Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa/c2480d8d-861c-3808-ad72-8b3eee7425a2.roa
File:                     c2480d8d-861c-3808-ad72-8b3eee7425a2.roa (raw, json)
Hash identifier:          oJIIgLzTTspg02egAgdSeW1qIWR/797UJ9TkSIvFB3c=
Subject key identifier:   11:C8:5E:70:5F:E6:13:C2:87:2E:5E:AC:02:71:1E:88:FD:9B:DC:BB
Certificate issuer:       /CN=0094ad31-df35-44fe-ba90-fcdeb2ee2bfa
Certificate serial:       010D0C9F4328584E5619F230347D1CF188877F58
Authority key identifier: 0F:ED:47:C0:5F:97:3F:88:EE:DE:F7:29:CF:88:39:DB:10:4C:D7:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa/c2480d8d-861c-3808-ad72-8b3eee7425a2.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        192.152.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:f2:30:34:7d:1c:f1:88:87:7f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0094ad31-df35-44fe-ba90-fcdeb2ee2bfa
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=aa4111c0-0058-4190-85e1-fec5741321f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:97:87:e1:b4:90:64:39:1d:31:ae:b4:e5:6b:
                    82:04:ad:5a:40:90:b1:5e:a6:2e:8c:a2:78:12:99:
                    81:ea:3a:eb:e7:58:1e:3b:e7:fd:ca:4a:46:ae:c6:
                    83:fa:00:d2:08:fd:9f:68:e3:45:8a:c2:ba:e6:73:
                    37:d4:42:73:03:a0:a1:55:50:44:73:ac:67:b2:81:
                    75:b1:ac:23:6c:55:0c:1b:f5:14:72:a2:3a:05:01:
                    1e:41:f6:ef:46:10:8b:c6:9d:06:b0:79:e6:5e:5c:
                    02:0c:7e:b9:23:2f:23:b3:a4:66:a1:7d:df:c8:85:
                    6e:71:18:2d:78:01:a5:8b:43:53:6e:01:7e:2e:cb:
                    33:fd:0d:d8:59:4e:ca:29:f7:18:cf:e4:c6:d6:83:
                    9f:4e:0b:00:ac:00:73:ca:c5:f5:c9:1b:a1:83:59:
                    76:a9:42:98:a2:1d:be:5d:b4:57:93:f4:95:82:d1:
                    86:c7:8b:d6:26:7f:a4:1d:fe:b1:4a:1e:ba:7b:ce:
                    14:09:0e:3b:8d:04:00:47:4a:56:8c:c2:ea:2d:f8:
                    4d:3f:6b:2d:91:9f:27:64:b4:51:b7:dc:71:4c:09:
                    96:5c:b8:1d:f4:02:e6:cf:d5:f6:64:46:5e:cb:1e:
                    cc:30:74:c5:4f:26:31:9b:33:f9:9a:b9:6a:8f:96:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C8:5E:70:5F:E6:13:C2:87:2E:5E:AC:02:71:1E:88:FD:9B:DC:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa/c2480d8d-861c-3808-ad72-8b3eee7425a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa.crl

            X509v3 Authority Key Identifier:
                keyid:0F:ED:47:C0:5F:97:3F:88:EE:DE:F7:29:CF:88:39:DB:10:4C:D7:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0094ad31-df35-44fe-ba90-fcdeb2ee2bfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ba:75:f5:41:49:42:53:10:7f:b2:4c:ac:08:dc:f3:72:bb:
         c8:63:6d:e8:36:47:3f:15:77:c2:e6:0e:4b:db:b9:21:4c:e3:
         42:59:9c:7f:35:58:6f:b5:f9:a5:e2:9b:9d:d6:89:5e:fc:37:
         37:da:63:85:26:9f:13:a3:6b:28:d8:66:65:c9:14:4a:f5:a5:
         53:97:99:0a:e2:9c:ef:7a:5f:97:59:9a:1b:53:4e:72:12:d8:
         7e:a0:01:d3:e0:80:73:fe:58:05:dd:18:89:1d:0f:01:a3:61:
         63:46:9a:35:68:e9:c7:ea:d9:f3:e6:af:a7:d9:69:f9:22:73:
         4f:26:fe:67:46:15:83:9f:a4:f1:bd:54:16:56:0d:07:2f:24:
         63:fa:02:fb:8a:40:3f:2a:94:0a:e9:38:1b:ed:a4:71:08:f4:
         3d:8a:1f:87:0d:59:ed:d7:73:b2:44:02:88:39:17:d1:5d:91:
         e1:ff:fa:4f:92:6d:b6:b4:c9:e3:80:59:3b:f9:fc:cd:77:3c:
         a1:5d:f2:31:43:b4:76:22:31:99:80:cd:53:6e:af:70:ec:59:
         aa:6a:89:35:f3:06:68:fa:9a:83:39:1e:e3:62:c8:92:bc:16:
         64:d1:71:0b:b3:ff:f9:bf:13:0b:a8:a5:4c:fe:ed:16:59:47:
         ce:99:ea:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:21:48 2026 by rpki-client