Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/38ce4460-177f-3e6f-92cb-42afd26fa5c7.roa
File:                     38ce4460-177f-3e6f-92cb-42afd26fa5c7.roa (raw, json)
Hash identifier:          aURgOwImy4xMe4ZndQn6y/mWBq5jjiptX85bxEOvMnA=
Subject key identifier:   BF:E6:09:E9:AA:B4:76:7B:12:68:C1:3D:07:3F:C4:29:66:98:54:FD
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584F46A7EF259310D6F61DFDD340
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/38ce4460-177f-3e6f-92cb-42afd26fa5c7.roa
Signing time:             Thu 24 Sep 2026 01:00:12 +0000
ROA not before:           Thu 24 Sep 2026 01:00:12 +0000
ROA not after:            Wed 23 Dec 2026 02:00:12 +0000
asID:                     15169
IP address blocks:        192.178.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:46:a7:ef:25:93:10:d6:f6:1d:fd:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Sep 24 01:00:12 2026 GMT
            Not After : Dec 23 02:00:12 2026 GMT
        Subject: CN=39d586e3-d0a8-46a3-9195-c01f651926dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:9d:e5:04:27:1d:59:58:99:8f:88:40:da:
                    4f:7f:d0:56:65:1e:72:5e:62:24:e8:3b:b4:a4:5a:
                    9b:cb:1c:77:10:63:2b:6e:87:b7:a4:b2:05:7b:93:
                    70:d0:46:32:f5:c2:37:55:de:c4:81:d4:a1:44:ae:
                    fb:77:06:3d:72:76:ba:8e:9f:08:30:d0:1c:47:56:
                    50:44:00:12:80:92:1c:b9:88:df:e2:62:51:80:9b:
                    5a:55:7d:fb:b4:61:08:80:b5:9a:ab:ad:7f:2b:b2:
                    bb:02:72:12:37:72:78:36:8d:7b:f0:57:a4:98:e6:
                    b4:7a:37:01:95:ff:5e:5d:05:61:54:cf:a4:36:8a:
                    de:e4:d2:ed:8c:47:7c:23:f4:54:49:35:b4:0a:dc:
                    7d:cd:3d:87:17:f9:a6:84:1a:c3:f5:e7:db:fe:c4:
                    b4:ab:0b:a6:d2:f9:f5:b4:b1:3d:2e:87:12:b3:11:
                    f8:78:24:2c:58:ec:55:69:b5:97:a8:71:56:73:ec:
                    08:08:ce:4f:13:67:da:2d:d3:9e:ac:3b:49:fa:8b:
                    65:2f:0d:1a:46:0a:4b:0f:66:38:52:b3:6a:f6:51:
                    a1:7f:ec:81:81:dc:bd:ae:31:9d:44:c2:84:92:1c:
                    0a:71:76:f7:6f:6f:48:94:01:c3:b1:b7:0a:9b:50:
                    d8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E6:09:E9:AA:B4:76:7B:12:68:C1:3D:07:3F:C4:29:66:98:54:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/38ce4460-177f-3e6f-92cb-42afd26fa5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6c:eb:e9:57:83:46:dd:1d:1a:08:04:2f:4b:05:14:47:f1:
         b2:a3:b5:63:c0:27:65:5f:2d:51:d8:22:1f:7c:95:60:b8:04:
         e8:a1:a6:ff:53:a3:a3:9e:cd:e5:10:33:2c:fb:2e:ed:a8:74:
         38:97:af:c3:55:e7:77:65:39:83:58:10:7c:bb:81:32:33:c1:
         15:08:fe:f5:93:11:1e:9f:ba:1d:70:4d:02:42:84:d6:c3:32:
         85:34:9e:f8:f5:87:1a:5f:1c:5f:80:38:02:5d:82:2a:53:6c:
         7a:9a:04:7d:ae:6c:30:57:9d:35:07:0f:84:7e:0b:ff:32:bc:
         06:1d:fc:48:8b:2b:27:68:b2:38:12:35:7b:f7:c8:01:4d:9f:
         7b:6c:dd:81:59:4f:39:ae:c2:9c:58:a4:68:f6:c0:db:3e:fe:
         0e:91:90:22:88:b3:56:b8:c1:9d:db:75:25:82:ee:42:89:33:
         4b:e5:1d:9e:35:7a:8f:0f:c5:32:26:95:8e:f8:5d:68:19:cc:
         31:f2:27:fd:55:66:4f:fa:3a:24:e0:6e:4d:65:ac:6f:e0:65:
         bd:ff:fb:96:d4:06:64:92:8f:4e:82:a9:b3:2f:c0:66:a1:d6:
         74:30:c1:92:de:ca:5a:7a:07:34:85:84:aa:be:f9:f1:3e:61:
         de:24:ef:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:34:24 2026 by rpki-client