Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/391826eb-1618-31ed-834d-dc6460f5fa81.roa
File:                     391826eb-1618-31ed-834d-dc6460f5fa81.roa (raw, json)
Hash identifier:          beP+zzgSDJ3/x87mQJd1P6fxHIWCg6U8KZl5zc0CIA4=
Subject key identifier:   73:29:61:6E:78:E5:5B:AB:2F:9C:1B:A1:2A:4A:4F:E3:8B:57:3F:AD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F3E480091D4AD56EF3ABD5680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/391826eb-1618-31ed-834d-dc6460f5fa81.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     396600
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:48:00:91:d4:ad:56:ef:3a:bd:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=696ff3f7-0d92-427a-b3a5-89bd5d981e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:02:54:cd:1f:49:5a:53:a3:63:b4:3f:af:
                    8a:6a:ab:55:fd:c0:fd:25:dd:91:72:7b:50:45:99:
                    10:0e:a6:47:58:30:03:27:d1:fe:4c:3e:e5:47:b6:
                    01:08:e6:3a:05:e5:0b:b4:72:19:5e:f3:4b:2d:e2:
                    e5:48:55:17:23:2e:da:e4:56:28:2b:9a:67:7f:a7:
                    d4:0f:06:42:93:22:d5:98:bf:5b:10:8d:d1:db:b5:
                    b7:fe:41:07:ff:bd:38:df:f3:b4:a9:a9:fd:8d:68:
                    40:68:e8:c8:1f:a3:8c:81:b7:59:2c:89:bf:9c:fc:
                    60:ea:04:3a:96:ce:df:1c:54:c1:57:bc:76:09:cc:
                    e2:49:83:c7:51:67:92:c4:bb:44:0c:c9:39:aa:ff:
                    77:c3:6e:37:22:61:d1:e0:4a:1c:b1:69:d7:69:27:
                    75:0e:21:a6:01:f5:77:e2:f2:ca:0b:72:99:06:62:
                    59:84:1d:67:80:61:fe:68:c0:02:96:da:f9:96:61:
                    b6:5d:d1:45:bd:75:c7:87:ec:e5:4e:41:12:24:21:
                    ad:4e:bf:1e:e1:3f:f3:f1:5b:d1:ee:4c:b0:53:cc:
                    a2:0d:99:85:5a:e7:47:58:42:83:d2:85:8a:7e:a1:
                    d0:39:c7:82:df:5c:ae:03:00:cd:65:f8:36:1a:20:
                    81:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:29:61:6E:78:E5:5B:AB:2F:9C:1B:A1:2A:4A:4F:E3:8B:57:3F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/391826eb-1618-31ed-834d-dc6460f5fa81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:8b:8d:cd:56:7f:83:06:05:7b:1d:7f:d0:bd:eb:3b:61:e3:
         e2:d6:88:5f:0a:98:cc:96:d8:87:a7:fd:43:06:bc:1b:24:ab:
         e7:09:47:98:f1:2a:fb:bb:7f:d3:e7:df:bd:bb:6d:da:f2:a1:
         ff:c1:4d:be:8c:5d:c6:d0:59:c6:c4:cc:e8:de:13:9e:dc:fb:
         70:b4:20:5f:10:b7:da:62:87:98:86:61:0e:9f:0b:3e:fc:ba:
         cc:c3:4e:31:d5:b0:a4:df:e6:56:56:88:3e:a0:61:5a:67:8f:
         2b:6e:76:fc:8b:4f:c9:76:e7:a3:0f:3b:7e:a2:82:ec:c8:61:
         8c:1b:4b:8e:29:39:10:df:20:44:9e:c5:49:76:25:57:e8:08:
         b4:66:a1:07:77:b7:31:6c:a9:4d:68:d2:98:3e:77:d8:32:b7:
         71:2f:42:c7:21:2b:28:61:d1:bb:56:e1:91:38:44:27:00:3e:
         b0:50:35:75:c6:9a:94:ec:3e:89:06:19:f2:fc:39:05:50:b1:
         c2:63:da:92:0a:d8:35:b6:4c:41:47:87:64:61:5c:7c:da:29:
         ea:fb:a4:29:3b:4a:d0:c2:c3:c0:c5:7f:be:69:6b:8d:43:d7:
         fc:48:63:6c:ea:16:ef:d5:6f:39:11:bc:eb:a0:5a:28:98:af:
         f4:ff:80:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:25:52 2026 by rpki-client