Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/688cb522-94a8-354f-99b5-bc3e63bd8d3d.roa
File:                     688cb522-94a8-354f-99b5-bc3e63bd8d3d.roa (raw, json)
Hash identifier:          HASYKGDcl/m0Xwh7zBxRMuQuKcfTND8vsqr6POSOLKc=
Subject key identifier:   AE:97:52:18:61:0E:AB:77:33:61:31:90:E2:DE:B1:DD:D9:93:C7:48
Certificate issuer:       /CN=dc139904-68bb-47e1-94f8-551bbfaaeeb4
Certificate serial:       010D0C9F4328584F3A9024D18750611D429B9660
Authority key identifier: 9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/688cb522-94a8-354f-99b5-bc3e63bd8d3d.roa
Signing time:             Sat 19 Sep 2026 17:02:46 +0000
ROA not before:           Sat 19 Sep 2026 17:02:46 +0000
ROA not after:            Fri 18 Dec 2026 18:02:46 +0000
asID:                     396982
IP address blocks:        192.231.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3a:90:24:d1:87:50:61:1d:42:9b:96:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc139904-68bb-47e1-94f8-551bbfaaeeb4
        Validity
            Not Before: Sep 19 17:02:46 2026 GMT
            Not After : Dec 18 18:02:46 2026 GMT
        Subject: CN=6088e166-c681-4b70-9ead-ebdccb393f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:86:de:b4:bc:3a:91:2b:45:58:87:73:6f:2d:
                    2d:37:bb:ef:29:0e:1a:27:1e:c5:a0:83:12:fa:6d:
                    e7:63:09:80:97:e5:c4:5d:61:ad:19:e3:f9:e8:41:
                    cc:25:33:c5:f6:24:d2:1e:39:82:dd:08:01:bc:19:
                    d4:63:7d:25:6f:c9:69:a2:42:cd:a4:00:1f:9e:44:
                    67:4a:b2:6d:23:f0:93:2a:d0:9b:84:97:7f:c7:3b:
                    cc:23:02:b8:74:00:c3:8b:4f:56:03:85:f7:75:24:
                    08:54:e1:08:b1:f8:53:95:21:a7:b4:63:82:b9:c7:
                    cd:e2:20:00:d2:54:cd:05:16:86:c0:7f:00:21:36:
                    bd:12:a5:29:54:ca:21:69:6b:96:cf:0f:6a:c5:65:
                    b2:3f:db:4c:4d:ab:5d:7d:54:31:4c:7c:d4:d3:57:
                    d4:d3:5b:bf:d3:73:d8:c1:38:26:bd:e5:77:3b:0b:
                    b7:3b:a0:4b:4e:0e:ac:54:be:79:30:91:46:54:e6:
                    8a:99:90:33:f7:74:13:a4:86:f9:aa:50:ac:6e:71:
                    62:23:53:23:b8:98:10:49:bb:b6:13:98:14:33:0f:
                    40:f1:8f:dc:09:ed:ec:16:27:5a:c2:ae:15:66:04:
                    27:0b:81:2f:05:db:d5:3b:19:84:3f:8f:bb:98:d3:
                    68:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:97:52:18:61:0E:AB:77:33:61:31:90:E2:DE:B1:DD:D9:93:C7:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/688cb522-94a8-354f-99b5-bc3e63bd8d3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4/dc139904-68bb-47e1-94f8-551bbfaaeeb4.crl

            X509v3 Authority Key Identifier:
                keyid:9D:7A:4E:84:C3:34:1C:23:6C:D4:47:24:D9:83:D0:D9:CA:6E:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dc139904-68bb-47e1-94f8-551bbfaaeeb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7e:aa:85:0a:08:76:c1:7a:50:fb:87:3f:ab:e8:c9:16:58:
         09:df:a8:62:82:e8:d0:0a:61:21:3f:69:7b:cb:a7:58:50:bf:
         00:21:4b:8c:6f:b0:60:24:3d:fd:70:81:36:c0:14:00:41:06:
         8d:4a:f0:89:80:3f:5a:fa:8c:a9:5f:c4:36:6d:e2:84:a6:17:
         34:40:61:6b:dd:42:29:01:3c:6a:59:f7:92:c6:0c:fa:72:c1:
         0f:6d:0b:fe:5b:c6:1b:81:cb:19:98:c1:8d:14:c4:0b:5c:e1:
         ac:41:3e:0a:5b:00:26:26:61:fc:4d:3c:e8:e4:82:58:73:f5:
         70:a2:75:78:b5:6e:f4:89:6d:92:b2:42:25:fd:91:54:6a:7f:
         c2:44:c6:d3:0c:30:ab:a7:11:6d:8e:74:83:3b:6c:25:54:20:
         53:b2:8c:d3:c8:fc:dd:b8:32:2c:65:ec:91:bf:67:af:ad:84:
         30:1f:52:c3:0e:15:ba:d8:5a:3b:96:13:3f:52:e7:9a:71:b0:
         03:e6:33:96:43:cd:f6:bb:f4:95:d5:40:f3:ee:6a:92:18:15:
         af:a8:6c:a8:f0:48:23:2e:bd:a0:27:20:6c:73:6e:c7:ad:d2:
         b9:ce:62:aa:8c:15:c8:ff:3c:79:fc:72:64:53:65:0e:b3:81:
         d7:62:c0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:00:40 2026 by rpki-client