Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9346b901-7954-429d-9b0b-0a5f9c2aff46/348a9c6d-406e-31f1-a4a5-ccc82a3179f7.roa
File:                     348a9c6d-406e-31f1-a4a5-ccc82a3179f7.roa (raw, json)
Hash identifier:          ZwMbr1jOTFBRVfaj+eujac4vXsjFLwxmbqmpl6j0oLE=
Subject key identifier:   FC:43:7C:F4:89:73:2B:07:8C:B7:2F:B0:4F:E6:C8:68:8D:2C:E9:1B
Certificate issuer:       /CN=9346b901-7954-429d-9b0b-0a5f9c2aff46
Certificate serial:       010D0C9F4328584D73CAC56BA8785D6F46C7DF80
Authority key identifier: A2:63:39:ED:AF:88:70:E3:D8:DA:CA:8F:04:25:DB:16:10:96:8B:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9346b901-7954-429d-9b0b-0a5f9c2aff46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9346b901-7954-429d-9b0b-0a5f9c2aff46/348a9c6d-406e-31f1-a4a5-ccc82a3179f7.roa
Signing time:             Thu 09 Apr 2026 19:28:06 +0000
ROA not before:           Thu 09 Apr 2026 19:28:06 +0000
ROA not after:            Wed 08 Jul 2026 19:28:06 +0000
asID:                     393337
IP address blocks:        192.52.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9346b901-7954-429d-9b0b-0a5f9c2aff46/9346b901-7954-429d-9b0b-0a5f9c2aff46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9346b901-7954-429d-9b0b-0a5f9c2aff46/9346b901-7954-429d-9b0b-0a5f9c2aff46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9346b901-7954-429d-9b0b-0a5f9c2aff46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:ca:c5:6b:a8:78:5d:6f:46:c7:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9346b901-7954-429d-9b0b-0a5f9c2aff46
        Validity
            Not Before: Apr  9 19:28:06 2026 GMT
            Not After : Jul  8 19:28:06 2026 GMT
        Subject: CN=9906bcb1-6e4a-4e54-83f6-7ddd1f933bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a5:7d:34:95:46:fc:6c:86:82:73:ed:f0:d4:
                    f3:5e:ba:ce:0c:fc:c6:8d:8a:3b:11:85:55:64:b0:
                    4c:fb:11:f1:a3:b8:a4:1f:e9:34:b1:a1:74:8e:c4:
                    ea:68:2c:eb:7b:f8:f1:fe:48:5a:00:4a:93:19:2d:
                    51:db:b1:d6:46:9b:8a:5f:91:52:fe:3e:ea:eb:24:
                    e5:61:65:f7:75:55:c1:69:1a:ba:64:7a:ec:1a:62:
                    b5:86:69:65:73:f0:c2:bd:d8:71:90:10:30:7d:4c:
                    11:f9:4f:9f:e0:ca:e2:9d:1d:f0:76:88:e7:41:df:
                    02:7a:a4:e7:94:52:45:d5:1c:f6:fa:bf:72:5e:8a:
                    0f:44:2d:f6:af:13:db:86:73:4d:00:5a:a4:34:eb:
                    47:18:01:0f:e1:2c:6b:0c:bb:dc:35:a3:b4:46:75:
                    83:60:97:6e:c6:47:6e:11:ef:28:6f:e3:ff:d6:25:
                    57:a0:c3:cd:55:99:62:d7:09:dc:8d:15:25:4c:ad:
                    95:98:ea:84:57:c6:9d:ad:1f:a2:4b:02:5f:a1:b8:
                    f2:40:87:39:2c:13:ad:99:b3:e3:87:67:b1:80:1c:
                    49:d6:f8:21:f0:f4:54:1f:fb:1f:6f:a4:14:cc:7f:
                    45:a9:b5:a9:36:13:e6:98:98:66:a4:a2:12:f7:6b:
                    ba:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:43:7C:F4:89:73:2B:07:8C:B7:2F:B0:4F:E6:C8:68:8D:2C:E9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9346b901-7954-429d-9b0b-0a5f9c2aff46/348a9c6d-406e-31f1-a4a5-ccc82a3179f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9346b901-7954-429d-9b0b-0a5f9c2aff46/9346b901-7954-429d-9b0b-0a5f9c2aff46.crl

            X509v3 Authority Key Identifier:
                keyid:A2:63:39:ED:AF:88:70:E3:D8:DA:CA:8F:04:25:DB:16:10:96:8B:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9346b901-7954-429d-9b0b-0a5f9c2aff46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:44:91:1b:bf:73:bc:0f:46:9e:7d:69:01:4d:6a:21:98:
         61:cf:5f:2b:48:c6:e6:b2:cc:4e:6c:fd:d0:29:7b:1e:09:31:
         db:9e:2a:77:70:48:84:67:c4:31:79:80:81:de:05:54:e7:06:
         55:24:2e:26:22:e9:3a:1c:60:10:ed:1b:c5:8e:76:a1:59:7c:
         98:b7:18:68:97:7d:5f:66:0a:a9:f0:01:6a:3f:a0:d4:d6:4f:
         12:6f:3f:85:7c:5b:2f:77:c9:f5:39:7f:3e:e3:a9:d1:98:89:
         0c:bd:89:41:14:f5:12:f2:4f:2f:92:77:e1:df:8a:19:a9:c8:
         79:47:2f:24:54:68:d0:1c:ec:c1:c6:84:5e:36:18:67:52:79:
         f6:5f:54:36:1e:e0:3c:d0:4a:9c:95:95:70:f8:0a:37:7c:a6:
         67:83:90:f0:81:81:91:1a:06:75:04:92:d2:03:0b:6b:8b:f5:
         e5:09:49:f0:49:dc:62:6e:a1:d0:02:22:6e:03:49:f0:dc:2d:
         9e:19:d9:ec:82:94:50:2f:5a:b5:59:62:2d:26:06:98:20:25:
         70:79:fb:28:b1:36:c8:ed:6e:d2:be:a5:af:3b:14:cc:9e:4c:
         20:e5:c3:40:c1:ea:5d:b8:9b:fa:ae:b4:99:80:24:08:02:17:
         a0:cc:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:11:24 2026 by rpki-client