Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/2be32853-a44d-39e7-953a-d32cb93928f0.roa
File:                     2be32853-a44d-39e7-953a-d32cb93928f0.roa (raw, json)
Hash identifier:          YDAxVz22790WpM6nhwZcVajhqUZeOvim9A1LbZXmYq8=
Subject key identifier:   5C:2B:B4:C3:7D:38:2B:2E:60:60:F2:7D:F0:D2:2B:59:A9:CC:73:6B
Certificate issuer:       /CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
Certificate serial:       010D0C9F4328584EFECF5FD69970E1803A4B3D00
Authority key identifier: B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/2be32853-a44d-39e7-953a-d32cb93928f0.roa
Signing time:             Sat 29 Aug 2026 07:21:40 +0000
ROA not before:           Sat 29 Aug 2026 07:21:40 +0000
ROA not after:            Fri 27 Nov 2026 08:21:40 +0000
asID:                     11179
IP address blocks:        146.12.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:cf:5f:d6:99:70:e1:80:3a:4b:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec
        Validity
            Not Before: Aug 29 07:21:40 2026 GMT
            Not After : Nov 27 08:21:40 2026 GMT
        Subject: CN=7f107b24-860e-444d-adf7-9f788d78f4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:77:88:96:6c:9e:74:6e:dc:e5:36:73:20:24:
                    15:4a:eb:c1:01:42:04:64:b1:d7:b7:65:5e:84:9d:
                    fd:39:da:82:85:d8:47:3b:59:4b:d2:dc:8e:c5:5e:
                    16:e4:73:15:c3:f6:65:d6:fd:61:90:a2:b8:a3:fb:
                    64:bc:b6:d5:b3:e3:99:2a:80:af:a4:11:4f:d6:01:
                    20:65:e0:1b:09:b4:b3:b8:5f:48:bc:b3:7c:2a:db:
                    14:fa:89:98:29:5c:56:3e:4d:f4:0c:be:b0:9c:0e:
                    d0:96:8e:b7:42:68:b4:0c:e8:ba:09:51:f3:c9:04:
                    54:68:a1:65:37:cf:79:27:04:44:18:c3:96:e6:99:
                    a2:2a:f1:a0:4d:e7:d7:26:eb:80:c2:c7:ab:43:ad:
                    37:26:9e:9f:1b:71:bc:60:35:d4:3a:48:33:03:99:
                    af:c6:fe:d8:2f:e1:f6:e9:37:12:43:90:27:70:45:
                    bf:38:5c:e4:4c:dc:de:02:98:e1:4c:22:ab:88:cd:
                    6c:c2:49:3b:8b:c1:78:b2:d8:88:be:1d:e8:29:f5:
                    1c:7a:2e:29:f8:c8:c1:2a:b4:55:66:23:62:f8:81:
                    e7:77:d7:f4:b3:10:a3:45:eb:e0:c1:dc:aa:b9:12:
                    20:0e:70:b8:48:d6:d4:ca:b8:94:b5:17:a6:1d:c8:
                    73:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2B:B4:C3:7D:38:2B:2E:60:60:F2:7D:F0:D2:2B:59:A9:CC:73:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/2be32853-a44d-39e7-953a-d32cb93928f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.crl

            X509v3 Authority Key Identifier:
                keyid:B6:F3:A8:F6:CC:10:73:46:38:5F:AB:6A:C9:47:D8:74:32:0F:94:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9ac33bd5-9df4-4ab0-b084-8d58e52ff7ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.12.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c7:54:ba:1e:e8:76:c4:23:37:8b:f0:e3:a7:bb:ca:87:33:
         f9:a3:a6:bb:01:76:e5:dc:b2:2f:df:26:a3:d1:94:2c:6e:e7:
         15:4a:54:79:55:76:fe:6e:05:42:1e:f8:4d:39:11:bb:27:22:
         6c:25:7c:b6:71:91:29:ca:e3:a7:af:49:24:4a:25:16:83:a1:
         00:cf:9d:02:fc:42:49:7e:7f:57:c3:b1:07:62:9e:09:f1:d3:
         41:91:61:d9:d1:0a:59:21:00:4e:51:70:19:7b:15:c8:d9:44:
         1d:8b:b3:4b:65:49:9e:3d:5b:5e:d9:ca:47:ac:3f:57:42:3f:
         11:96:88:b7:66:e6:30:0f:6b:b4:18:18:aa:95:58:94:16:3c:
         9f:c5:84:13:b7:7a:e3:17:7a:9d:f4:a0:2b:5a:c4:fc:44:12:
         f0:78:de:04:14:36:51:10:bb:40:f8:95:39:d4:e1:f5:c3:1a:
         c5:3c:5e:94:94:09:37:ca:34:2e:38:43:6e:67:58:c6:4b:b0:
         89:27:89:7d:38:ed:5f:da:56:c2:01:af:f7:fd:ab:96:13:1d:
         0c:76:32:d0:e9:13:3c:a5:11:23:c9:dd:31:5e:5b:53:21:cd:
         18:67:c6:ff:1d:82:6a:a9:d3:6a:7d:37:21:f0:0a:a4:d2:2a:
         a3:92:0d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:16:23 2026 by rpki-client