Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95e13bec-d3b3-3c70-819b-6965a17c5b87.roa
File:                     95e13bec-d3b3-3c70-819b-6965a17c5b87.roa (raw, json)
Hash identifier:          9B/tQI1mu3X0/jukbxf4/9TWeKbLatE/W403zt0buD4=
Subject key identifier:   74:C6:7B:CB:9E:DC:05:AF:D3:4B:AB:30:20:03:1F:25:3B:19:62:D2
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA4451E1FF384A6265028BD80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95e13bec-d3b3-3c70-819b-6965a17c5b87.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     15169
IP address blocks:        192.178.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:1e:1f:f3:84:a6:26:50:28:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=37c54ce3-b46a-4fe0-a86d-e7f71ff3ecb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:d1:ca:22:d2:1e:bc:da:94:23:cf:e9:44:
                    91:49:66:38:60:e2:a7:11:25:9b:d6:e2:f1:35:f0:
                    58:5e:c8:fc:bc:a1:ea:1d:ec:80:aa:e7:15:21:b4:
                    60:9d:52:a5:02:5c:53:55:34:6d:8d:35:08:ad:54:
                    32:5c:0c:cc:92:c7:9c:25:2b:e1:09:37:8f:14:bf:
                    38:7f:8d:9a:b1:5f:27:1a:cb:6b:41:f8:54:f2:91:
                    75:6f:d6:c0:1b:49:25:c4:7c:12:c4:18:61:fa:59:
                    73:7f:40:53:54:7c:36:f1:f9:3e:5b:31:9e:7a:fb:
                    d1:8b:f3:b6:4a:88:8b:4c:13:b3:a5:8f:4c:dc:ab:
                    71:7f:36:59:29:ad:1f:41:1b:b3:64:30:7e:87:40:
                    e1:a3:b2:a6:c1:1f:f9:8e:b6:6c:13:ef:dd:74:ad:
                    f7:b2:69:3c:0d:73:a5:59:9e:c2:0f:64:8e:30:6e:
                    4f:05:0c:94:da:9c:12:62:e3:1b:94:70:1c:35:ba:
                    23:a9:e6:82:3e:cc:a2:1c:6a:a1:a0:90:73:06:84:
                    ce:65:6a:a3:32:ee:d2:9d:b7:62:86:ad:ad:36:d5:
                    a5:8c:37:fb:c9:43:34:dc:56:9e:97:63:33:3f:71:
                    6e:08:e5:92:4a:58:f0:1a:55:e2:81:4a:f9:d8:a8:
                    93:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:C6:7B:CB:9E:DC:05:AF:D3:4B:AB:30:20:03:1F:25:3B:19:62:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/95e13bec-d3b3-3c70-819b-6965a17c5b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.178.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5c:f5:e6:00:ba:03:09:df:0e:e5:7b:92:0a:7d:57:83:4f:
         2b:7c:9b:d1:7b:8b:6d:13:07:da:78:dd:39:95:bb:6b:d0:cc:
         4b:79:a8:90:22:eb:1c:33:f5:93:6b:d0:fa:f0:fa:86:ae:81:
         1f:c6:10:8e:aa:cd:9e:c9:47:7e:da:ef:3b:a2:a5:d9:cf:62:
         7c:38:b0:fd:cc:90:67:fc:24:d4:c4:25:89:a3:db:b8:b7:b3:
         9b:28:f6:07:3a:35:47:de:d4:20:2d:88:99:59:62:81:39:62:
         92:a8:b7:bf:74:8d:77:3e:d1:6d:30:12:3f:43:b7:fe:cb:92:
         65:be:67:d5:ec:6f:da:f8:86:87:26:99:6f:91:7d:fc:f0:24:
         c4:95:49:21:29:1e:d9:2d:41:bf:7a:da:5e:63:22:9b:9e:bc:
         ee:c3:60:b1:cb:a2:19:2b:b2:ef:54:87:65:bc:de:6f:cd:69:
         89:44:55:03:22:b2:55:cd:98:8f:86:00:38:39:85:b9:71:42:
         37:a7:d6:8e:49:91:86:a9:f8:56:a6:66:0a:a8:aa:18:ca:f3:
         f6:d9:c3:4f:ff:47:46:ff:1c:33:53:c9:82:ae:9b:95:d6:50:
         50:e8:e0:19:4d:39:eb:7f:a4:c4:6f:e6:ec:1d:1d:d0:fd:d8:
         20:2f:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:12 2026 by rpki-client