Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f5b4848-5cf1-3ab1-9106-e5ab2f167165.roa
File:                     0f5b4848-5cf1-3ab1-9106-e5ab2f167165.roa (raw, json)
Hash identifier:          2+HGvHaRDeXGcwi35uesIuUtYHzBLApvove7uzOU1TM=
Subject key identifier:   B4:58:1E:48:DB:54:01:33:19:BB:CF:5B:F6:2B:76:A8:1D:46:A5:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D703FF79C708638CDB7BD4C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f5b4848-5cf1-3ab1-9106-e5ab2f167165.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     396574
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f7:9c:70:86:38:cd:b7:bd:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=010fd2ef-a5af-4406-beff-77d69074c105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:96:a5:db:96:0e:74:c4:02:b6:7b:21:54:5f:
                    70:48:50:f1:c1:30:82:4c:e1:f7:b8:ef:2c:07:87:
                    c2:a3:bc:36:67:06:0a:b3:c8:85:1c:a8:28:b0:68:
                    b1:33:4c:d4:6b:11:28:a3:a1:53:2f:bc:2f:1e:8c:
                    d1:f8:d4:9b:a7:66:57:39:26:c6:12:19:cd:8d:23:
                    27:44:ea:f3:17:da:92:e4:5c:90:e0:3b:f0:51:74:
                    07:97:15:97:6d:86:c0:c8:64:50:f9:5e:0d:23:52:
                    4d:0e:ef:61:f0:d3:aa:11:b8:66:94:01:b3:61:06:
                    94:f6:d3:7c:d3:2c:b0:6c:cd:ca:90:8d:4c:58:d0:
                    c0:64:65:d7:62:64:9f:14:54:cf:f3:ab:64:8c:e1:
                    f9:f0:29:2a:a6:9a:7a:fb:5e:c2:ee:91:72:be:aa:
                    f8:ea:49:d2:66:4b:23:8d:e1:fa:76:7c:72:9b:15:
                    39:4b:ba:25:af:f5:ff:a0:fb:06:29:a3:72:b7:75:
                    85:81:e9:d7:73:f3:28:b8:62:4e:98:10:af:7f:86:
                    4a:38:ef:b7:79:e2:66:c9:9e:cc:43:2c:24:fc:67:
                    b7:92:a1:c3:67:f6:98:0a:dd:12:12:3a:77:27:c6:
                    ac:35:cd:21:54:b1:f1:44:b8:c8:de:a4:af:28:5f:
                    52:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:58:1E:48:DB:54:01:33:19:BB:CF:5B:F6:2B:76:A8:1D:46:A5:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0f5b4848-5cf1-3ab1-9106-e5ab2f167165.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:46:fe:77:8b:e5:e5:0c:92:c8:5f:fa:c2:50:8e:ad:98:19:
         da:fd:a5:40:6a:8f:4c:6b:3d:b9:d3:a0:75:23:aa:a1:8e:b3:
         e0:f7:ce:a0:aa:10:67:63:aa:45:f5:63:dc:4c:af:b5:96:94:
         61:38:63:0f:5d:01:1b:c0:00:fb:5f:62:70:ca:97:5f:39:7c:
         a5:b1:ea:46:e0:8c:6b:56:5c:9a:a0:56:d3:61:4d:b1:d9:6c:
         e2:d3:f3:eb:7e:e5:ad:ff:39:21:05:16:97:57:71:c3:5e:d1:
         64:79:a0:78:d9:4c:e7:b7:88:31:f8:19:ce:aa:2b:19:4a:6f:
         f6:c4:d2:80:18:ba:5a:c0:52:a8:1a:7e:78:ee:32:4c:e1:72:
         f7:1e:8a:0f:f3:5b:59:3c:76:0f:c3:4b:31:bf:fb:ba:67:68:
         6f:68:26:a5:a5:b8:14:3b:66:46:fb:f0:33:7a:6f:2b:18:90:
         4f:65:9c:8b:a3:60:79:08:d8:8c:fd:71:21:60:e6:2a:f2:ef:
         80:0c:07:e2:db:28:41:4e:4c:dd:bb:7c:7d:c6:03:b8:9e:bb:
         6d:bd:4c:ab:ff:7c:c8:62:f6:37:9a:5e:bf:71:2a:dd:ad:9b:
         5d:2a:b7:a6:84:bf:d6:7a:d8:cc:01:b2:37:15:0d:bf:9e:15:
         ed:5a:ec:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP/eccIY4zbe9TIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk
MDEwZmQyZWYtYTVhZi00NDA2LWJlZmYtNzdkNjkwNzRjMTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpal25YOdMQCtnshVF9wSFDxwTCCTOH3uO8s
B4fCo7w2ZwYKs8iFHKgosGixM0zUaxEoo6FTL7wvHozR+NSbp2ZXOSbGEhnNjSMn
ROrzF9qS5FyQ4DvwUXQHlxWXbYbAyGRQ+V4NI1JNDu9h8NOqEbhmlAGzYQaU9tN8
0yywbM3KkI1MWNDAZGXXYmSfFFTP86tkjOH58Ckqppp6+17C7pFyvqr46knSZksj
jeH6dnxymxU5S7olr/X/oPsGKaNyt3WFgenXc/MouGJOmBCvf4ZKOO+3eeJmyZ7M
Qywk/Ge3kqHDZ/aYCt0SEjp3J8asNc0hVLHxRLjI3qSvKF9SywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRYHkjbVAEzGbvPW/YrdqgdRqUuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGY1YjQ4NDgtNWNmMS0z
YWIxLTkxMDYtZTVhYjJmMTY3MTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqvMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJpG/neL5eUMkshf+sJQjq2YGdr9pUBqj0xrPbnToHUjqqGOs+D3zqCq
EGdjqkX1Y9xMr7WWlGE4Yw9dARvAAPtfYnDKl185fKWx6kbgjGtWXJqgVtNhTbHZ
bOLT8+t+5a3/OSEFFpdXccNe0WR5oHjZTOe3iDH4Gc6qKxlKb/bE0oAYulrAUqga
fnjuMkzhcvceig/zW1k8dg/DSzG/+7pnaG9oJqWluBQ7Zkb78DN6bysYkE9lnIuj
YHkI2Iz9cSFg5iry74AMB+LbKEFOTN27fH3GA7ieu229TKv/fMhi9jeaXr9xKt2t
m10qt6aEv9Z62MwBsjcVDb+eFe1a7L4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:45:59 2026 by rpki-client