Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a696f02-8574-3c85-9cf8-0f26be7d025a.roa
File:                     4a696f02-8574-3c85-9cf8-0f26be7d025a.roa (raw, json)
Hash identifier:          ByPsqaPZiG1iaQ7Yvvf32Sa5RSTqlpOOBt3xklzs9dc=
Subject key identifier:   9D:C1:63:61:C7:BF:C5:32:96:96:6E:5F:F6:0B:A8:56:B6:03:98:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2D87E1747491CECEA8138A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a696f02-8574-3c85-9cf8-0f26be7d025a.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     396615
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:e1:74:74:91:ce:ce:a8:13:8a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=d37c8179-a053-4d3d-bbe8-4a9a1191ef19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ac:85:de:04:5f:9c:6f:93:5b:28:09:fc:7c:
                    60:12:fc:c4:6a:09:2c:c7:29:cc:96:38:bc:12:59:
                    df:1a:0a:7e:1d:35:68:78:58:e1:1c:0d:5a:29:b7:
                    19:c3:c2:17:50:59:fe:6b:d0:05:63:c9:f2:37:bd:
                    d5:9f:52:e3:7d:96:8f:31:a5:08:75:03:c6:c9:44:
                    af:24:1a:f9:7c:17:af:04:f0:4e:ff:2f:b4:1a:05:
                    7c:5f:4f:3f:02:ed:75:05:bc:43:a5:3b:f1:65:13:
                    26:3a:8d:57:9c:0c:28:03:38:cd:1d:ac:30:fe:ac:
                    c6:55:04:98:54:7e:a2:ea:5c:d6:26:be:02:b4:4d:
                    11:72:55:0c:e3:4e:60:25:0d:1f:0a:c7:1a:a5:62:
                    6a:ca:aa:6a:94:66:07:b4:bd:b5:38:ee:c1:5f:89:
                    ed:76:38:48:8b:b5:b3:04:bb:6f:5a:30:f9:72:97:
                    e9:3c:8f:f5:bd:a3:48:8d:1e:9c:57:1f:85:73:bb:
                    43:26:51:e2:5c:69:59:69:29:38:d2:b6:82:8e:76:
                    8a:b6:1d:a8:aa:a0:c5:9d:1a:17:f5:07:c9:f4:1f:
                    b0:38:82:3b:8a:47:78:90:a1:bf:37:42:aa:3d:95:
                    85:e7:f8:0d:1b:09:9d:a3:f6:30:a8:c2:60:f7:37:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C1:63:61:C7:BF:C5:32:96:96:6E:5F:F6:0B:A8:56:B6:03:98:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a696f02-8574-3c85-9cf8-0f26be7d025a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:f3:8f:af:49:c3:fd:12:78:3a:cb:ec:1d:93:36:50:18:dd:
         9c:8a:30:b1:62:9e:a2:c3:64:9b:f1:2a:8e:ab:0d:cc:60:b4:
         5c:7b:65:ae:07:99:bb:b4:97:4e:f9:0c:28:d9:f6:78:5a:8a:
         67:56:5f:fb:ae:8d:37:ff:7b:4d:42:7e:24:61:a8:fb:0c:b8:
         69:d8:5c:78:86:b2:86:54:06:2c:bf:b2:fe:62:7f:0e:79:57:
         fb:2f:0a:27:a6:9e:77:54:1b:2f:00:85:f9:d4:ba:d0:9b:8d:
         b6:74:a9:3d:26:0a:0e:ae:be:21:e9:d6:a8:55:c8:82:d2:66:
         c1:cb:ef:5c:33:5f:49:65:ba:76:3f:bf:e8:3c:ce:e9:23:20:
         94:6b:63:8c:8f:20:f5:9e:45:2e:74:42:b3:3f:8f:14:ce:7a:
         c5:cb:90:62:22:2d:11:74:a6:78:80:28:22:17:fb:bb:fc:ed:
         7c:52:26:27:f1:7a:18:24:d5:11:54:ee:17:1c:6f:ee:3d:72:
         84:47:6c:93:de:07:bd:27:51:9f:7b:14:8a:fc:e5:50:93:36:
         b2:90:f7:29:c0:ef:52:f8:c6:1f:48:e5:2c:c8:7f:79:84:3c:
         79:c4:d9:31:7f:0a:0a:d9:b4:b1:51:3e:ab:6b:1c:da:5c:70:
         8f:fa:df:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:46:04 2026 by rpki-client