Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/e36c3cc9-6f43-3161-8cf2-91b946878b2c.roa
File:                     e36c3cc9-6f43-3161-8cf2-91b946878b2c.roa (raw, json)
Hash identifier:          qCF+cukaZnYUrzLMaZuOA/dnD/bFSO8ypwk7pWZU7S4=
Subject key identifier:   D9:CA:EF:11:1B:FD:69:CB:AF:1C:65:56:DB:19:66:50:76:CF:7C:87
Certificate issuer:       /CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
Certificate serial:       010D0C9F4328584EE38CA6FE8A264DCADAF31300
Authority key identifier: BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/e36c3cc9-6f43-3161-8cf2-91b946878b2c.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     62931
IP address blocks:        200.5.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:a6:fe:8a:26:4d:ca:da:f3:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f88cbb0b-9e19-4ef0-9c1c-062df0729d5a
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=918776c2-8196-42ac-b309-a8b4f77d19ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:8c:f9:8b:f8:5d:33:3e:4c:20:6a:88:82:
                    52:12:0e:ff:71:3d:31:07:e2:9e:52:d8:0a:1b:67:
                    64:03:20:af:34:7c:81:2e:97:93:51:04:f7:d4:89:
                    41:d8:b1:0d:64:7f:8d:56:49:c3:23:e3:39:1a:1b:
                    46:fc:21:51:00:95:9f:52:db:08:71:03:17:36:62:
                    52:99:16:05:4e:77:7a:55:7f:9a:ea:4e:29:6c:37:
                    1a:d0:66:8a:09:99:9e:2b:09:dd:9b:b3:7d:d5:14:
                    b7:a6:35:b3:4f:9f:7a:fa:f4:c7:3b:64:cc:55:61:
                    07:5d:46:91:1c:02:af:74:8c:da:ac:b0:54:be:e7:
                    99:c7:47:38:68:66:40:ee:d9:70:8f:f3:3f:3a:34:
                    91:37:49:d5:7c:52:d0:4d:c3:2a:d7:02:57:26:99:
                    3c:06:ca:dd:44:6d:34:43:bd:36:be:ec:b9:64:53:
                    0f:d0:41:93:15:35:0a:a1:bb:be:12:fc:17:51:87:
                    ef:25:07:ba:a6:b7:a1:03:21:91:ad:71:79:c7:58:
                    f4:1f:8c:05:25:c6:79:d8:1a:3f:ee:bf:1a:bf:61:
                    22:04:69:09:93:b7:95:6c:08:06:56:53:e3:e6:a5:
                    a6:f5:e7:92:47:e6:c0:d5:59:3d:1a:5f:48:52:58:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CA:EF:11:1B:FD:69:CB:AF:1C:65:56:DB:19:66:50:76:CF:7C:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/e36c3cc9-6f43-3161-8cf2-91b946878b2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.crl

            X509v3 Authority Key Identifier:
                keyid:BA:6B:6F:12:B8:DF:EC:57:4C:A6:E0:EB:06:1D:9C:3D:95:AA:CC:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f88cbb0b-9e19-4ef0-9c1c-062df0729d5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:7d:49:04:91:fd:ca:66:62:f4:a1:70:fc:04:1d:fd:6e:
         b7:23:28:3f:a9:f7:ac:2d:d2:82:64:d2:b7:81:75:bb:23:ea:
         63:ee:5e:14:4c:af:6f:93:2b:47:75:15:69:3b:02:3e:0f:f2:
         8a:c2:21:55:29:09:d6:b4:98:89:a3:83:ae:30:9c:46:89:ca:
         37:87:8e:b6:d5:94:a3:59:b0:be:e0:2f:21:61:c4:2f:b6:f2:
         78:8c:cf:47:23:5c:e0:80:88:49:3f:9f:07:53:e2:f3:90:d2:
         08:18:ac:24:7f:de:5a:98:3e:f4:e1:ba:0f:e5:b3:99:87:82:
         83:8c:0a:be:88:1f:59:8f:20:f4:17:16:5b:4e:27:ca:d2:31:
         16:09:17:27:09:6d:a5:02:80:a4:3d:27:13:9c:5a:ff:a7:27:
         2b:63:1f:28:00:71:ab:65:51:4b:b6:93:18:15:d0:89:ef:2b:
         ac:0d:20:e5:93:67:b0:8d:e9:fb:36:84:b1:26:2d:b4:11:f7:
         9e:90:ee:c7:99:be:f1:1e:5a:87:1a:47:4b:8d:57:ee:d8:5a:
         e0:d5:b7:bf:dc:83:15:48:a3:bd:f1:4a:af:1e:4e:4d:a8:02:
         67:c9:fd:b0:b7:59:c9:17:36:6f:c0:6b:08:f4:bc:a5:4f:8a:
         fa:2f:e9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:16:18 2026 by rpki-client