Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d28d11f-1808-33fb-9b0b-9b8749bff03b.roa
File:                     1d28d11f-1808-33fb-9b0b-9b8749bff03b.roa (raw, json)
Hash identifier:          +LmM9sJyE95VhhyFBmXAPfviBh7VpR3i9+qpK+/7jEM=
Subject key identifier:   1F:7D:C0:FC:C8:53:18:C1:24:95:8D:C0:19:31:90:E0:D4:F4:F2:D6
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F46A7EE637DD9B65545D761E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d28d11f-1808-33fb-9b0b-9b8749bff03b.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        192.178.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:ee:63:7d:d9:b6:55:45:d7:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=15d9eb13-71ff-465b-9141-00f3249d7428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:93:8d:37:39:bb:02:d0:d5:06:2b:02:a4:81:
                    61:97:be:d1:43:11:09:bf:a5:30:ad:cc:f9:70:33:
                    76:57:c2:d0:4a:e7:0f:84:18:77:22:2c:03:52:84:
                    ca:e0:2d:f0:e1:42:a2:ee:cd:37:d0:68:25:cf:a3:
                    65:6b:55:7d:11:14:8b:af:64:f7:30:e3:39:b5:1c:
                    49:26:e4:25:cd:46:18:f6:4e:cc:a9:35:97:03:c4:
                    95:4e:6e:d1:e3:5c:80:e2:82:f8:20:d5:eb:65:7e:
                    48:44:ff:5d:ae:e8:1e:21:b1:57:17:0e:8d:77:7c:
                    4a:09:e0:73:6f:d4:26:da:47:9f:03:ac:39:df:85:
                    46:9b:59:00:f8:9b:28:9b:f8:6c:ff:64:41:54:ee:
                    81:48:af:f5:8f:64:34:d3:e1:14:8f:30:d1:aa:f0:
                    6d:ca:94:cc:29:5f:69:91:ca:d5:f8:85:30:2c:fc:
                    1c:0b:8f:d8:bc:ac:f8:8e:b7:89:73:b6:0d:80:d9:
                    68:6d:26:96:af:b0:ce:e9:0a:32:ef:0b:25:fc:48:
                    f8:f2:bf:e4:15:01:b7:e0:71:a2:e5:6f:89:4c:b3:
                    cb:c4:2c:e2:eb:59:49:8a:32:95:2b:a2:82:8a:47:
                    5a:36:c4:02:66:b5:bb:3f:8c:91:b7:8d:48:d3:d6:
                    37:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7D:C0:FC:C8:53:18:C1:24:95:8D:C0:19:31:90:E0:D4:F4:F2:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d28d11f-1808-33fb-9b0b-9b8749bff03b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:28:d4:cc:d1:44:94:94:f0:20:97:5d:39:1b:b2:05:72:ee:
         57:9d:05:c1:37:2a:bf:18:79:1f:3d:05:67:86:ce:22:39:c2:
         04:9e:d7:04:f6:9a:d4:4a:77:9f:5e:7f:f7:fb:34:c6:c8:87:
         e1:dd:ca:16:bf:f4:d8:85:b5:41:54:49:61:f7:e5:f8:4d:87:
         1f:18:80:47:58:7c:6b:94:03:f4:a4:c9:bc:c9:79:ed:6e:dc:
         ae:a2:cd:21:1e:03:fa:87:c3:95:23:ca:c5:04:21:99:96:95:
         80:85:56:4f:b4:53:92:c9:9d:2d:d7:7c:eb:1d:03:c3:37:0f:
         86:8b:50:21:7f:02:ea:fa:5c:7f:14:bd:0c:49:71:23:2b:73:
         2d:0a:57:d9:ae:96:14:e3:c2:a8:15:d5:65:a8:94:e6:a3:dc:
         4a:df:6d:68:cd:95:09:0c:4a:ea:3a:5f:43:5a:67:0e:54:6c:
         c7:3f:b9:be:97:8b:78:9f:95:bb:04:f4:4f:06:02:ad:75:36:
         07:ba:e3:f4:c1:10:bd:e2:9e:1c:ca:38:79:c9:6e:eb:25:2a:
         a5:9c:90:52:8c:e1:17:7e:61:20:24:0f:58:c6:e3:e0:23:52:
         0f:12:53:fc:32:16:a6:bb:a2:41:78:13:6f:1a:ac:db:cf:49:
         6a:4e:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:45:14 2026 by rpki-client