Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b75b1aed-6b20-321a-bde9-c338d56c5092.roa
File:                     b75b1aed-6b20-321a-bde9-c338d56c5092.roa (raw, json)
Hash identifier:          v64uvhwQHxc0By/arXwkM6pLG6NYEz9+Pw0J0dedU28=
Subject key identifier:   9B:D2:C3:E8:F2:03:B3:22:51:AF:9E:07:5C:52:97:D7:7E:53:F2:35
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584F377C4F8DF9DF62DE6DE9C7F0
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b75b1aed-6b20-321a-bde9-c338d56c5092.roa
Signing time:             Fri 18 Sep 2026 14:35:23 +0000
ROA not before:           Fri 18 Sep 2026 14:35:23 +0000
ROA not after:            Thu 17 Dec 2026 15:35:23 +0000
asID:                     149513
IP address blocks:        192.82.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:37:7c:4f:8d:f9:df:62:de:6d:e9:c7:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Sep 18 14:35:23 2026 GMT
            Not After : Dec 17 15:35:23 2026 GMT
        Subject: CN=cfdab4e0-276c-48cd-b689-47d2cd899a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:56:e7:25:99:08:e3:94:5c:c2:73:bf:3f:a5:
                    7a:35:71:5a:67:6e:2b:cb:df:af:bb:bf:bf:11:8e:
                    d5:5c:72:fb:10:2e:59:b0:e2:25:6c:ca:eb:d2:18:
                    60:13:0b:70:b7:0a:f9:05:af:1c:32:3c:b4:42:29:
                    3f:46:d5:fa:dd:fa:1f:4e:7a:e4:51:27:cd:4d:7e:
                    56:fb:1a:18:e6:47:a4:0f:af:ca:cd:ac:99:d3:fa:
                    0c:8a:b9:d4:ae:e3:33:fc:be:8c:07:5b:4c:80:5f:
                    ef:0d:0e:39:58:61:96:e9:6a:d1:32:d4:aa:00:b7:
                    ee:2b:37:69:ae:e5:66:66:bd:38:fb:08:d0:75:e5:
                    a7:e1:d0:cd:68:1a:73:f8:f2:a9:ac:60:d8:8f:ba:
                    9f:4c:df:70:08:62:f1:7f:b8:e7:c0:ab:56:e5:49:
                    dc:92:2f:3f:ff:23:46:82:46:46:95:49:ca:7b:ef:
                    af:9a:db:52:bc:1a:78:39:f6:c1:c8:e3:08:cc:61:
                    55:81:f1:81:84:94:ca:c7:b8:1b:15:5a:a7:59:ee:
                    b4:2a:03:89:f4:b3:b6:fd:8e:fb:df:37:b5:3f:1a:
                    b5:d3:e5:72:75:0a:1e:74:be:73:ea:12:47:82:65:
                    45:08:d7:e3:4a:1f:95:52:0e:24:96:e4:bd:23:9b:
                    ec:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D2:C3:E8:F2:03:B3:22:51:AF:9E:07:5C:52:97:D7:7E:53:F2:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/b75b1aed-6b20-321a-bde9-c338d56c5092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ca:49:8b:2f:cf:41:2e:93:14:ca:bf:2b:31:e1:17:98:9c:
         fa:93:f3:2c:37:0d:53:ff:d9:18:31:ca:33:74:ef:a3:02:40:
         71:61:d9:96:94:0e:e1:dc:00:fa:00:e4:3e:02:37:5d:c4:fe:
         9c:28:39:a2:af:55:0f:60:42:a4:93:13:ca:cb:6b:a5:c0:c7:
         36:3b:ab:4c:34:26:47:49:5c:aa:69:d4:7f:78:9a:14:77:cc:
         87:c8:03:b7:44:6e:44:0f:d1:ff:93:e0:26:e2:bf:4f:79:d2:
         9e:78:97:79:d6:d8:ca:ac:53:43:03:1f:e7:a1:2a:e8:94:35:
         ac:f6:c6:01:b9:82:40:b7:68:1a:00:00:27:01:05:0f:cb:04:
         83:6a:2c:8a:7e:32:02:60:7c:8d:97:23:26:8f:8f:9e:75:69:
         32:29:d1:7a:ff:12:5e:55:69:0c:46:af:4f:31:2a:f3:c2:00:
         67:ee:ff:98:fc:79:27:3d:9b:f8:4f:d6:30:7e:c1:0e:2c:a2:
         9b:43:59:0b:92:56:c5:65:a0:63:66:9c:47:e2:01:38:1f:23:
         e6:2f:73:fd:1a:f8:b0:ea:58:c6:01:1c:27:44:2a:5d:fa:a0:
         30:bf:9f:47:2c:a3:4d:a1:df:83:44:5b:d2:8f:b3:22:78:e3:
         1e:aa:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:26:29 2026 by rpki-client