Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/51dfeb6a-e37d-3634-b803-89b32356ac03.roa
File:                     51dfeb6a-e37d-3634-b803-89b32356ac03.roa (raw, json)
Hash identifier:          K5ZRPLDIDcRNXHFUSsTS352rnlm+8d8bWn9KLujBsdw=
Subject key identifier:   DB:52:84:73:14:5A:68:89:07:58:57:E0:75:4E:43:7C:9D:49:7B:8E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA4451F21F8BBC4CB4FC73600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/51dfeb6a-e37d-3634-b803-89b32356ac03.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     15169
IP address blocks:        192.178.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:1f:21:f8:bb:c4:cb:4f:c7:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=6ec0bc3c-b4f8-4708-a224-5830f4e6caaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:62:0e:f3:5a:79:cb:cd:c0:5f:8d:3f:d7:
                    f5:62:ac:85:c9:91:90:df:34:6e:07:0c:fd:77:cd:
                    ba:7c:70:68:0a:5f:07:75:7c:ef:2c:e9:55:23:1d:
                    d9:25:d2:21:93:af:4b:04:6e:17:85:a0:9f:d8:6f:
                    3a:65:e1:20:ca:11:cb:44:a8:5e:c4:2c:8d:d1:ee:
                    69:95:51:20:d3:e6:a5:6f:93:36:77:3e:a6:62:4c:
                    24:2b:58:4b:82:05:97:60:65:4c:31:7f:da:cd:d6:
                    64:94:24:62:eb:e7:89:16:0d:4e:9e:f1:8a:4f:ef:
                    97:fb:fa:a7:ab:4b:83:65:d5:46:28:fb:02:70:98:
                    5c:88:9e:3a:91:be:93:5c:f9:aa:52:1d:ae:df:b2:
                    99:5a:3d:ad:ef:b3:4b:ce:8e:4b:f5:09:9b:71:28:
                    08:a9:08:ca:00:69:03:ea:d1:6e:44:b2:13:5d:48:
                    ac:b3:75:7d:5c:56:2a:3f:ef:c4:7e:96:55:e1:7c:
                    e1:4a:09:a0:5a:0e:99:fa:de:7f:86:1b:c8:94:34:
                    97:b8:7f:0f:b2:b5:7a:5f:fc:cc:17:93:75:d8:5f:
                    bc:4b:6c:40:56:9f:04:e6:ea:1b:db:fa:09:74:14:
                    df:bb:dc:a6:90:e8:62:f1:37:92:b0:0a:53:cc:3d:
                    06:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:52:84:73:14:5A:68:89:07:58:57:E0:75:4E:43:7C:9D:49:7B:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/51dfeb6a-e37d-3634-b803-89b32356ac03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:7d:a4:09:51:f8:b7:b4:3d:29:8e:dc:1c:d2:c7:ff:24:b8:
         f4:a8:84:a8:f4:19:e9:d5:4e:b3:9e:b8:dd:19:ff:37:a4:03:
         2a:bb:ef:1a:a7:08:63:a9:0f:75:d6:5f:7b:11:af:73:e1:31:
         80:66:71:62:3d:d3:f9:f4:af:e9:a1:55:ca:37:20:cf:e9:43:
         7f:b3:bd:ca:d6:97:e6:59:cd:a8:36:52:be:ca:f9:08:30:c4:
         64:c8:cb:b9:1b:54:7b:77:18:3f:86:a0:b9:8c:cf:53:4c:e4:
         00:ba:92:58:43:ac:1d:a0:77:c3:f7:50:1e:f1:c7:f1:ff:c1:
         89:aa:67:a6:fc:2b:dc:af:f6:75:52:ce:7e:0a:0f:85:dd:44:
         8d:4e:ef:ff:3d:4a:9e:fd:4c:ed:27:f6:4a:fb:9b:dc:01:7f:
         bd:85:3e:7a:88:46:09:5e:40:58:88:b3:36:cf:e9:92:95:94:
         0c:b7:41:b0:40:4a:35:b1:5c:e3:f2:86:ef:38:d3:56:c6:8d:
         60:29:46:e2:54:42:e3:20:cd:39:e3:33:c7:7c:ab:ef:0a:91:
         45:de:77:90:5a:90:43:ae:15:91:f0:b3:06:9d:aa:1b:d9:e9:
         88:f8:aa:1c:19:c8:c8:94:f6:01:c9:29:fa:09:17:15:9d:5f:
         b1:6d:e1:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6kRR8h+LvEy0/HNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDcyNzIxMDAxMVoXDTI2MTAyNTIxMDAxMVowLzEtMCsGA1UEAxMk
NmVjMGJjM2MtYjRmOC00NzA4LWEyMjQtNTgzMGY0ZTZjYWFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojFiDvNaecvNwF+NP9f1YqyFyZGQ3zRuBwz9
d826fHBoCl8HdXzvLOlVIx3ZJdIhk69LBG4XhaCf2G86ZeEgyhHLRKhexCyN0e5p
lVEg0+alb5M2dz6mYkwkK1hLggWXYGVMMX/azdZklCRi6+eJFg1OnvGKT++X+/qn
q0uDZdVGKPsCcJhciJ46kb6TXPmqUh2u37KZWj2t77NLzo5L9QmbcSgIqQjKAGkD
6tFuRLITXUiss3V9XFYqP+/EfpZV4XzhSgmgWg6Z+t5/hhvIlDSXuH8PsrV6X/zM
F5N12F+8S2xAVp8E5uob2/oJdBTfu9ymkOhi8TeSsApTzD0GvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNtShHMUWmiJB1hX4HVOQ3ydSXuOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNTFkZmViNmEtZTM3ZC0z
NjM0LWI4MDMtODliMzIzNTZhYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLK6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKB9pAlR+Le0PSmO3BzSx/8kuPSohKj0GenVTrOeuN0Z/zekAyq77xqn
CGOpD3XWX3sRr3PhMYBmcWI90/n0r+mhVco3IM/pQ3+zvcrWl+ZZzag2Ur7K+Qgw
xGTIy7kbVHt3GD+GoLmMz1NM5AC6klhDrB2gd8P3UB7xx/H/wYmqZ6b8K9yv9nVS
zn4KD4XdRI1O7/89Sp79TO0n9kr7m9wBf72FPnqIRgleQFiIszbP6ZKVlAy3QbBA
SjWxXOPyhu8401bGjWApRuJUQuMgzTnjM8d8q+8KkUXed5BakEOuFZHwswadqhvZ
6Yj4qhwZyMiU9gHJKfoJFxWdX7Ft4SQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:09:12 2026 by rpki-client