Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/424b1e54-2d09-3644-a069-61f76e443c39.roa
File:                     424b1e54-2d09-3644-a069-61f76e443c39.roa (raw, json)
Hash identifier:          XJIKvF93MdRslSG+tr3RqJUcC7G9H6pBT5oB9zWu1Oo=
Subject key identifier:   11:F6:C2:A4:8D:C0:1A:31:08:4F:EF:2E:E6:07:81:B2:53:9A:83:7F
Certificate issuer:       /CN=1d251b68-9cb8-49ab-91e3-66420fc719b5
Certificate serial:       010D0C9F4328584F71ED9345FAB10065816B60C0
Authority key identifier: 90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/424b1e54-2d09-3644-a069-61f76e443c39.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        192.146.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:93:45:fa:b1:00:65:81:6b:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d251b68-9cb8-49ab-91e3-66420fc719b5
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=8e9e7873-7747-49ca-9d4f-8fb0d2f677f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:06:ce:b6:89:bd:38:43:10:21:46:c5:ff:
                    6d:79:71:26:08:90:5c:19:b5:c2:db:75:fb:a0:b6:
                    a7:b8:d7:a3:9b:69:8c:3a:cd:10:e0:1a:af:ae:59:
                    06:e1:2c:b4:7c:94:16:ac:3d:97:cd:4b:37:ae:8d:
                    5b:e9:74:b0:22:bf:17:b9:59:9d:bc:a7:b5:88:36:
                    4c:df:62:38:67:d1:10:54:fc:7e:8d:01:5f:4b:53:
                    60:6b:0c:c8:59:94:2b:ef:d7:26:2a:d4:b9:d3:df:
                    e7:e1:29:ce:0b:ab:c2:fe:f6:22:8e:8a:3f:53:65:
                    d9:03:14:8b:ba:18:20:f5:c1:bc:cb:60:cf:d3:56:
                    93:76:de:6c:27:1f:d8:8e:1b:fd:0c:3d:f6:a5:60:
                    af:b3:84:2c:50:81:02:49:7d:f6:0a:d4:3e:1d:61:
                    3a:d9:b2:c5:81:8f:23:a2:05:d4:34:af:77:69:5c:
                    bd:93:d0:9d:00:d3:3c:86:15:ca:c5:e7:6b:38:ad:
                    98:2f:d1:e1:4d:69:06:0f:06:bc:5d:4f:5f:3c:31:
                    c7:ff:9d:c3:99:a7:2a:67:8f:c1:2c:d1:6a:5c:e3:
                    35:9a:42:d1:d1:95:b3:62:50:f6:f2:45:a2:1a:f2:
                    78:fe:5c:64:77:71:91:1f:61:7d:e6:04:ad:cc:0a:
                    05:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F6:C2:A4:8D:C0:1A:31:08:4F:EF:2E:E6:07:81:B2:53:9A:83:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/424b1e54-2d09-3644-a069-61f76e443c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.crl

            X509v3 Authority Key Identifier:
                keyid:90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.146.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ff:2a:f7:f5:4e:7a:20:f0:16:ce:8f:25:50:dd:33:cd:e5:
         59:09:28:11:19:d7:2c:34:2f:4b:ff:0c:5b:74:f3:06:e9:e8:
         67:5c:47:97:78:51:5d:68:9f:74:3a:80:79:f4:bb:cc:4b:e1:
         8c:98:25:39:b1:e3:4b:6d:2e:9a:a8:e1:39:54:08:9a:16:e7:
         3e:b2:19:52:b9:04:52:83:c5:03:6d:01:5d:34:7d:59:03:68:
         f1:26:ad:3a:19:a2:2e:fc:a0:70:bc:97:2f:5e:2d:e9:a8:f1:
         fd:67:47:40:e9:c1:3b:42:2a:50:84:6b:10:93:65:fb:92:17:
         cb:cf:e5:e9:53:66:b4:ef:7b:5a:74:c7:fb:08:aa:b5:ad:5a:
         ec:49:58:88:46:72:da:c8:08:b3:f5:b9:33:9d:b3:47:e1:df:
         bc:ec:56:56:9f:4c:8e:b9:b9:d5:fb:24:f9:2c:65:ee:0b:d2:
         e1:f0:75:2a:5c:89:dd:80:98:3c:2c:13:39:72:01:ef:8a:8f:
         46:be:68:99:3a:f5:46:97:ee:62:70:41:93:b5:41:89:e4:56:
         08:79:08:3b:f3:37:a6:e8:07:5e:da:a0:05:70:9b:47:0c:36:
         c3:ac:e3:11:f7:cf:f0:82:6f:0f:da:d4:f5:f6:41:a4:ca:2b:
         e4:8d:fa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:03:16 2026 by rpki-client