Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa
File:                     6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa (raw, json)
Hash identifier:          RX8IJC0W3Y+CjaCUAmGWWdBl5hx18kjq5GdbyVaaS+o=
Subject key identifier:   86:76:46:E1:47:CE:12:38:77:0A:58:4E:35:95:4E:A3:C1:0C:0E:81
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584E7204C46DCF33D5BE97D5D540
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     16509
IP address blocks:        192.175.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c4:6d:cf:33:d5:be:97:d5:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=2b38b676-8eb9-4e7d-81cb-1c6475f09d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5a:80:6d:39:dd:f5:e1:24:a8:e2:34:c9:59:
                    3c:63:ef:3a:81:71:5b:29:cc:14:56:1c:99:72:86:
                    de:40:42:34:cd:c2:32:9a:03:1c:26:35:ab:fc:91:
                    0a:61:0a:df:91:bf:9e:d5:bb:c3:ea:e2:42:85:46:
                    26:e4:6b:6e:da:28:a5:4d:e8:7a:b9:0c:11:9d:de:
                    3c:06:64:0e:58:c4:27:e8:29:6c:06:15:25:2b:d0:
                    d3:b7:62:f1:60:23:04:e9:0f:8c:96:bc:b7:00:57:
                    3c:ec:67:d5:b0:8e:47:94:58:49:12:50:1d:80:02:
                    a0:cd:45:95:07:84:17:2a:18:0a:bf:60:4f:6e:27:
                    f4:b0:dc:24:b4:4e:23:86:92:ba:6e:d9:39:c7:8e:
                    07:8a:28:ba:0e:14:df:76:c9:fa:45:e3:50:23:02:
                    09:8b:df:02:61:44:60:16:10:fd:b6:cb:29:88:9f:
                    cd:e1:4e:60:ad:d6:b0:75:8c:7c:06:c8:43:cf:d0:
                    8a:7d:da:f0:3f:1f:c1:8e:91:da:33:bf:75:71:54:
                    84:44:38:e8:69:57:e8:20:ec:64:75:b5:51:87:7d:
                    a9:9d:02:43:3f:7e:cb:ed:4a:83:e3:04:6c:b4:76:
                    33:7b:2c:1c:45:b9:a9:21:23:72:37:9c:2d:48:b2:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:76:46:E1:47:CE:12:38:77:0A:58:4E:35:95:4E:A3:C1:0C:0E:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.175.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:92:6d:8a:1f:28:e3:24:af:d7:e6:74:41:bd:05:06:7b:ed:
         6d:22:02:0e:52:e3:61:cc:f4:ce:e9:9c:15:cd:35:c2:8a:da:
         0e:43:b1:a3:6d:78:39:eb:3b:5e:df:09:af:51:85:70:2e:1a:
         94:60:d6:0f:47:9b:80:f8:8d:c6:3e:4a:a5:14:7a:a5:94:82:
         59:1b:d8:74:0b:12:a9:88:6f:f7:bc:cf:97:92:8b:55:d8:b3:
         c3:f7:2e:50:55:f0:d0:3c:6d:e0:41:7b:fb:1a:65:1f:0a:68:
         41:d0:c7:48:b9:6f:83:dd:61:dd:fb:24:c7:54:56:12:a6:05:
         18:cd:62:f8:35:03:04:0e:29:0e:fe:0e:2e:2a:35:38:ec:95:
         09:05:ff:d6:bb:43:84:97:47:92:89:0e:a2:60:c9:d2:c7:2c:
         ee:af:05:d2:75:79:de:bc:04:62:0d:ac:9c:47:26:5b:f1:27:
         7e:41:49:e4:03:21:bb:ec:d9:d8:64:07:69:4c:1a:07:f5:46:
         24:24:2e:cf:ee:26:4f:6e:23:41:a4:e6:76:22:59:5b:75:b7:
         23:d0:22:a7:87:7b:4b:1c:87:2e:03:77:2c:99:01:7c:0c:18:
         01:65:8d:ac:79:f8:83:c4:7f:77:00:e0:c9:db:3a:f1:b0:91:
         93:19:dc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:30 2026 by rpki-client