Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/070836c2-1f39-3fbe-af5e-06336ca3d467.roa
File:                     070836c2-1f39-3fbe-af5e-06336ca3d467.roa (raw, json)
Hash identifier:          BDmb8cprTBLlgN+0SEl3Kqm0SkPr485YjSdzx1Svf78=
Subject key identifier:   E4:2F:93:4A:29:EA:C9:01:2A:FF:DB:70:F8:57:CE:0B:67:76:5C:D6
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584E0A087BB3CF911BF2ED668A80
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/070836c2-1f39-3fbe-af5e-06336ca3d467.roa
Signing time:             Tue 02 Jun 2026 15:03:41 +0000
ROA not before:           Tue 02 Jun 2026 15:03:41 +0000
ROA not after:            Mon 31 Aug 2026 15:03:41 +0000
asID:                     203113
IP address blocks:        192.120.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:08:7b:b3:cf:91:1b:f2:ed:66:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jun  2 15:03:41 2026 GMT
            Not After : Aug 31 15:03:41 2026 GMT
        Subject: CN=bce85db9-e2a7-4448-955c-87f3369d6966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:f3:ce:8e:f4:b1:15:64:c1:8d:9a:e8:2b:
                    71:e7:17:04:35:57:02:59:7c:73:91:18:76:c2:2c:
                    31:8e:62:0c:17:5e:4e:f0:63:ab:56:32:11:22:0b:
                    bf:e7:57:da:b2:2b:ad:b7:e4:9c:14:ad:39:72:fd:
                    11:51:9f:34:88:7d:cd:4b:a9:5e:55:1f:57:1f:48:
                    a7:46:04:40:b6:17:52:43:34:56:5b:e0:56:b9:6f:
                    90:8c:51:b9:d2:33:fb:6d:39:3b:cb:80:87:fc:43:
                    f7:6e:a0:9d:46:ae:ba:e4:5c:30:85:b1:3d:31:73:
                    30:c6:04:4d:e7:1f:74:fc:88:e5:8a:37:8f:91:f1:
                    ba:22:79:4c:62:be:c2:17:7d:ea:da:79:c0:52:97:
                    ed:57:36:03:62:c0:3a:9c:9a:75:a7:02:7d:be:b2:
                    f0:c9:75:d4:59:3c:2e:71:b0:e0:85:f7:57:f2:c9:
                    70:75:dd:4b:cc:0f:82:da:e2:6b:49:c1:57:f2:03:
                    39:ee:a1:77:ed:e2:83:c3:59:22:ad:f5:e6:ed:a6:
                    db:bd:01:ed:2e:1f:c9:23:54:f0:d3:a2:a3:32:7b:
                    63:c1:ab:db:57:8e:1b:14:f7:c1:cb:36:c3:5a:4c:
                    40:e5:dc:97:c9:9f:e8:3d:22:60:5a:f3:e9:ce:12:
                    3c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2F:93:4A:29:EA:C9:01:2A:FF:DB:70:F8:57:CE:0B:67:76:5C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/070836c2-1f39-3fbe-af5e-06336ca3d467.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.120.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:8f:29:50:c0:8d:a2:ac:21:03:36:33:2b:bc:3e:2c:78:6f:
         2c:30:ce:34:07:4c:f1:d5:83:20:00:9b:4e:7d:50:68:56:30:
         f5:45:44:74:bc:d2:71:48:59:f4:3a:cc:ab:1f:b2:f4:42:f2:
         79:90:92:92:e1:a1:22:97:c3:a7:07:2e:0a:00:ca:ba:11:8f:
         e3:48:56:3c:eb:8c:be:0b:6c:ad:e4:b1:23:27:b2:21:3c:dd:
         e2:7a:c6:f4:94:f3:33:05:71:18:fe:c7:35:36:f4:9b:f6:f0:
         3c:20:62:dc:1a:78:1a:72:e6:f4:86:1a:21:84:2a:b4:ee:ab:
         46:cc:e8:5e:3b:f1:31:15:ec:9b:0c:fa:48:f5:64:cb:86:b9:
         83:93:a0:54:a6:7d:4e:6f:a3:e8:52:85:e0:be:3a:ed:cb:91:
         9b:76:ee:4c:45:f6:06:10:f6:d0:c1:96:13:d0:3e:90:64:e9:
         c1:5c:14:ef:65:82:51:28:95:f3:13:33:7f:23:c9:58:31:31:
         0a:3d:25:d3:5e:5d:3a:a3:10:bc:06:27:e6:49:d2:da:12:9f:
         b1:88:fb:c2:3a:b8:21:63:c3:2c:2c:d6:0e:99:82:22:30:ee:
         a8:a5:8d:48:dc:6c:6b:dd:85:d6:aa:e7:c2:df:41:ef:cc:e5:
         55:f4:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:23:36 2026 by rpki-client