Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa
File:                     91f86db8-b3a9-3f88-8959-fe31be15f550.roa (raw, json)
Hash identifier:          X98oIGqBc87wwyvKHaygqoWSB34AhoRs4nzdVtIHopA=
Subject key identifier:   26:BA:8E:CE:CE:50:36:07:CE:93:9E:08:63:D2:70:1E:06:86:C2:F7
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F4328584D44FA3096B82389339BD38540
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        192.111.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:30:96:b8:23:89:33:9b:d3:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=2a075d32-9702-4646-b20e-c98bab8d2e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:61:ca:1b:bc:b6:05:27:af:a1:3c:86:2d:
                    d0:f9:93:6f:a8:78:e7:e3:ef:ba:0d:c0:9d:0e:00:
                    93:53:e6:50:09:2c:0d:a2:dd:6e:c4:fe:48:fe:75:
                    c1:6b:c9:e8:ee:66:34:b7:78:0b:4d:11:7a:1d:34:
                    74:f2:20:76:13:db:d4:92:c2:3a:e6:75:1b:f6:21:
                    1c:56:55:8b:23:f1:f2:7d:67:9c:2c:b3:ad:9b:8c:
                    ff:f7:45:42:9a:79:bc:8c:cd:85:ad:31:10:79:1e:
                    ec:0f:0f:a4:db:dd:4c:1d:c7:4d:fa:4f:2f:69:02:
                    54:44:0e:98:a1:2f:39:fa:e6:4f:1a:58:7c:55:4a:
                    10:26:44:c4:5b:fb:83:55:69:6a:f4:ab:a3:10:54:
                    c6:af:87:ac:ac:1c:92:f3:57:fd:71:2a:57:09:78:
                    92:63:2f:3e:49:36:85:8c:6e:95:2d:fb:7e:59:85:
                    2b:2f:b2:08:d7:f6:f7:be:b9:72:e5:e2:1c:de:8c:
                    7a:74:3c:29:76:29:34:d2:9b:3d:e3:6a:95:28:34:
                    b4:af:d3:d9:7e:30:3b:07:71:ce:61:25:5a:02:8d:
                    49:42:94:6f:fb:f5:52:fc:aa:e0:a1:0d:7b:3b:84:
                    2f:79:9f:7c:73:32:4f:c7:51:3c:11:ef:ec:60:2f:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BA:8E:CE:CE:50:36:07:CE:93:9E:08:63:D2:70:1E:06:86:C2:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/91f86db8-b3a9-3f88-8959-fe31be15f550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:45:e8:95:c0:d5:f4:96:e9:ba:04:2c:7a:9b:8a:10:f2:80:
         61:34:9f:17:7c:71:75:c4:cd:20:10:0e:ae:67:ae:f6:ec:00:
         88:3e:35:49:06:7a:c9:69:12:1c:16:cb:c1:a9:fd:64:52:89:
         1d:4d:dd:7a:6d:4b:86:d2:f7:7d:4e:84:c1:b5:f6:3b:2e:61:
         13:63:f1:eb:20:34:79:a3:0d:2b:c2:38:26:ae:79:84:b7:61:
         df:8d:e3:93:23:51:ad:8d:c4:41:5c:cb:e4:3f:cc:e4:bd:f2:
         b2:43:65:e0:ba:4d:b6:19:1f:a8:0b:8f:47:01:c6:16:1c:66:
         b0:ce:5c:50:2e:4b:31:6d:a8:9d:38:ea:42:49:b3:57:a2:99:
         a1:59:70:d3:78:25:27:73:5e:ea:9f:ab:a7:32:8f:d7:71:ae:
         52:65:9a:a1:55:f2:ed:4d:ef:41:4f:23:23:d9:b8:a5:b8:84:
         99:58:58:a2:ca:ec:ba:ce:c7:fe:d3:65:cf:fe:9d:69:2b:49:
         5a:b7:d2:95:0f:35:19:6e:a4:66:48:82:85:33:71:1e:35:70:
         3c:d6:94:c3:ac:52:f5:52:9a:0e:a3:69:17:be:f7:99:47:c9:
         81:5b:11:d8:ea:0c:0c:e0:f6:71:f7:07:e0:e6:ea:c3:31:f6:
         8f:5e:0c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:33 2026 by rpki-client