Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27aefbe3-1d55-3f79-b56b-ce687b67dd08.roa
File:                     27aefbe3-1d55-3f79-b56b-ce687b67dd08.roa (raw, json)
Hash identifier:          HHlcLADnererHIAFNV5Fdb4Vy6pHUVoFC60oaBYyfvc=
Subject key identifier:   B2:2D:F9:FB:DA:A4:E7:00:CE:50:D4:E6:38:68:48:CD:6E:07:D6:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE1508092D06E518D127AE8C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27aefbe3-1d55-3f79-b56b-ce687b67dd08.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     397211
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:80:92:d0:6e:51:8d:12:7a:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=6a92049c-2ecc-4193-8f82-d510f7053483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:cc:f7:27:80:98:e2:b2:30:62:a5:9b:ef:e3:
                    5b:dd:1d:de:e5:9c:93:95:49:29:66:5e:9b:67:a8:
                    f3:3e:6e:4e:eb:79:d5:84:d4:9a:d1:04:ea:96:ab:
                    4a:14:0c:fa:16:ea:c5:f9:e5:91:cd:18:65:02:1c:
                    45:c1:47:80:13:97:d9:d4:56:70:e5:a4:12:94:a4:
                    32:25:84:23:21:c8:d3:23:b6:a4:91:3a:0c:e3:f0:
                    cc:82:c1:cf:37:26:6a:43:32:cd:e2:17:3d:98:8a:
                    2e:f0:59:60:46:4c:ce:84:f5:e7:31:d4:ea:f9:46:
                    a6:11:52:1e:3a:1d:ec:9c:62:87:34:39:13:c9:17:
                    81:75:35:59:11:56:b3:de:48:eb:cb:54:18:71:62:
                    58:68:f8:b0:fa:3e:26:c6:79:fe:05:1f:24:93:7c:
                    d8:45:93:3a:62:7f:94:16:3d:af:41:d7:cb:31:0f:
                    23:c7:11:55:4d:e4:26:92:8f:81:8c:60:e7:80:d0:
                    65:a6:68:0d:39:6c:cf:ce:56:b5:66:a0:87:05:88:
                    94:fc:36:1e:6f:3a:c7:af:c6:cc:85:e4:66:2f:a0:
                    95:0e:b7:50:57:a4:96:ee:f2:7d:01:a5:6d:67:88:
                    99:fe:9d:fc:f5:e8:64:dc:e7:2b:3f:29:21:fc:5e:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2D:F9:FB:DA:A4:E7:00:CE:50:D4:E6:38:68:48:CD:6E:07:D6:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27aefbe3-1d55-3f79-b56b-ce687b67dd08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:1e:5a:3c:9f:61:27:53:62:f1:d4:5b:3d:78:89:df:64:c4:
         70:8d:c6:83:cc:83:7e:2e:ac:42:d2:d6:20:e5:9e:e1:55:79:
         40:9e:75:85:c7:1d:65:dc:af:9a:1a:30:ad:00:ab:42:cc:b6:
         c1:a7:00:ae:b9:ef:68:95:95:0e:d3:fb:05:f8:1d:ee:1f:8a:
         8c:7e:88:5f:62:7f:06:f1:50:b7:cf:30:b3:b1:bd:06:c6:39:
         82:c5:20:2c:6d:22:68:38:3d:44:6d:2e:fa:59:d1:db:64:f8:
         a7:16:25:b2:a3:c8:9a:7b:23:47:2c:65:b6:74:0e:53:36:fd:
         9a:6c:5b:d9:60:31:f8:c6:84:26:0a:5d:b9:19:d9:6b:f7:9c:
         7a:33:62:fc:f0:bb:be:e4:18:ef:f1:b2:d9:ec:96:77:87:be:
         74:95:73:3d:63:7b:54:c5:5e:71:db:f6:21:c2:a2:ca:14:69:
         d1:03:9f:81:9c:23:7e:10:8b:b9:cc:dd:f5:56:b1:8a:70:e1:
         1f:b3:96:ca:2f:1c:c7:7b:75:1d:c1:9f:f6:08:a7:5e:75:5b:
         c9:af:4d:39:4c:7e:b8:46:4a:af:1e:89:55:d3:c2:b7:91:71:
         72:76:cf:95:23:84:87:12:7a:45:bb:be:26:9e:cf:9f:69:a9:
         08:a0:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:31:26 2026 by rpki-client