Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/e78bd739-80ba-3bbd-8cb7-a364b867df6f.roa
File:                     e78bd739-80ba-3bbd-8cb7-a364b867df6f.roa (raw, json)
Hash identifier:          AwEtjT3nFCuW35A7hs/aF48sYzLr+ntGnREzz+OTiXI=
Subject key identifier:   08:F1:6D:A0:D3:C8:EE:F6:B6:7F:43:A6:41:1D:D8:E5:4F:DF:C4:AF
Certificate issuer:       /CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
Certificate serial:       010D0C9F4328584D7B6A7D44A667B424AA449E00
Authority key identifier: D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/e78bd739-80ba-3bbd-8cb7-a364b867df6f.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     20205
IP address blocks:        192.211.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:7d:44:a6:67:b4:24:aa:44:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed45e97-90c2-483d-a68b-2dd2c83266a2
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=e205a502-2321-4540-acba-260cffaef9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:95:b0:c2:f3:82:7a:12:a9:e9:80:82:6c:
                    25:18:bc:78:20:ae:b2:3f:26:8f:9e:39:0d:5b:c9:
                    c8:18:03:8f:fa:a8:50:b8:58:47:73:52:d4:51:4a:
                    da:2a:f9:f9:83:cd:14:c2:55:99:b6:03:90:62:a6:
                    7e:b5:94:76:2a:10:b9:be:86:f4:33:fe:f6:e9:dd:
                    55:42:27:8e:7c:1c:c5:82:66:27:f3:b0:f0:48:8b:
                    c7:38:23:d1:4f:f7:6a:b2:c8:21:e5:15:20:61:fe:
                    6d:ce:08:02:89:00:b1:b6:b1:41:fd:4d:97:9d:e6:
                    74:01:8f:d0:ac:1a:c0:c2:c8:f4:bc:b1:70:72:3f:
                    77:5e:d4:de:52:ec:45:ea:63:55:ff:22:a2:08:20:
                    9a:37:8b:2c:44:26:d7:d7:20:97:79:0c:f9:09:e5:
                    bd:6f:b1:f8:78:a0:91:84:78:b8:40:a5:4a:18:32:
                    78:94:20:a2:54:a6:2f:bd:57:9e:d5:ff:44:e5:3e:
                    cb:8f:38:96:86:fb:9a:0f:58:32:3d:89:de:46:a7:
                    b3:f2:f9:07:f6:a7:43:ab:d3:3f:5e:d4:c3:47:38:
                    33:ab:40:f6:fe:db:76:7d:b4:a9:2a:ce:22:21:10:
                    b0:12:cb:92:a4:0a:63:97:5e:86:2c:d0:0a:61:ed:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F1:6D:A0:D3:C8:EE:F6:B6:7F:43:A6:41:1D:D8:E5:4F:DF:C4:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/e78bd739-80ba-3bbd-8cb7-a364b867df6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2/9ed45e97-90c2-483d-a68b-2dd2c83266a2.crl

            X509v3 Authority Key Identifier:
                keyid:D8:D6:BF:37:B5:B6:4E:D4:1D:79:55:CD:93:7E:A6:5E:00:89:9F:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ed45e97-90c2-483d-a68b-2dd2c83266a2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.211.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ae:80:b2:1c:7b:9f:dd:8b:b4:2d:ac:e8:15:55:1f:7f:a4:
         34:c2:4c:55:f6:73:30:e7:d5:4d:d4:f9:a5:80:18:5c:97:4a:
         1e:0f:44:54:f1:ac:a3:90:93:6f:15:f7:90:20:5f:da:33:24:
         12:b5:cd:32:68:a5:e9:85:33:c5:20:75:da:96:43:a2:c6:4d:
         3f:22:60:54:5d:db:43:1b:a0:63:0a:c0:70:49:eb:73:57:14:
         ac:88:24:08:e8:a2:fc:5e:72:9f:09:5f:43:f1:02:41:48:c8:
         8d:1e:16:99:0a:c9:26:96:cc:cd:8d:3a:07:81:bb:35:ca:f6:
         f5:44:5e:9e:26:7f:7c:31:06:f1:71:dc:7d:d8:61:df:fd:d5:
         2c:b0:3f:e3:55:6b:57:5b:cd:96:38:a2:4b:c8:78:86:58:0b:
         9c:fb:43:ae:57:3f:75:2c:14:52:fb:cb:e3:c3:b4:5a:ed:70:
         97:69:d5:b1:f9:26:d6:f0:b9:d3:79:49:1f:26:c3:68:fd:c3:
         0f:53:53:09:23:c5:06:17:a1:53:5c:37:1b:a9:45:24:f5:0b:
         f1:8c:36:4c:c2:c4:09:c6:25:9e:34:6e:dc:f6:a1:d1:52:60:
         cf:ce:d3:be:3d:bc:5f:34:c6:8a:a5:ee:83:2b:32:50:50:9d:
         e6:01:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:40:45 2026 by rpki-client