Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/4a741be9-7509-3402-adb8-d1f0d4158e10.roa
File:                     4a741be9-7509-3402-adb8-d1f0d4158e10.roa (raw, json)
Hash identifier:          P5+l23kEzDiPeynXwONPB0dXgA7X27lIVheO6u4Dv2k=
Subject key identifier:   32:CE:CB:F3:0B:3C:34:71:33:5C:3E:16:F1:97:D3:76:A9:B2:A5:5D
Certificate issuer:       /CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50
Certificate serial:       010D0C9F4328584EA0155204121DE73BDA410A80
Authority key identifier: 29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/4a741be9-7509-3402-adb8-d1f0d4158e10.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        192.230.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:52:04:12:1d:e7:3b:da:41:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=0547ab2c-ee22-4243-8ad6-b19769bdefe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:96:19:35:3e:6b:9b:d0:a2:18:de:a8:88:
                    bc:46:b0:6a:64:70:d0:34:05:2d:bb:40:ea:d5:67:
                    5f:9f:92:0f:75:f6:9e:92:5b:c7:01:1b:27:cb:62:
                    cf:06:ef:66:a0:64:b1:a3:4b:a3:1a:2a:83:11:a5:
                    b0:9d:41:6b:3b:32:f1:c4:4a:92:6e:1d:5e:ff:1b:
                    eb:6a:a0:ae:3b:c9:01:ac:0f:74:b4:32:3f:9d:10:
                    4c:ea:44:a1:78:67:73:99:82:ac:7a:fb:42:62:a0:
                    7a:38:ed:f8:5b:16:98:14:19:37:d2:a9:53:13:14:
                    69:47:2a:e0:ac:c0:48:d9:f2:e1:07:8c:ca:9f:af:
                    77:1a:79:6e:4a:55:9b:23:91:b1:65:cb:ea:f2:82:
                    79:9e:39:7a:19:84:f9:12:b6:38:6b:0d:60:5a:e9:
                    a6:a6:e3:d6:2f:e5:e4:1a:1b:53:02:30:10:9d:03:
                    13:bd:99:73:f6:1a:9d:b1:86:7a:7d:5c:f1:38:0e:
                    63:87:55:f4:ac:5f:cd:69:5a:e4:53:54:ca:88:b1:
                    eb:15:b8:bc:c8:5b:60:cf:7c:d3:85:cf:49:61:ec:
                    61:6e:57:53:6d:d3:ef:77:13:d2:60:b6:f1:af:df:
                    b0:07:96:22:70:ef:68:00:98:ff:a3:10:ba:d8:3a:
                    78:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CE:CB:F3:0B:3C:34:71:33:5C:3E:16:F1:97:D3:76:A9:B2:A5:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/4a741be9-7509-3402-adb8-d1f0d4158e10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.crl

            X509v3 Authority Key Identifier:
                keyid:29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.230.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:3f:9a:e3:8d:69:40:f3:45:4e:88:b5:3b:b1:9c:f9:c5:04:
         52:0a:ed:cb:48:46:31:ce:02:40:b3:7c:32:48:45:cf:49:32:
         c7:a6:97:74:07:fa:8e:5e:6e:45:0f:55:1a:cf:fb:04:06:53:
         76:b1:07:4c:7b:dd:e8:5f:5a:71:96:72:3a:0c:57:c0:9c:47:
         88:08:c4:d0:3b:51:6c:64:cd:6f:8f:e3:a3:da:41:71:7a:bb:
         b2:2e:47:9c:10:92:0e:3b:db:da:b8:58:df:bb:61:45:cc:45:
         13:58:40:95:74:22:db:98:85:b0:0a:69:92:28:c7:d4:db:22:
         a0:53:40:69:22:c2:fb:c7:af:6e:9c:b2:5b:73:48:63:0e:59:
         aa:3d:51:ac:73:87:92:c5:fd:c3:eb:65:97:78:d9:83:69:69:
         46:e7:7c:82:9a:63:4e:e4:5a:02:16:f2:e3:8a:bc:e5:58:72:
         c8:6c:e6:09:11:07:3c:10:52:58:0d:8f:c6:c3:fe:c9:f6:bd:
         0e:27:32:17:6f:a3:64:c6:34:b4:5d:04:a2:76:a8:97:21:3d:
         4a:6f:1d:ff:a3:86:e6:42:96:48:47:90:bc:f4:8f:44:d7:04:
         43:5c:6c:eb:d6:6e:e2:39:88:90:a1:2a:ea:3e:83:b5:87:90:
         93:95:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:19:54 2026 by rpki-client