Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/1131d26b-4a59-3839-bdbc-73b10b5e0c05.roa
File:                     1131d26b-4a59-3839-bdbc-73b10b5e0c05.roa (raw, json)
Hash identifier:          mdRwXFEfkvDDDW/Bmfl5DarOlcGFBxAkZ7SCvQQuTOE=
Subject key identifier:   79:9B:9B:15:8F:05:3B:5A:5A:83:5C:27:62:88:60:52:38:56:11:AB
Certificate issuer:       /CN=9845687b-adc5-4703-901b-ed09092a7799
Certificate serial:       010D0C9F4328584D55BA3C85CA6385FC952FA500
Authority key identifier: FD:11:20:64:CE:1E:09:22:69:25:3C:83:DC:32:05:B5:F3:74:74:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/1131d26b-4a59-3839-bdbc-73b10b5e0c05.roa
Signing time:             Mon 30 Mar 2026 01:00:23 +0000
ROA not before:           Mon 30 Mar 2026 01:00:23 +0000
ROA not after:            Sun 28 Jun 2026 01:00:23 +0000
asID:                     14618
IP address blocks:        192.84.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/9845687b-adc5-4703-901b-ed09092a7799.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/9845687b-adc5-4703-901b-ed09092a7799.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:55:ba:3c:85:ca:63:85:fc:95:2f:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9845687b-adc5-4703-901b-ed09092a7799
        Validity
            Not Before: Mar 30 01:00:23 2026 GMT
            Not After : Jun 28 01:00:23 2026 GMT
        Subject: CN=c8ef8029-f2bb-492e-a01b-4f76e69e4b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:df:a4:d2:4d:09:3b:8d:20:18:ff:95:3c:b7:
                    68:4f:d1:39:75:5e:00:cb:ec:de:9d:2b:28:78:79:
                    f6:8f:e7:93:30:eb:cd:82:2f:e7:85:55:4c:a8:68:
                    e6:17:02:b6:9b:dc:70:bb:dc:dd:44:25:91:93:ad:
                    8f:31:0a:f9:e9:fc:00:05:6c:cc:3e:dc:ef:92:e4:
                    d0:f8:7e:a2:6c:51:bb:44:76:f4:23:a0:83:2a:17:
                    9a:d9:b5:5e:aa:c3:57:42:7b:c8:06:2f:23:93:3c:
                    d1:b0:9d:03:43:a2:91:98:d1:9e:34:26:fc:c9:34:
                    b2:e7:22:27:5c:7c:3c:d5:1b:c9:c9:3e:30:62:9f:
                    2e:28:ab:5a:8b:76:af:eb:4a:bc:e4:80:4f:e5:d6:
                    58:e8:f5:2f:10:c8:86:f0:34:2f:d3:0d:ea:db:a2:
                    f0:3c:78:68:0c:4f:78:43:19:90:dd:5e:09:5f:7a:
                    bb:83:22:c8:97:57:3e:84:b9:42:64:98:76:8c:c3:
                    9e:ab:01:82:87:6a:0d:56:75:a1:45:e8:b7:3b:1f:
                    a5:6e:9b:99:58:96:ff:b4:b6:6e:80:a7:ed:c2:3c:
                    cc:dc:c3:97:4b:03:82:c4:1e:0b:c2:f3:b2:e1:e6:
                    48:0b:f3:c8:41:b2:3b:1b:93:95:36:a4:54:58:4c:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:9B:9B:15:8F:05:3B:5A:5A:83:5C:27:62:88:60:52:38:56:11:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/1131d26b-4a59-3839-bdbc-73b10b5e0c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799/9845687b-adc5-4703-901b-ed09092a7799.crl

            X509v3 Authority Key Identifier:
                keyid:FD:11:20:64:CE:1E:09:22:69:25:3C:83:DC:32:05:B5:F3:74:74:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9845687b-adc5-4703-901b-ed09092a7799.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.84.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:02:a9:df:71:e7:c5:be:75:05:4c:b1:ec:fd:64:cb:3c:dc:
         4c:d2:61:10:fd:7c:bc:f3:ad:05:9d:e5:2e:71:12:95:d9:2f:
         16:6a:07:0d:5e:b7:f0:cd:ad:d5:56:d2:f7:ee:11:0a:73:37:
         a6:c2:45:19:e1:f6:01:44:0d:0f:d9:37:f5:f8:0f:d2:50:19:
         f0:bc:e6:a4:92:9c:2f:45:09:b9:a2:2c:bf:5e:c8:d4:09:73:
         da:a3:e8:a9:fd:67:af:f6:3b:2c:39:6a:e3:13:96:32:96:56:
         59:68:1c:d8:82:2b:c9:bf:e6:34:7c:e6:b8:34:c1:2e:52:85:
         89:be:45:50:de:f8:30:65:d3:e9:55:8f:e5:d1:c1:ed:92:9e:
         a5:b1:5e:d9:43:80:88:aa:f1:80:d3:a1:48:bb:90:9f:5c:03:
         a7:95:13:6a:db:e2:5f:7e:d0:04:16:ac:c4:70:4f:55:d6:58:
         e2:f6:6c:98:e2:3d:51:98:23:3a:eb:91:71:4f:fa:3d:50:48:
         ca:a2:8d:dd:ed:5d:cb:68:cb:93:3c:cd:3e:d0:9e:07:5d:c7:
         0c:c1:1c:8b:ae:b1:65:16:bf:ef:f5:0f:f1:ab:91:6c:c1:c1:
         72:16:3b:f5:15:17:ee:78:ed:67:06:3c:be:1c:99:c2:bc:ee:
         52:de:e0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:18 2026 by rpki-client