Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa
File:                     718aca4e-36f9-388f-afe0-123ff07786c7.roa (raw, json)
Hash identifier:          CbaeNPn71TkzA+2GbG8BskD25l+TUp87VQhdjtDCSQc=
Subject key identifier:   75:D7:46:93:A2:35:F6:E5:17:00:68:E9:82:5F:64:0B:4D:C2:48:7B
Certificate issuer:       /CN=4a669737-4387-4a5c-829a-5cf431c6469e
Certificate serial:       010D0C9F4328584D667A526D92815D984683BB80
Authority key identifier: C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     393453
IP address blocks:        192.138.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:52:6d:92:81:5d:98:46:83:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a669737-4387-4a5c-829a-5cf431c6469e
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=7d0a999e-8b7d-4d72-9662-d1397b05dc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:fa:a0:ee:a1:b7:84:17:53:36:c5:68:95:
                    f2:e8:24:f5:47:34:8e:56:8b:a7:0a:7a:28:ec:3a:
                    6c:d0:3b:4f:76:81:f2:05:6f:4d:20:47:80:39:f8:
                    e2:64:c1:99:30:7a:0b:42:e0:f7:73:2b:38:2c:75:
                    ca:62:37:08:3c:41:99:91:65:b3:70:87:2c:f4:39:
                    03:c8:d1:9e:5b:6b:da:1f:ae:e8:d6:dc:4b:d9:a5:
                    b5:bb:b2:cb:b0:3a:8a:24:e4:34:a9:45:28:b7:3f:
                    64:cc:14:bd:e6:af:e2:02:c7:79:8a:c4:ac:83:79:
                    bf:b9:8c:e9:8e:b6:af:72:4f:ec:06:06:25:5f:41:
                    ef:0d:31:1f:87:8a:fe:9e:b1:ae:a7:a7:55:97:eb:
                    59:83:f0:2d:4f:df:cc:93:8e:3b:63:6f:9e:83:40:
                    a4:fd:c3:cd:b8:58:71:de:73:be:48:b1:85:fb:0a:
                    2b:13:ba:6d:96:bb:d9:66:87:3d:8f:4b:48:cc:cf:
                    92:61:2c:05:d1:64:1d:52:0c:74:fe:62:2c:ed:b0:
                    b9:1d:6c:58:27:e7:27:10:81:5d:42:db:af:37:cd:
                    06:cc:6f:6e:c7:56:20:cc:47:89:4d:33:f0:df:3e:
                    74:80:64:89:25:80:af:d6:77:d2:33:a9:79:1c:33:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D7:46:93:A2:35:F6:E5:17:00:68:E9:82:5F:64:0B:4D:C2:48:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/718aca4e-36f9-388f-afe0-123ff07786c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e/4a669737-4387-4a5c-829a-5cf431c6469e.crl

            X509v3 Authority Key Identifier:
                keyid:C1:21:1C:FB:B7:7C:B7:93:D5:14:E8:B8:8A:5E:0A:96:25:C2:A8:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4a669737-4387-4a5c-829a-5cf431c6469e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:84:72:b5:99:4a:35:ee:7f:ea:2a:0b:d2:66:63:c8:0a:e4:
         c2:ab:c8:dd:62:c1:d1:86:7f:e3:0d:b5:9a:ec:a6:32:0f:51:
         54:db:f0:2f:96:e4:42:86:dc:e4:01:47:a0:62:17:d8:8b:af:
         d8:84:b4:7c:24:55:ff:31:85:2e:d5:b5:80:29:40:2b:d7:64:
         50:48:22:59:d8:7e:6b:bf:60:41:ee:de:23:d3:8e:f3:11:c8:
         0b:ca:47:77:41:bb:fd:5d:7e:44:73:b4:d4:7c:8f:45:ac:0b:
         e4:ec:23:8b:9b:69:f2:1f:ac:f8:88:ce:b6:b9:22:db:42:08:
         11:95:16:1f:17:c5:1d:7a:29:24:89:ac:13:da:e1:ea:a1:2d:
         fe:cf:1c:e0:35:09:27:3f:44:b7:55:1f:f9:a9:75:20:cd:2e:
         55:c8:0d:f7:3c:66:dc:43:70:c7:fb:29:1c:8b:ad:ff:a8:4c:
         91:26:09:9f:c2:82:38:b0:06:ce:7b:7e:cd:4e:12:fd:6f:0d:
         53:f6:6e:48:da:1a:22:d9:d9:3f:a1:c5:63:80:db:73:f8:b4:
         0b:57:a9:20:32:81:70:dc:b5:43:d7:d2:7b:82:d7:3f:4e:e8:
         99:08:e5:ca:fa:b4:63:37:6e:e7:f9:d2:53:c3:77:d7:43:10:
         fb:4e:7d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:43:33 2026 by rpki-client