Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/07e2f994-155f-342d-9ca4-9e03e9f7c3ad.roa
File:                     07e2f994-155f-342d-9ca4-9e03e9f7c3ad.roa (raw, json)
Hash identifier:          +B+UqDkG00AqgrAw0LuSdL+UDdlhH1b9rwzGbGnKndM=
Subject key identifier:   FE:B9:5F:BB:E5:AB:6B:C0:18:F6:29:04:8A:FB:8F:31:FF:46:B0:14
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F29D9DDCB490E0B9888C06200
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/07e2f994-155f-342d-9ca4-9e03e9f7c3ad.roa
Signing time:             Sun 13 Sep 2026 17:22:34 +0000
ROA not before:           Sun 13 Sep 2026 17:22:34 +0000
ROA not after:            Sat 12 Dec 2026 18:18:11 +0000
asID:                     197959
IP address blocks:        192.26.56.0/24 maxlen: 24
                          198.29.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:d9:dd:cb:49:0e:0b:98:88:c0:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 13 17:22:34 2026 GMT
            Not After : Dec 12 18:18:11 2026 GMT
        Subject: CN=e3e1d8aa-c53e-4145-9167-59029747ac9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:70:1a:2a:03:4f:01:e4:f5:00:81:43:cf:
                    c2:a6:8e:74:f7:28:d0:11:06:66:f9:ea:46:b7:67:
                    0e:e6:cf:26:6c:01:0d:1f:43:ad:5e:19:4e:c0:88:
                    cb:ad:de:ad:8e:ab:10:46:07:c3:bc:b5:9f:6a:f4:
                    a6:a3:41:7b:26:1d:5e:b0:fc:bf:1e:80:6a:47:ed:
                    dc:13:c1:14:2f:01:6c:b3:45:59:b3:73:6e:73:d4:
                    be:55:28:3a:c6:ba:21:83:b8:b3:18:18:e8:52:6c:
                    54:fe:5f:7f:bb:2c:d3:dd:58:51:bd:1e:a6:d6:bc:
                    1f:69:cb:a2:68:64:9b:35:53:9a:19:85:38:d1:60:
                    15:bd:34:5d:7a:3c:ba:83:fa:66:77:89:68:c9:d6:
                    14:ce:2c:19:78:a7:db:cd:57:60:75:4d:6d:61:8f:
                    1c:5b:40:c4:bf:1f:52:6a:de:34:17:3c:31:35:f7:
                    cb:e9:40:3f:fe:28:8d:78:f6:15:21:8a:b6:3c:8e:
                    54:5e:b3:27:b5:e9:7f:fd:61:d3:a4:a9:8a:4d:fd:
                    5b:34:e2:ae:c8:2a:c7:d8:d1:8d:c8:8f:9b:5a:7c:
                    11:bf:dc:a3:49:77:de:20:90:a9:6f:87:e5:5f:65:
                    05:ae:12:8c:d5:34:1f:ac:f0:83:aa:78:3a:10:a7:
                    e1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B9:5F:BB:E5:AB:6B:C0:18:F6:29:04:8A:FB:8F:31:FF:46:B0:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/07e2f994-155f-342d-9ca4-9e03e9f7c3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.56.0/24
                  198.29.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:da:27:8f:5b:17:d5:75:5f:4f:a3:93:c9:3b:26:b6:16:62:
         c6:e0:f3:3d:e0:19:76:ed:c9:ac:ed:fc:a1:00:8a:bc:0d:2d:
         9c:34:59:7f:3b:22:a7:03:8f:53:e0:01:1d:b7:eb:ad:01:92:
         b3:0e:24:1f:6f:da:7e:47:2b:57:ac:79:6f:2f:02:2e:37:0c:
         bb:06:bc:9b:4e:5a:24:94:f8:e8:05:d8:14:66:d8:20:6a:3b:
         98:dc:0b:9b:83:1d:2e:72:29:4a:3c:6b:cc:12:1d:27:83:12:
         08:92:58:ca:ee:e9:95:59:7f:84:6b:e0:b4:be:69:99:0f:4e:
         3b:5a:f2:10:04:74:b9:8b:08:6e:26:12:7d:c4:c8:c0:88:09:
         69:00:d6:71:ab:b0:31:6f:03:2e:5e:8f:86:71:65:e7:7a:e4:
         26:89:b7:f7:3f:1a:37:5a:80:7c:d8:02:e5:f4:3e:b2:95:f0:
         da:f2:33:99:04:47:d9:b9:f7:90:14:a0:b9:4e:b4:f7:94:76:
         6e:ee:af:5f:b6:75:66:55:1b:d1:7b:c4:6b:59:44:35:52:25:
         af:58:67:bb:40:0e:4e:15:91:5d:86:ae:99:d5:22:cb:ca:5c:
         97:62:9e:c3:e0:e5:28:2a:4e:98:c8:13:86:82:2a:33:56:35:
         c9:83:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:17:13 2026 by rpki-client