Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/3d949512-7b04-3f33-90eb-ef865d41a75f.roa
File:                     3d949512-7b04-3f33-90eb-ef865d41a75f.roa (raw, json)
Hash identifier:          3jZx9iNJKFIDq6v/WFVRmPNy6flG4VZKVYwp8mUv9iM=
Subject key identifier:   4B:87:37:68:70:02:81:74:0D:28:90:00:4D:CE:D7:9D:5E:C3:F1:65
Certificate issuer:       /CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
Certificate serial:       010D0C9F4328584CE8F77B2E46BB50F5CF707A60
Authority key identifier: D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/3d949512-7b04-3f33-90eb-ef865d41a75f.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     46539
IP address blocks:        192.187.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:7b:2e:46:bb:50:f5:cf:70:7a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e179ce28-23c7-45e1-9b0e-d90358c94f57
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=695e30ae-ac14-4334-a95e-1532ee4f6c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:29:28:33:ba:13:bd:55:17:e7:e2:c3:b2:cc:
                    0e:f7:ff:9c:e3:a6:91:0e:d2:0c:c4:75:08:14:27:
                    bc:cb:1c:e4:3d:a2:7f:2e:35:7f:d6:86:44:64:2b:
                    25:67:5e:d5:f1:33:e2:52:e4:cc:93:75:30:6d:27:
                    55:c6:05:9a:af:b3:33:8f:c7:90:cf:40:36:cb:49:
                    5f:61:88:60:09:be:e8:06:d2:51:ef:df:c4:af:9c:
                    c1:3d:83:56:ea:65:5c:d9:cb:81:79:34:16:18:78:
                    83:c7:98:7f:54:ca:42:73:6b:0f:d4:a1:32:84:82:
                    16:19:b1:73:e6:82:c3:22:53:36:0d:c0:57:5a:91:
                    cb:47:08:5f:27:82:ff:26:fa:41:85:23:88:dc:06:
                    95:06:e5:9e:c3:48:40:ae:28:5e:ff:3e:c4:ed:64:
                    40:21:da:0a:b3:8a:f3:76:fc:07:2d:0f:d7:8a:d1:
                    dd:fb:a4:df:3e:f2:ca:c8:ef:0c:d0:8a:b8:3e:1e:
                    72:0a:ea:74:24:0c:2d:7d:4c:20:66:98:0d:50:b4:
                    72:64:67:3a:91:10:da:b4:bc:7d:ce:bf:3f:0c:84:
                    ca:5c:98:e4:3d:92:a7:11:07:16:64:f2:4b:f4:9e:
                    44:ab:13:ed:d5:30:b2:b8:8a:0b:a9:23:5a:59:a9:
                    bb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:87:37:68:70:02:81:74:0D:28:90:00:4D:CE:D7:9D:5E:C3:F1:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/3d949512-7b04-3f33-90eb-ef865d41a75f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57/e179ce28-23c7-45e1-9b0e-d90358c94f57.crl

            X509v3 Authority Key Identifier:
                keyid:D8:05:C7:2E:26:3F:DA:B8:F5:43:EF:F9:51:95:84:40:1C:9E:F4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e179ce28-23c7-45e1-9b0e-d90358c94f57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.187.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a6:e7:20:ff:f6:01:32:95:09:32:4e:7d:8d:ff:71:0f:6c:
         16:93:bb:82:f1:c0:ef:2b:56:f4:dc:47:36:9f:8c:da:06:b6:
         7e:90:b7:f5:6f:f7:89:0d:cb:31:57:3a:16:09:30:b5:f6:61:
         6f:54:51:2e:0c:56:db:9b:60:4a:99:cf:9f:c6:32:d3:c1:21:
         f4:51:ba:08:73:e5:49:e4:1d:a6:5d:be:55:56:9a:ea:16:b4:
         07:80:d1:e5:c1:4a:5b:b8:95:07:e2:55:ee:85:d3:1e:5b:33:
         27:df:2a:39:9e:22:40:a6:c8:74:01:04:fb:fc:b6:01:5d:0a:
         88:f9:1d:af:be:8f:83:ae:52:fe:bf:4d:10:5b:47:3b:c4:ed:
         19:6a:fe:59:aa:2d:d0:a6:9a:86:2d:c5:55:f3:47:7f:24:30:
         77:02:ad:5a:79:26:3a:71:dd:41:05:ec:f5:14:04:45:63:12:
         cf:03:a0:2f:fb:ae:e9:50:03:d5:36:61:3b:7b:bf:ab:c5:ca:
         72:fc:8c:14:8b:ad:23:3b:ae:8a:7f:06:a3:ea:cf:89:02:fb:
         87:4f:ab:cf:bf:e0:5a:6b:f3:cc:de:20:1e:b1:24:7e:60:1d:
         6d:42:aa:66:f4:4f:ad:8b:60:52:ab:09:cf:77:15:d1:02:35:
         78:13:01:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:21 2026 by rpki-client