Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/934da524-4660-3a88-8460-1c35a63999e3.roa
File:                     934da524-4660-3a88-8460-1c35a63999e3.roa (raw, json)
Hash identifier:          KhchtEf/V0oOl9RKxP8GH7/J8/rv2f3wzZqyprpqWeA=
Subject key identifier:   B8:4C:31:56:7D:47:5D:A4:32:95:8E:07:44:FB:F0:4B:F8:3E:AB:61
Certificate issuer:       /CN=f3281a82-6c17-4658-80f7-ee1327b4779a
Certificate serial:       010D0C9F4328584E210EF9712FDF5661784F4B00
Authority key identifier: 9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/934da524-4660-3a88-8460-1c35a63999e3.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     22418
IP address blocks:        192.157.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f9:71:2f:df:56:61:78:4f:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3281a82-6c17-4658-80f7-ee1327b4779a
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=7df2e341-e993-4132-994e-6de9afafceb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:c4:9d:49:95:e7:e4:24:77:67:ae:93:d5:
                    51:56:8a:cb:d9:f8:47:91:0c:68:e3:e2:86:5f:d8:
                    fb:61:93:31:a9:db:e2:23:48:e6:85:bb:2c:14:1a:
                    75:69:30:b6:6a:b9:d1:c8:8f:ec:e5:19:8b:63:bb:
                    b3:57:bb:f7:8f:b2:e3:b2:48:49:b8:7c:62:de:6d:
                    92:02:03:81:98:52:f9:a2:ab:32:67:83:60:be:27:
                    a7:b4:9f:72:e5:9d:e0:11:01:8d:55:ac:5f:ad:c4:
                    a4:02:cf:82:94:d9:ea:42:4b:ea:ee:25:9b:b4:76:
                    7a:63:1a:38:66:68:8f:f0:3a:5a:60:70:35:ac:26:
                    78:48:3d:df:7f:ae:40:4e:f9:be:25:49:df:48:d0:
                    7c:bd:53:39:de:8c:32:74:a6:02:fd:3b:af:28:b3:
                    4d:ba:c1:07:8a:e5:55:96:5c:fd:61:51:9c:96:35:
                    73:f4:26:4e:31:29:a1:c0:a1:a7:30:ab:4b:ec:67:
                    65:db:1c:4c:3d:95:db:b7:4e:45:3a:9e:37:4e:ca:
                    89:92:6f:b3:04:48:77:1d:f8:2c:d8:a2:7c:94:f0:
                    d2:a7:6a:a1:52:f0:b4:dc:66:07:54:b9:e9:1d:7a:
                    55:4e:85:b3:33:7a:cc:d4:c2:87:de:5e:19:08:56:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4C:31:56:7D:47:5D:A4:32:95:8E:07:44:FB:F0:4B:F8:3E:AB:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/934da524-4660-3a88-8460-1c35a63999e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a/f3281a82-6c17-4658-80f7-ee1327b4779a.crl

            X509v3 Authority Key Identifier:
                keyid:9C:00:C9:04:FC:22:91:1C:43:F4:C7:03:B8:E3:17:BE:F5:6B:D5:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f3281a82-6c17-4658-80f7-ee1327b4779a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c0:4a:0e:71:bb:01:91:f6:7e:07:4e:00:32:20:bf:bc:a8:
         d1:34:62:bb:a0:d8:f2:25:49:8f:ab:aa:08:08:31:ac:ca:6a:
         1d:bb:7b:5e:39:49:62:13:dd:83:62:ad:dc:7f:cf:d3:ea:1c:
         0c:e6:83:2f:3b:46:e3:69:fc:62:52:6b:51:35:34:67:36:8e:
         29:9a:98:54:30:7b:64:88:9d:6a:ec:60:23:15:55:4c:38:10:
         f2:00:ec:33:35:f7:cf:b2:db:6b:c4:d5:d9:82:fe:f7:f1:f0:
         d4:8d:b4:c8:ff:4a:9d:5a:49:a3:d4:4a:75:de:f8:8f:44:10:
         3a:8c:c6:2c:b5:51:44:99:9b:8a:de:73:32:e2:f4:27:77:83:
         d7:a6:87:50:1b:60:b4:c6:61:a3:0e:15:83:95:14:b8:16:06:
         ea:42:ee:a9:92:08:e9:ed:58:b8:ef:ab:5e:18:6d:f7:82:58:
         64:8a:5c:88:9c:2c:af:73:33:8e:f7:f8:79:0c:15:fa:24:5f:
         6a:a6:af:83:a4:77:ed:19:60:05:3a:e1:98:5b:50:12:91:a8:
         8f:55:b7:df:25:fa:3a:77:1e:c6:5c:97:4d:37:a6:15:8f:4e:
         62:6e:50:8d:8a:bf:8c:3c:de:6e:06:60:50:a0:0e:11:a2:19:
         3e:a5:58:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:21:30 2026 by rpki-client