Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b765f6cb-54b2-3f95-8b19-7173c152113d.roa
File:                     b765f6cb-54b2-3f95-8b19-7173c152113d.roa (raw, json)
Hash identifier:          hLArmPID3LuH9SP9xqie0oNMRiJ1FdIw+oWD7/AsYF8=
Subject key identifier:   1C:C1:AB:0A:37:E9:3F:44:C6:4B:E7:60:19:9B:A6:24:2E:BB:0F:3D
Certificate issuer:       /CN=a07401de-4b0a-4532-ac08-dba8b0588c48
Certificate serial:       010D0C9F4328584F5A333067C0CEEBF963D1C000
Authority key identifier: 2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b765f6cb-54b2-3f95-8b19-7173c152113d.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     54997
IP address blocks:        192.5.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:30:67:c0:ce:eb:f9:63:d1:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a07401de-4b0a-4532-ac08-dba8b0588c48
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=dcb37660-beb2-43aa-bd23-2cdb7d4800d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9a:ec:63:ba:63:a2:23:c1:49:b7:36:c9:49:
                    5e:e1:d8:bc:2f:60:55:5e:71:63:9d:84:9c:a8:46:
                    ba:0e:b6:37:d4:bc:72:68:5f:ae:f0:ce:d2:90:99:
                    20:e2:57:c2:12:b4:ed:f3:5f:82:0e:09:6c:66:49:
                    94:62:e5:65:40:94:9b:2b:63:72:13:05:ef:5b:c6:
                    af:db:e4:67:90:34:e9:78:c2:13:83:b9:7f:38:a5:
                    17:b9:e4:f2:6b:35:ba:fc:98:92:9b:8d:dd:92:90:
                    85:ba:fa:31:1d:a4:56:77:ed:c9:ab:d0:b4:ec:77:
                    d5:97:cd:39:9d:41:f6:dc:c1:2a:e9:39:7e:39:3e:
                    91:61:94:22:34:8d:7a:7b:69:ac:eb:24:cc:1f:f0:
                    59:ea:d2:c3:99:c2:1e:be:0e:bb:d9:75:03:f2:09:
                    ef:be:67:6e:b7:95:bf:d5:d5:6d:87:87:be:20:10:
                    31:64:94:d7:b2:8f:d4:83:05:22:18:4a:e8:68:09:
                    9b:f5:6f:8a:fb:db:ff:f1:6f:6c:4a:3d:04:fa:6f:
                    01:b2:e7:e3:7a:60:4c:f3:7a:8e:2a:44:01:a3:51:
                    85:3d:9a:75:8e:8b:de:f6:8c:7c:6d:da:2d:52:4b:
                    db:12:af:21:0c:1f:b8:be:93:61:7a:cf:ab:a3:48:
                    c8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C1:AB:0A:37:E9:3F:44:C6:4B:E7:60:19:9B:A6:24:2E:BB:0F:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/b765f6cb-54b2-3f95-8b19-7173c152113d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48/a07401de-4b0a-4532-ac08-dba8b0588c48.crl

            X509v3 Authority Key Identifier:
                keyid:2E:F3:B1:0B:CE:E4:C3:34:88:54:17:22:AC:69:76:A5:51:34:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a07401de-4b0a-4532-ac08-dba8b0588c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:47:fd:ed:10:05:cf:a4:7a:d0:14:53:e0:d8:87:84:64:cd:
         2a:ca:9e:99:63:39:8d:76:84:fe:50:5d:4c:3d:f1:6c:85:08:
         97:f4:9e:9b:df:a3:10:ea:9c:56:d5:25:72:15:0a:99:b3:26:
         15:ae:3c:72:85:6b:3f:77:f7:dd:e8:12:66:0c:61:54:11:a3:
         9b:94:8c:75:d5:e3:e3:f5:88:9c:4f:6d:07:be:27:93:31:09:
         f5:d3:06:1b:30:52:b8:b1:d4:e3:4c:c8:0f:79:ea:04:e7:6a:
         c6:75:ae:a3:b3:05:e2:33:4e:32:e7:c0:91:5c:d4:88:32:84:
         75:05:78:46:66:4d:f6:24:48:cc:0d:56:b0:37:dc:d6:67:b5:
         cb:60:55:06:e1:63:f4:5d:e6:08:e1:dd:a1:1c:b3:2b:d7:be:
         5b:b7:37:a9:60:91:5e:e3:d8:c5:13:86:73:2a:72:42:94:6f:
         40:7c:23:4c:90:2e:c2:d4:14:9f:4c:8e:9d:9f:36:fd:13:31:
         32:c4:8c:9c:72:c4:27:8a:50:81:b3:65:63:d1:b8:5a:24:4b:
         71:37:85:09:a6:f0:9e:7d:51:30:4f:6f:67:f9:96:e1:3c:a9:
         51:b7:d7:69:1e:99:00:e6:7a:f9:bf:14:5a:60:37:75:d6:e6:
         fb:d9:0b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:14:15 2026 by rpki-client