Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/88f50b68-e113-32d5-a451-470c4836caa1.roa
File:                     88f50b68-e113-32d5-a451-470c4836caa1.roa (raw, json)
Hash identifier:          J0Mnudb0V8VF98v/mM+EbXpWZjTqcfvhwT6IZOwUvfc=
Subject key identifier:   87:8D:66:B8:DD:0E:6A:32:9C:03:BE:3D:4C:83:20:9B:CE:82:B6:1E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA4451D7EEED65BC4450D9F00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/88f50b68-e113-32d5-a451-470c4836caa1.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     15169
IP address blocks:        192.178.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:1d:7e:ee:d6:5b:c4:45:0d:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=15115a68-a665-4b7f-a24b-289f39714bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:14:7d:dd:f4:e4:6c:5c:0d:01:bb:e3:e1:
                    ae:1c:e1:a3:b0:8b:5c:b4:ec:95:58:cf:06:9d:8e:
                    22:99:d3:a7:1d:8f:1c:7b:17:84:82:51:1c:a5:20:
                    e3:18:08:84:f2:09:22:c0:22:3e:29:24:31:bf:b2:
                    52:3f:20:37:f7:cb:57:c6:4e:00:7c:eb:4d:0a:2f:
                    a3:a2:a9:ed:27:43:03:38:b3:c3:a7:95:92:46:04:
                    1f:c4:f3:f9:47:29:e8:88:51:ff:33:7a:42:06:3d:
                    8c:9b:27:3a:15:9c:65:dd:6b:e0:11:9f:ab:2a:23:
                    67:2f:d0:e6:19:db:86:a2:d6:cb:d3:48:2d:d5:78:
                    28:cf:31:67:3a:af:b1:14:89:3a:4f:11:e2:18:96:
                    f2:fd:72:77:c4:b8:b5:6e:37:fe:ad:61:a7:ed:34:
                    bd:15:43:02:36:6c:4d:56:9d:af:ca:59:6c:bb:fa:
                    88:e0:48:ac:ec:76:99:43:f5:6b:df:d2:98:94:42:
                    6a:64:46:70:51:6c:ca:4d:1e:83:c1:8a:4a:5b:d3:
                    b7:45:ca:3f:72:5e:44:ec:dd:52:e6:90:e1:4a:d7:
                    bc:09:88:20:70:d0:d7:3f:45:75:ca:2d:7b:61:00:
                    64:22:21:8d:e8:64:77:cb:58:75:94:a9:e0:8a:59:
                    25:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8D:66:B8:DD:0E:6A:32:9C:03:BE:3D:4C:83:20:9B:CE:82:B6:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/88f50b68-e113-32d5-a451-470c4836caa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6a:98:a6:d1:eb:2d:e4:6c:d5:5a:93:6a:d2:db:a9:11:4b:
         9f:f2:6f:2e:92:a8:8c:05:5d:ea:bf:aa:68:4b:a0:eb:ac:6e:
         c5:4f:43:54:a8:ba:3c:28:6d:99:30:88:89:8c:0a:a4:62:a0:
         3d:79:8f:aa:1e:89:18:d8:d1:49:57:ac:81:ae:48:30:af:37:
         30:ec:9c:f3:d0:93:0f:eb:4c:1f:71:50:c3:22:de:b6:4a:1e:
         9c:6d:17:da:ae:39:03:84:9f:72:ff:c9:ea:f7:1b:81:50:35:
         fd:ae:34:2d:f5:ed:db:88:6f:2b:f2:6f:98:0e:4d:72:0e:90:
         58:ed:e1:5e:13:29:6f:1e:3e:33:c2:aa:f8:2f:c9:6c:08:6c:
         92:f3:b8:fe:18:38:dd:0c:e9:66:69:6f:9a:2c:e8:df:8c:54:
         79:d4:e7:9e:55:29:f4:b9:7d:87:79:e1:26:5d:fa:cf:c7:70:
         e5:55:ec:9b:9c:7b:13:39:c7:f5:d7:47:c0:d0:7f:a6:fa:cf:
         4b:13:9f:56:22:fd:7c:d5:8e:41:9f:c5:37:f0:e5:db:12:e1:
         6c:a0:e6:54:af:de:5d:8b:52:73:0d:d8:2f:e2:b6:9c:57:cb:
         95:e2:ff:86:1f:31:1a:59:fc:ed:93:d2:1d:37:89:93:b1:83:
         f0:dd:da:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:15:13 2026 by rpki-client