Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/92cd1ee3-3cbd-337c-8c02-2e35f3c5ef8d.roa
File:                     92cd1ee3-3cbd-337c-8c02-2e35f3c5ef8d.roa (raw, json)
Hash identifier:          f7+4k5YpxzWnAe8r6gK1qckGzarvU+CIe870jRPOHo4=
Subject key identifier:   C4:66:D3:F2:61:FA:25:8D:BC:D2:CE:2B:4E:3E:3C:74:02:BB:48:47
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584F331D1CF7DB6403A016AEF5C0
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/92cd1ee3-3cbd-337c-8c02-2e35f3c5ef8d.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     4543
IP address blocks:        170.149.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:1c:f7:db:64:03:a0:16:ae:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=6058af5d-f08a-4de3-bf40-d3c24a0808df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:55:e8:15:8d:74:87:cb:12:3e:9e:11:84:03:
                    dc:5b:26:ea:8c:71:ba:43:76:cc:6e:52:7b:f9:06:
                    d5:60:e8:93:20:dc:f0:df:6b:51:0f:9f:b6:96:d3:
                    00:e4:3a:ed:32:c6:70:6c:29:2f:6d:94:52:4a:24:
                    bb:16:8e:3d:ab:be:aa:b5:05:7f:4e:23:58:46:30:
                    9c:b7:0d:ec:a6:07:53:5c:ee:c6:a1:26:84:80:6a:
                    df:c3:12:6c:93:3d:20:e4:a0:ed:d0:e8:fb:ae:a6:
                    f0:4f:df:b8:f6:01:76:3f:47:f0:bd:7c:43:3f:3d:
                    cc:d0:cf:23:08:be:06:3f:35:57:da:d6:9d:54:55:
                    b2:41:3c:82:81:7c:83:49:0d:53:3d:93:17:e8:26:
                    8b:e6:ff:bd:80:d5:7f:25:59:7a:fd:f7:ef:d1:6b:
                    19:be:f9:77:bb:3b:61:07:7b:b9:97:bf:3c:b9:f5:
                    01:4a:60:13:3e:47:81:03:10:91:50:93:9a:97:1a:
                    3d:8b:da:4e:83:4e:82:d8:ac:f7:6d:3f:c6:cd:46:
                    c8:b3:a6:f8:e5:7f:f0:a5:5f:59:0d:b1:11:8f:ce:
                    c9:d1:b9:14:0f:01:93:8d:39:44:0d:e5:36:b4:eb:
                    c0:dc:ca:3d:12:ee:83:47:a9:f2:36:54:24:9f:df:
                    16:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:66:D3:F2:61:FA:25:8D:BC:D2:CE:2B:4E:3E:3C:74:02:BB:48:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/92cd1ee3-3cbd-337c-8c02-2e35f3c5ef8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:b3:1a:13:5e:de:36:3e:58:a8:b8:b7:19:7f:9e:a0:5c:
         81:5e:0d:12:9b:09:89:9b:79:96:71:da:ed:ab:56:08:0a:76:
         e9:0f:8d:cb:11:55:30:2b:bb:a4:c5:4f:3d:01:52:82:83:99:
         f7:39:74:71:4a:34:b4:87:04:7e:6d:0c:db:04:f1:77:5a:e2:
         77:7e:95:f2:af:41:68:85:f2:fc:23:ba:17:cc:2e:1f:6d:34:
         8a:04:79:15:f7:ba:84:ff:63:0e:53:8a:58:15:ef:8c:00:ca:
         7e:61:57:ff:93:a2:70:5f:68:4b:29:39:e2:6b:49:94:a5:b2:
         f9:70:2c:d6:a7:c2:1b:25:29:37:88:76:ff:93:a3:30:6d:5f:
         35:68:21:6f:ab:38:79:57:4f:a4:23:04:77:bf:c7:8c:2c:18:
         0f:fd:cb:73:81:86:8c:af:1a:06:41:ae:c4:c7:5e:43:c7:ba:
         4f:36:f7:f1:ec:f6:d9:b4:f0:ab:bb:5b:d0:5f:12:36:bf:5e:
         44:6e:fa:17:df:2a:35:79:f5:de:95:01:85:e3:74:33:1e:81:
         d0:6c:76:52:95:60:ff:00:68:24:35:7c:29:3f:c6:d0:8d:2e:
         af:e7:1e:b4:3b:22:c3:e0:68:39:4e:e8:61:a6:ba:b0:d8:2a:
         f0:de:b3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:31:14 2026 by rpki-client