Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b13ef1ae-d160-3963-ba7c-2efb067ca0d5.roa
File:                     b13ef1ae-d160-3963-ba7c-2efb067ca0d5.roa (raw, json)
Hash identifier:          h2T98Ucod8ZsBbZ3bMuSf9lz8HZxxzMfia2E4rKOQ9Y=
Subject key identifier:   79:B5:EB:77:F0:52:C1:D6:7C:59:EA:50:23:F1:9F:D2:46:97:6F:86
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F3CE28DB488149803A432E180
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b13ef1ae-d160-3963-ba7c-2efb067ca0d5.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     22516
IP address blocks:        192.171.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:8d:b4:88:14:98:03:a4:32:e1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=c463aa3f-8d60-4030-8a01-b6cf59b11eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:cf:d1:63:79:e2:3c:1e:62:20:24:17:03:
                    59:94:89:24:05:57:46:0e:9d:52:23:45:34:f3:87:
                    52:52:80:39:fb:f1:b7:de:34:f7:3b:32:05:be:16:
                    36:f6:09:ef:dc:f5:0b:08:0e:6c:7d:c1:54:5e:cb:
                    35:67:76:12:43:85:d0:ff:2c:2c:30:11:04:83:9d:
                    ae:47:74:e0:5d:b6:1c:51:46:30:72:18:9b:4d:02:
                    6b:1c:2d:a6:3e:69:12:9c:85:0b:03:4c:b8:fd:a1:
                    77:6f:c7:29:04:5a:2a:26:55:36:fb:1e:1c:c6:34:
                    d0:8f:f5:c4:51:0f:ee:bd:83:ef:bc:c6:aa:6a:33:
                    02:a6:94:de:32:b5:ba:99:22:27:63:2b:5d:15:e7:
                    bb:91:0f:87:bf:d8:d5:a7:bb:d2:51:b7:14:06:29:
                    77:a3:f8:dd:6c:0a:73:9e:51:84:82:48:2c:a8:1a:
                    91:04:df:5f:6c:1e:da:4c:49:1b:b0:71:5d:a6:5f:
                    1e:a1:9b:b7:46:6e:93:ba:a0:fb:94:75:4a:b4:80:
                    51:e0:aa:5d:c6:c1:da:f1:47:f0:12:ee:c1:e1:c9:
                    de:73:e6:dd:7d:88:2e:ed:73:90:55:21:59:32:d0:
                    d2:75:6e:67:03:a7:9d:8a:62:50:59:d8:33:85:1f:
                    61:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B5:EB:77:F0:52:C1:D6:7C:59:EA:50:23:F1:9F:D2:46:97:6F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/b13ef1ae-d160-3963-ba7c-2efb067ca0d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.171.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ef:4c:af:76:54:4d:3e:96:b7:9d:b1:a1:c5:90:b0:14:13:
         d8:e7:ed:f3:5f:c1:79:66:23:5e:12:ba:97:57:f7:dd:bd:2b:
         35:b8:2e:a3:be:02:72:c6:16:0e:10:c4:9d:3e:d8:01:76:2d:
         ac:e2:94:df:3f:c4:46:0d:94:47:e0:db:f4:c6:38:27:6e:f8:
         1c:01:43:5b:e9:d1:d7:6f:63:d9:cc:72:03:6a:d4:1f:39:d0:
         80:14:ec:69:b4:53:59:c4:86:c2:ff:e2:14:bf:4d:ab:f3:50:
         07:dd:cc:4d:03:f3:ac:ca:66:6a:ea:e1:6d:ac:7c:4f:8b:60:
         94:fd:d4:46:f4:a8:60:56:c1:7c:85:f8:4b:05:9b:1b:a0:7d:
         5e:6f:92:32:97:e7:c2:b7:e2:89:13:90:72:f3:dd:f0:db:4f:
         be:08:b8:44:82:20:02:86:47:6d:c9:cf:4c:2c:98:84:3f:63:
         1c:7f:0b:04:ea:3a:51:49:26:88:94:8a:f2:a6:0f:cc:a7:3d:
         43:ad:cb:e7:39:3f:d0:8f:b4:7d:6d:af:46:12:9d:4f:7f:38:
         99:f0:c0:3b:eb:53:09:2d:e9:61:ff:da:89:50:c5:36:0a:0e:
         90:ae:76:25:d6:d4:08:43:6e:c4:c3:56:f4:7a:82:03:b8:50:
         38:66:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:56:57 2026 by rpki-client