Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa
File:                     fd86afa8-57f3-379b-a855-4d084ac157bd.roa (raw, json)
Hash identifier:          kMSZX2gVFShIU4ryi0DnNXHTotzAE6a140jrcCxW/KA=
Subject key identifier:   A6:AE:87:D0:39:41:9C:6F:F7:8C:2E:7D:8C:F2:DB:8D:43:36:4F:1D
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584F2EED0D2BBE3C503F8C3BA000
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     27321
IP address blocks:        192.158.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:0d:2b:be:3c:50:3f:8c:3b:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=b724f6bf-5a49-4faa-85f1-4bc01984dff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:47:eb:58:86:72:aa:eb:81:e5:05:b8:4f:
                    f9:e0:fc:a0:06:c1:74:40:c0:2d:f6:9a:84:16:5c:
                    bd:c4:5c:d7:10:82:1d:b0:0a:00:87:38:57:1a:77:
                    d3:f3:d8:4d:ab:27:2e:4a:b9:82:f8:d7:1d:82:d2:
                    9b:1d:b3:7b:04:1e:9a:f6:71:11:61:43:62:4c:92:
                    78:19:d0:44:01:bc:6c:c2:86:52:b8:00:bf:3b:42:
                    be:c3:64:7b:61:91:65:23:f7:db:a8:ae:05:92:a9:
                    d5:59:15:b3:9f:6a:56:a1:e0:6a:6f:c6:a9:cf:4a:
                    b8:83:33:64:d5:2a:8c:9d:16:52:60:53:74:b6:de:
                    f2:69:c1:fd:07:f2:c3:92:b0:84:c6:6a:87:69:41:
                    8a:1e:ac:2d:66:c9:2d:83:fe:20:82:dc:8f:00:e4:
                    04:ef:b4:52:d1:78:3f:15:11:39:50:31:37:1e:f4:
                    12:e1:06:d0:88:8e:19:a7:45:86:6e:95:d9:60:eb:
                    35:ed:e9:61:f0:0f:62:69:fc:b7:ba:95:b8:6b:6d:
                    20:15:e0:a7:59:83:c5:bd:73:5b:ef:a1:a0:16:1e:
                    9d:d1:0c:47:ae:3a:c9:d5:87:15:d6:b6:4c:2e:ea:
                    95:ad:3c:37:33:48:40:34:3a:6b:47:f3:06:f7:3e:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:AE:87:D0:39:41:9C:6F:F7:8C:2E:7D:8C:F2:DB:8D:43:36:4F:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd86afa8-57f3-379b-a855-4d084ac157bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.158.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:a9:2d:a7:e0:c4:19:bb:72:56:79:ed:78:41:03:43:92:46:
         cc:72:86:eb:ac:bd:6c:29:c4:33:36:92:7e:d8:e3:68:78:e7:
         36:26:37:21:4a:6a:3c:78:4e:c9:95:62:13:15:1a:dc:b8:7e:
         18:1e:98:3d:58:aa:6a:75:b6:ff:3f:ce:88:7c:d8:f9:a4:0b:
         38:ef:66:57:b7:f6:f4:1e:e5:ae:29:02:50:e9:e8:1a:fa:e7:
         22:4e:32:64:18:f4:78:7a:03:60:55:e8:13:b5:5f:1a:31:b6:
         e8:56:c6:00:63:a8:77:88:6b:fa:0c:75:38:56:63:c3:67:ae:
         3b:40:23:cf:48:d7:8e:24:51:4a:15:fc:fb:7f:ba:c1:b8:b4:
         0b:60:96:82:cb:09:ff:56:f9:01:62:57:45:2b:6d:ef:f3:38:
         b4:f5:a2:7e:86:6e:6a:f3:2d:d2:d2:2c:28:d5:84:d7:42:24:
         5b:f3:3a:30:2e:fe:79:c2:ed:36:ee:eb:99:7d:f4:70:d8:da:
         c9:97:33:99:38:74:7c:6a:a8:34:25:11:31:52:d5:68:86:ff:
         8c:33:ec:cb:68:5d:4f:f8:1b:6b:0c:65:c7:a6:d9:58:94:f8:
         3d:ca:3f:83:4e:80:04:8f:8d:17:c4:ba:8d:af:49:3b:ab:62:
         b6:9e:38:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:42:18 2026 by rpki-client