Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0849b12b-73e9-3214-b092-effdafecf4d8.roa
File:                     0849b12b-73e9-3214-b092-effdafecf4d8.roa (raw, json)
Hash identifier:          GfWj8dHILFGWGnrynaJ/KsF86MzpZDmyir1jtdNJZFk=
Subject key identifier:   A5:A7:94:E5:2A:D5:27:51:58:1D:1B:F6:91:85:A5:78:CE:21:2B:14
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6AAAAD23164F749F79CEF000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0849b12b-73e9-3214-b092-effdafecf4d8.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     396608
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:ad:23:16:4f:74:9f:79:ce:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=94635ac9-e4af-4afc-b529-eef9778e4606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:47:0e:c3:41:3a:40:f7:68:54:a3:36:d2:6c:
                    e2:83:88:71:47:3d:94:56:46:65:b2:50:79:25:f8:
                    60:d3:8d:ca:cd:9e:bc:f4:69:b6:9f:26:c0:92:bd:
                    60:74:b4:a9:06:36:67:ac:e2:ec:91:ee:03:dc:6d:
                    c5:f1:bb:1d:ca:96:07:7d:71:05:8f:a3:4c:3d:90:
                    1e:99:69:1d:1a:6c:60:a5:e8:b2:4c:60:3c:a6:df:
                    ad:b8:00:8e:dc:b3:9d:be:ca:a7:85:7d:c7:47:0c:
                    63:2c:20:1a:fd:98:81:64:dd:1f:5b:bc:d5:4d:bb:
                    db:13:31:78:65:84:75:32:eb:ee:58:05:eb:b9:21:
                    53:e1:35:00:9f:39:9d:e9:98:b0:77:f6:33:8a:1b:
                    46:64:b5:ea:44:66:fc:8f:25:7e:fb:7a:0a:be:f9:
                    92:e6:c4:41:84:ab:b2:88:cd:e2:ac:c0:2f:21:06:
                    fa:96:33:7c:cc:51:f4:ce:76:46:86:11:5e:86:7a:
                    b3:2b:27:ea:0e:10:0d:70:a4:e1:cc:aa:8d:7b:17:
                    f5:d2:f8:f3:1c:ba:4c:52:52:bd:76:c3:e8:bf:2c:
                    23:38:58:8c:7c:c4:87:f0:cc:d6:da:c7:f3:a3:48:
                    98:e7:14:cd:b4:76:84:8a:74:db:dd:b7:e0:1e:e8:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A7:94:E5:2A:D5:27:51:58:1D:1B:F6:91:85:A5:78:CE:21:2B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0849b12b-73e9-3214-b092-effdafecf4d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:28:37:ba:01:9e:06:cd:18:3c:56:df:2d:5f:73:f4:df:35:
         32:de:31:29:b4:9c:fe:ea:b1:29:a9:fd:c9:95:c8:2d:7a:56:
         52:ef:50:d8:4b:d2:07:0d:b6:23:2c:45:91:8d:1e:d2:3a:0e:
         5f:1a:c0:ce:d7:cb:5f:36:b3:3a:57:06:a0:91:2c:c7:26:1e:
         98:bf:62:d7:14:e6:be:c9:96:dd:5f:7b:7f:70:ac:b0:01:ab:
         72:e8:ec:4c:46:05:c4:50:2f:21:bc:c4:8d:93:79:97:38:62:
         c5:c1:e1:69:1e:f1:5d:e8:02:60:34:ec:98:2a:6a:c5:69:a9:
         e5:6a:a8:37:e3:38:c6:d8:e8:22:c9:eb:f0:f6:d9:75:aa:cc:
         cc:52:65:51:35:44:c7:2a:43:9f:23:62:31:80:07:44:7e:94:
         7d:d6:7c:b2:aa:a0:77:06:44:bc:b7:a1:0c:3f:2e:c7:90:53:
         1f:3a:11:7b:75:d7:20:cd:1b:a4:52:6f:51:de:5f:87:ca:7c:
         c0:6d:dc:1c:7e:d9:69:f2:0b:e7:4f:f1:0c:67:70:d9:33:0f:
         79:1c:b8:35:fd:bf:3d:7d:5e:9c:a4:a4:79:46:8a:4a:40:c2:
         fc:08:b9:bc:c6:85:28:0a:16:42:f0:49:44:70:d3:68:02:84:
         9f:38:71:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:57 2026 by rpki-client