CC:F2:58:A6:12:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/975c10fb-9cfd-42ba-a4ae-5c3cc54e4876.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:67:82:60:fc:e7:11:ad:c1:36:a3:f9:20:af:ff:35:02:ef:
         2c:3e:91:e1:00:f4:0b:09:8c:bb:d8:d1:54:ea:fa:db:72:ff:
         16:e6:d5:b4:71:39:41:f6:40:48:d3:ea:11:0a:bd:ad:b8:30:
         bc:9f:8e:d5:0d:dd:df:ea:0d:e5:c5:27:c7:80:1b:92:46:73:
         c5:fa:a7:b1:3e:4a:41:4b:f0:a5:b5:e3:3c:b9:2c:06:45:95:
         3a:e2:17:08:21:67:60:11:c8:ee:41:2e:87:45:3e:81:ad:0c:
         e3:1e:22:4f:7d:5a:22:be:59:5c:14:07:64:16:8e:b6:d1:7f:
         5c:d2:d1:a1:ba:a0:21:2f:e0:31:93:31:42:c0:ae:7c:bc:00:
         1b:a8:9a:2a:df:b3:0e:ab:5f:0f:35:81:4b:5c:16:b5:1c:cb:
         3a:8e:12:be:bf:d3:be:e7:de:8d:b7:eb:cf:1e:01:19:43:e4:
         12:e7:0d:28:b5:5b:bc:1d:5c:63:16:0f:fb:f4:6a:d5:3e:fd:
         d5:f3:ad:1c:2f:47:1e:57:9b:bf:90:17:4a:fe:5a:75:d9:98:
         7e:22:c3:35:ad:23:a2:63:25:93:78:80:a7:de:56:e6:11:35:
         c4:a5:be:f4:2f:cd:85:4e:13:1e:78:08:33:e7:dc:2b:3a:db:
         6c:c6:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:32:46 2026 by rpki-client