Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa
File:                     af253897-34b0-302d-99ea-bc80edc69de5.roa (raw, json)
Hash identifier:          92Lmd0hogbgX/m0SxBNbhbTFktAjhLuDONGK5+65RQo=
Subject key identifier:   C1:3D:D4:20:5D:86:9E:9C:B7:22:18:6F:4B:D7:99:55:99:2F:DD:B3
Certificate issuer:       /CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18
Certificate serial:       010D0C9F4328584F119CF8582B6DF6A68F497780
Authority key identifier: 60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     32450
IP address blocks:        192.107.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:f8:58:2b:6d:f6:a6:8f:49:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a02a1775-e3ef-4d5e-a934-1d4204e1ca18
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=7454c0ad-e2b6-43fa-aa88-1b17d0cddb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:92:9e:a6:16:11:a6:9c:b0:c5:2a:0d:19:f5:
                    52:b4:bf:30:5b:10:af:9d:f4:8f:d3:e4:9b:58:f1:
                    04:d6:82:d5:57:6f:fb:fa:65:57:7a:8c:06:26:b9:
                    6f:3f:3d:4e:e5:97:ba:a5:b2:38:14:0a:4c:45:af:
                    9c:fa:8e:5c:4b:1e:ff:1a:4e:0d:27:73:5b:57:81:
                    4f:80:43:ac:52:44:02:6c:69:c0:69:c1:61:fe:a2:
                    21:b6:aa:1d:99:11:07:c1:3f:cb:c0:31:fd:db:c9:
                    ce:a3:20:36:07:e9:2d:b6:c2:5a:d9:28:60:a3:77:
                    74:06:4d:4b:8f:53:5f:06:1b:ef:7b:14:68:5a:c4:
                    48:63:0c:92:71:cc:a9:d4:9e:8b:18:9e:a9:ce:13:
                    21:47:05:b0:74:48:0b:14:a0:86:a6:44:96:60:88:
                    2a:09:87:29:71:08:a2:5b:e0:e7:85:2f:2a:66:3a:
                    3d:25:f2:3e:9e:fb:29:0e:75:3b:68:74:90:96:00:
                    73:4f:d0:76:44:73:4d:a1:36:16:40:82:43:c5:c7:
                    75:da:29:f8:86:6d:c4:48:c4:f0:79:97:a2:67:89:
                    d8:be:27:bf:7a:19:c2:2e:0e:83:b1:81:f1:78:52:
                    bd:85:ac:86:75:a9:35:1f:d9:cc:36:2b:ee:af:a5:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3D:D4:20:5D:86:9E:9C:B7:22:18:6F:4B:D7:99:55:99:2F:DD:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/af253897-34b0-302d-99ea-bc80edc69de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.crl

            X509v3 Authority Key Identifier:
                keyid:60:34:7A:ED:F0:21:25:5B:C6:90:06:B5:57:06:93:34:AA:5D:35:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a02a1775-e3ef-4d5e-a934-1d4204e1ca18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.107.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:f2:c5:c5:e9:23:6d:7d:c8:1e:9a:7e:c8:30:bd:34:00:e8:
         bf:91:d6:be:55:83:2e:31:32:ac:e3:ee:c1:05:86:6b:4c:1a:
         42:d5:1c:89:28:dc:f2:c0:5d:b0:d1:81:e6:d1:f6:3e:df:dd:
         bd:8c:a1:51:46:f0:b7:68:d2:5b:01:0f:15:d9:c8:b1:91:50:
         2c:14:36:8b:3d:bf:77:2c:aa:a5:2c:69:7f:74:b9:ae:4f:62:
         54:31:0f:e2:8a:fc:bb:ed:41:ad:a9:0c:ed:15:40:6b:d3:c8:
         99:53:8a:cf:6d:16:c0:3f:d4:d2:da:a4:78:9f:a2:9e:dc:da:
         14:74:35:1f:3d:4d:bd:63:da:cd:fa:5f:eb:b4:c8:4b:3b:28:
         70:3a:46:81:b5:e5:21:9c:62:ba:a4:c7:4c:60:e4:d8:a7:a0:
         89:78:40:61:f5:38:1e:fd:1d:fa:7f:70:44:15:1b:84:25:5a:
         41:e1:1c:a5:6a:d6:72:c2:eb:56:0c:33:17:e9:e4:10:99:e0:
         37:9a:17:42:59:8e:54:3d:f4:77:a0:95:6b:c0:ca:50:48:9a:
         9a:b2:09:10:05:2b:dd:bd:78:47:d5:96:e0:f0:ca:b6:fe:dd:
         b8:6d:ba:40:ea:5d:d6:fd:af:9f:87:f0:6f:ed:58:13:eb:33:
         0b:94:1f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:07:01 2026 by rpki-client