Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58482a60-6601-3a5a-a326-f3df35095d5d.roa
File:                     58482a60-6601-3a5a-a326-f3df35095d5d.roa (raw, json)
Hash identifier:          ty2jYtmnJyYCEUSN0JU4z0wcpN+LNbzXdkzCwZrAJ94=
Subject key identifier:   4A:EC:11:22:32:10:3A:9D:93:E0:BD:F3:3F:3D:4C:D5:CC:C6:60:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE537ED4AE0388B612373C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58482a60-6601-3a5a-a326-f3df35095d5d.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396588
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:37:ed:4a:e0:38:8b:61:23:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=4ab92915-286e-42f1-be13-9aa147cf662e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:9c:83:c4:9c:02:de:bb:73:84:30:18:67:ba:
                    53:fa:97:a9:86:b6:a5:ae:5f:bf:36:01:e8:7c:f0:
                    57:d0:2d:a6:a0:2e:02:d7:96:9f:61:14:5a:72:54:
                    95:b2:4a:c4:a9:72:29:46:32:65:5b:ad:3e:6b:48:
                    61:e2:58:b1:ca:7c:1e:85:d4:b4:8d:63:50:bb:0e:
                    bc:6c:73:de:00:45:6a:65:8f:4f:7b:a7:da:55:77:
                    aa:a3:28:17:f7:99:ae:50:f8:8b:93:e9:c4:72:cb:
                    a6:43:61:17:18:d7:d1:a1:7c:20:69:bb:31:92:7f:
                    b6:7a:7a:20:d2:29:2d:a1:2a:33:a1:3a:6e:f9:77:
                    ac:b2:f9:e3:8d:40:09:f2:6a:d5:0a:9d:3d:00:60:
                    c2:52:78:63:32:52:c6:ec:88:2c:ff:3f:0f:ab:ef:
                    01:fb:1d:28:b5:27:a8:48:e0:ea:a4:ab:b2:c4:5d:
                    ae:be:eb:b7:0f:e9:9d:91:1f:b3:fb:75:4e:ce:ef:
                    53:f3:82:82:94:ac:3a:88:39:4b:af:64:be:a3:2a:
                    a9:24:6e:14:fc:9f:1e:ee:69:66:c7:06:3d:f4:a3:
                    33:10:94:ba:bd:0b:47:65:86:67:d1:2d:b1:59:41:
                    75:48:d9:02:b9:4a:28:79:93:73:97:6a:4a:b9:09:
                    63:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:EC:11:22:32:10:3A:9D:93:E0:BD:F3:3F:3D:4C:D5:CC:C6:60:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/58482a60-6601-3a5a-a326-f3df35095d5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8a:ee:76:75:a5:39:85:2e:8d:3a:fb:9d:0d:0c:a0:76:5d:
         59:a3:68:f8:fd:07:10:0a:0e:f6:98:cf:7f:5c:77:92:a9:17:
         73:e1:72:8a:f7:e3:2e:c4:cb:7e:23:07:5c:a2:2a:c4:96:59:
         7e:77:a0:28:13:2f:13:a5:de:51:7e:45:f5:72:87:77:8d:07:
         fc:89:4b:cb:79:2e:9f:b4:11:a4:29:9c:07:33:b3:97:6c:b4:
         6e:1e:2b:5f:96:7c:3c:81:c7:29:72:43:af:25:9f:c8:10:04:
         f5:e4:ff:83:af:93:21:db:e3:cc:f7:0c:da:39:63:70:ef:3c:
         10:bd:37:83:0b:2a:de:d0:45:17:2d:ae:79:7c:c4:4c:a6:f2:
         e8:20:33:b5:ea:86:51:2a:71:ed:b6:ee:15:aa:48:2a:9d:45:
         c4:c5:a9:b6:59:fe:0e:ce:9b:81:49:96:fc:e3:a8:bd:23:9e:
         e0:7b:de:69:25:bf:92:36:e0:a6:d4:88:a8:2a:e2:ac:dd:ca:
         e4:53:9f:7f:08:13:81:c9:08:1c:51:f4:9d:00:cf:fa:c4:e2:
         7e:ba:ac:69:71:dd:c2:f4:ee:2b:24:43:4e:22:fa:2b:69:c2:
         67:bd:c1:d6:49:8f:ff:14:ec:0c:7e:e1:1e:3b:45:19:32:1c:
         c2:dc:06:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:04:07 2026 by rpki-client