Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6a2fc7fe-d437-45d5-8b65-78ca169531c2/9aa9fa84-b678-30ab-b1d6-853cd6288e56.roa
File:                     9aa9fa84-b678-30ab-b1d6-853cd6288e56.roa (raw, json)
Hash identifier:          bIddKHWdxT6X/YWVZyokRxBiGCcNlCUxN2gdqfQPFiY=
Subject key identifier:   F4:36:14:61:5C:C9:6D:3B:CB:53:1A:CE:B8:2E:F9:FF:5E:8C:C4:93
Certificate issuer:       /CN=6a2fc7fe-d437-45d5-8b65-78ca169531c2
Certificate serial:       010D0C9F4328584F3239BBC1B08F878EE2A6D800
Authority key identifier: 24:32:E9:B2:C6:CF:73:0A:FF:1A:F0:76:12:3A:1E:1A:36:56:AC:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6a2fc7fe-d437-45d5-8b65-78ca169531c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6a2fc7fe-d437-45d5-8b65-78ca169531c2/9aa9fa84-b678-30ab-b1d6-853cd6288e56.roa
Signing time:             Wed 16 Sep 2026 17:22:12 +0000
ROA not before:           Wed 16 Sep 2026 17:22:12 +0000
ROA not after:            Tue 15 Dec 2026 18:22:12 +0000
asID:                     15305
IP address blocks:        192.156.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6a2fc7fe-d437-45d5-8b65-78ca169531c2/6a2fc7fe-d437-45d5-8b65-78ca169531c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6a2fc7fe-d437-45d5-8b65-78ca169531c2/6a2fc7fe-d437-45d5-8b65-78ca169531c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6a2fc7fe-d437-45d5-8b65-78ca169531c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:32:39:bb:c1:b0:8f:87:8e:e2:a6:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a2fc7fe-d437-45d5-8b65-78ca169531c2
        Validity
            Not Before: Sep 16 17:22:12 2026 GMT
            Not After : Dec 15 18:22:12 2026 GMT
        Subject: CN=aa24671c-2e46-4c05-bcc7-1e5a1d1f5059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:3c:63:cb:04:b0:7a:78:e6:47:85:ed:75:
                    ed:a5:73:55:a0:81:6c:68:3f:40:5b:c0:5a:d7:29:
                    6f:d3:19:2d:93:41:9e:11:40:8e:9e:30:b4:dd:9d:
                    c7:ca:17:bf:41:22:ba:b3:26:99:7a:6d:3b:27:3e:
                    a0:e9:69:1b:df:f1:09:fb:5e:cc:58:a8:8f:74:0c:
                    7e:b8:34:57:f8:c7:ed:fa:c6:12:d4:37:ee:63:ec:
                    7d:85:1f:16:d3:4a:9e:3f:43:39:c6:9a:08:0a:ab:
                    7e:ad:07:5e:87:85:58:f0:ee:67:b4:33:d2:8c:39:
                    56:f3:6b:4f:44:05:f1:ba:e0:2f:d7:6c:70:85:7c:
                    27:d3:01:2e:aa:63:ad:8f:ee:1a:4d:c5:28:ba:cf:
                    c2:5d:b1:c5:8c:06:b8:69:14:69:ad:e1:67:39:1a:
                    bd:ea:e8:c4:59:fc:c7:0c:cf:93:07:92:63:29:95:
                    74:47:d2:bb:d9:a6:3a:18:bb:b0:54:26:ae:3b:ab:
                    60:96:8e:12:56:7d:bf:31:77:69:7c:d2:1a:c2:d9:
                    0a:71:e2:0d:cb:be:20:e3:0f:6d:92:d0:27:80:c7:
                    2a:f8:25:57:b7:ac:8c:83:91:60:c9:69:31:ea:71:
                    48:e5:95:3e:6a:cd:a3:e5:ce:c5:6e:76:1b:c2:8f:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:36:14:61:5C:C9:6D:3B:CB:53:1A:CE:B8:2E:F9:FF:5E:8C:C4:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6a2fc7fe-d437-45d5-8b65-78ca169531c2/9aa9fa84-b678-30ab-b1d6-853cd6288e56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6a2fc7fe-d437-45d5-8b65-78ca169531c2/6a2fc7fe-d437-45d5-8b65-78ca169531c2.crl

            X509v3 Authority Key Identifier:
                keyid:24:32:E9:B2:C6:CF:73:0A:FF:1A:F0:76:12:3A:1E:1A:36:56:AC:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6a2fc7fe-d437-45d5-8b65-78ca169531c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.156.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:a8:08:4a:eb:a9:50:b0:c9:1b:06:d1:5b:96:32:4a:30:3d:
         7c:c3:63:d0:b7:a7:88:d1:97:2a:f4:fd:56:30:86:d2:2b:17:
         bb:39:f9:c4:78:e5:ac:6b:d1:2b:ce:9b:8c:68:82:85:74:a1:
         0c:05:0d:bb:f2:d5:ce:5c:a8:27:2f:e3:e8:c5:6c:16:a2:ad:
         07:a0:ca:ff:19:6c:91:1b:21:69:48:82:53:3e:f4:5c:3f:ad:
         77:56:15:94:b6:8d:cb:2d:71:cc:a1:b8:7e:45:26:e2:14:7c:
         76:4b:a7:0b:ea:f5:d4:7d:c0:60:a9:f5:36:c0:e9:ff:cd:92:
         c7:b9:4a:e3:27:15:5e:8f:cf:b0:94:e0:56:36:5a:4f:ee:dc:
         5e:00:a3:53:f1:f7:72:c8:84:09:89:aa:f4:69:61:f5:fc:44:
         4a:39:a3:e6:a2:70:70:6c:83:d3:24:d8:fd:5b:53:37:67:48:
         37:23:af:fc:12:82:cc:2d:4a:8d:93:7d:47:b0:72:bc:02:54:
         7d:1d:86:d3:03:a8:27:3f:40:ee:25:44:35:85:ed:22:90:0c:
         ac:39:b8:93:fb:0e:11:f1:a9:27:07:4a:80:7a:f3:4d:9e:4c:
         cd:9e:4a:19:a2:7b:c6:4f:94:e9:ed:b2:55:b9:05:25:1a:4d:
         26:21:a5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:02:11 2026 by rpki-client