Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
File:                     817df46c-74b9-3aae-93ab-75637ef18bee.roa (raw, json)
Hash identifier:          U6QppeEoCRQHqc9OZGb5wwP8X8/8oBL1Y/88FsH25ok=
Subject key identifier:   32:57:1C:E0:42:19:DF:E5:62:08:30:F4:5F:C0:77:A1:02:CF:9B:7B
Certificate issuer:       /CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
Certificate serial:       010D0C9F4328584F480D3F793FCDEF7F9C5B4980
Authority key identifier: 02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     11068
IP address blocks:        192.200.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:3f:79:3f:cd:ef:7f:9c:5b:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=5413953d-de02-4114-87cb-ea1589fa70da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:11:d7:31:31:7d:c9:84:c5:70:96:26:52:ab:
                    6c:8d:ce:1d:a9:10:8d:2f:77:ad:12:01:d5:ff:f5:
                    29:bb:a6:73:7f:5b:e8:9b:b6:82:5e:b9:6e:eb:a2:
                    2b:06:c8:7a:63:87:49:3a:5c:ef:39:d6:76:83:ab:
                    7d:2f:4f:5e:03:63:af:f1:20:ee:87:fe:34:26:a5:
                    f7:e7:09:cc:bd:0e:c3:1c:c1:69:63:05:d1:12:f7:
                    06:58:c0:e2:11:a2:e3:79:e9:9a:64:7c:50:6e:91:
                    f8:a0:05:a5:50:15:5b:74:46:c0:d3:1e:99:64:58:
                    e3:23:99:5c:64:af:97:31:3b:09:9d:4d:37:65:8c:
                    89:32:b3:dd:f3:5e:38:00:8b:7a:33:e5:03:8c:a3:
                    10:6f:0f:4f:11:4a:00:c2:44:70:a8:0d:d9:74:e6:
                    0b:c4:91:02:ca:31:f4:f3:e9:e7:96:8b:a6:f6:74:
                    2f:2b:69:04:59:3a:d1:72:df:8a:9a:ae:73:41:bd:
                    e9:3f:e5:f6:6a:70:6e:f8:a0:e3:7d:a0:92:a5:9c:
                    5a:93:ef:64:92:78:e9:c3:eb:3e:bd:e4:b7:19:b9:
                    24:33:72:c6:6b:b7:a0:fa:95:19:81:f0:2e:88:a7:
                    eb:73:14:d9:49:af:35:1e:de:24:bd:71:d7:57:83:
                    83:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:57:1C:E0:42:19:DF:E5:62:08:30:F4:5F:C0:77:A1:02:CF:9B:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/817df46c-74b9-3aae-93ab-75637ef18bee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.crl

            X509v3 Authority Key Identifier:
                keyid:02:12:9E:33:36:D4:F0:86:D2:34:08:2D:A1:0D:B2:98:F9:26:A3:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ee4ef5b-87d8-46ac-a25d-5f85fbd3cc9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b6:98:90:58:bd:e8:92:52:df:4b:ac:fc:2b:27:31:d6:d3:
         ca:c6:dd:fa:ac:82:85:e9:2b:69:70:81:a2:b4:86:9c:4b:d0:
         97:9b:f4:96:fc:1f:d3:14:37:99:f0:f8:77:4e:5e:27:46:ed:
         43:01:a5:a0:d1:33:07:ea:ef:b0:6b:7f:6f:ea:4b:16:36:87:
         45:c5:28:5b:a2:b5:ef:f6:cf:de:08:d4:c8:e5:61:9a:34:ec:
         02:73:fd:a0:c4:ea:80:44:a4:89:6d:42:b2:97:eb:46:41:89:
         ff:a1:42:55:21:5b:b5:cd:c2:36:96:7e:58:20:f2:f5:e2:5f:
         97:64:2e:ed:71:96:09:ab:92:49:b1:ff:33:2c:e7:1d:9d:29:
         1b:f4:a9:8a:66:ee:09:5b:cd:01:22:0a:49:eb:ca:0b:3d:ac:
         09:b9:8b:08:67:0e:aa:55:8c:e6:40:5d:8b:9d:64:89:c6:d6:
         0c:23:af:07:43:b8:89:a5:79:06:86:08:72:42:a9:32:79:52:
         33:ba:22:1a:f6:3b:2d:32:0f:be:65:6f:d2:92:9b:0a:d0:6c:
         9e:03:70:7a:a2:e4:f1:9b:93:b7:41:cd:18:d2:05:5a:43:3d:
         8d:c7:82:3c:6b:2a:2f:61:fe:57:77:f0:d7:d2:48:ee:c2:46:
         6a:e5:ca:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:08:50 2026 by rpki-client