Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa
File:                     b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa (raw, json)
Hash identifier:          /4HgLOirOjsa0dqzVsYlCSv3j9n8gq90j7C5osbbTsc=
Subject key identifier:   DE:24:CB:C8:E1:56:C1:D9:64:7D:B3:F3:88:E9:58:7E:1F:1A:6F:3D
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F4328584EA7981713246E924D94BF9900
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     54885
IP address blocks:        192.207.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:17:13:24:6e:92:4d:94:bf:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=434c081c-b0ac-49ed-99e2-46b47e31601d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:b4:30:34:8e:7f:f0:3d:8e:f9:94:52:00:
                    43:56:b2:10:01:e4:be:82:ae:4b:0e:e6:10:0a:3a:
                    b2:72:49:d6:c4:5a:06:ff:60:44:25:73:8f:c1:33:
                    7e:c9:65:f1:8f:1a:70:1a:6b:9c:60:83:fe:bc:36:
                    00:f5:88:79:85:30:b3:92:79:f0:a1:5c:f6:c4:a1:
                    d9:fb:31:44:e3:12:8d:48:f3:c5:6a:b7:3d:25:c6:
                    13:dc:59:00:dc:23:e2:fd:98:c1:05:25:59:80:c8:
                    41:b0:3c:dc:a3:ba:a3:e7:2f:33:23:00:24:82:9a:
                    3d:db:79:8d:cc:c2:33:84:73:4a:60:92:51:ac:f2:
                    33:26:50:86:af:32:2d:9b:87:6d:75:b5:cf:b5:80:
                    54:99:dc:fb:10:d1:f1:09:6d:14:c4:f1:07:c5:31:
                    b0:9d:ec:48:93:62:75:5b:b6:8f:69:a5:ad:71:1c:
                    b9:7e:0f:33:7e:ba:3a:25:4d:e1:7f:59:7d:08:5e:
                    49:16:ed:b4:10:89:78:02:eb:47:51:64:13:44:50:
                    59:c4:e4:c8:61:89:fd:65:e1:1f:aa:a4:be:38:d1:
                    59:46:14:c9:61:ea:77:d3:1b:74:28:67:44:ad:a7:
                    3f:b1:04:59:0c:2a:b7:08:b2:84:53:2d:73:fe:c8:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:24:CB:C8:E1:56:C1:D9:64:7D:B3:F3:88:E9:58:7E:1F:1A:6F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/b9327a08-f4cc-34a5-92a9-26190ed9ed59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:d9:64:ca:5a:58:67:0b:56:4b:5f:23:8b:c6:01:73:df:84:
         3c:87:00:2d:a1:72:0e:2a:3a:f9:5b:f4:97:d8:d0:6d:e9:dc:
         8e:0c:0d:d9:fd:c2:66:5d:db:ba:de:23:7e:f3:d8:9f:df:85:
         8e:90:36:0d:62:62:18:38:49:43:f4:4a:2b:c8:f2:c7:0a:45:
         2c:f9:4f:0d:e8:3b:91:3a:f1:65:f8:7c:91:e8:66:f1:75:52:
         f4:fc:1f:25:1f:af:df:e5:df:ff:90:68:93:b2:94:f2:ce:34:
         2f:e1:41:e6:a5:2b:32:0f:cc:8f:d4:d4:f1:0f:ca:df:e8:a1:
         96:83:7d:c4:47:b4:39:8d:73:1b:ba:06:96:1d:48:82:74:e5:
         9b:00:a0:b1:57:f5:4c:8a:66:46:b1:9d:b9:58:a4:38:98:cf:
         1a:5f:d0:f4:ea:f4:bb:a4:0e:e0:91:d1:46:c7:5e:13:2c:b9:
         b2:81:41:25:d6:e3:81:c5:67:b7:5c:63:26:38:12:77:1a:42:
         e5:1c:5e:1e:64:10:77:8d:ee:ec:b9:74:3c:69:82:39:0d:30:
         b7:8a:c3:76:cf:8a:af:06:c4:6e:5c:06:d3:83:1c:99:3c:5f:
         f9:ce:93:d8:51:97:ca:83:aa:06:22:c1:b3:15:48:d0:3a:17:
         a0:ac:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:36:20 2026 by rpki-client