Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/597e2432-f3eb-3ea5-ae9b-a81789ab8826.roa
File:                     597e2432-f3eb-3ea5-ae9b-a81789ab8826.roa (raw, json)
Hash identifier:          hI6ZtHQcBkFpIHPSeA2phA7vAmxPcY8BQaTv/F+lREY=
Subject key identifier:   50:53:6E:2B:5F:78:43:55:84:26:2A:A8:DC:F3:FB:D5:02:75:DE:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6AAAA86D703210CD7A08D600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/597e2432-f3eb-3ea5-ae9b-a81789ab8826.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     396555
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:a8:6d:70:32:10:cd:7a:08:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=16430082-f389-46cb-bd5e-c674e19626b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:9f:b9:5d:4d:a6:b2:6f:3f:39:9d:50:9a:
                    fd:dc:74:0c:ee:f5:de:d1:e3:2a:25:e0:87:28:48:
                    bc:83:7e:0a:6f:bc:bb:96:df:a8:64:40:68:79:48:
                    08:68:47:dc:87:fc:82:e9:20:96:fd:2c:ec:46:b2:
                    7f:ec:b5:94:43:4c:32:d3:2d:ec:bb:d1:aa:65:d2:
                    25:52:b6:e3:50:6f:19:9f:98:c4:ce:3e:68:d8:11:
                    5e:b7:b6:eb:65:d7:5b:bf:c1:ad:22:06:94:00:fa:
                    26:44:e0:7d:b8:da:4c:d4:e4:95:38:6f:5e:44:73:
                    23:de:72:eb:01:60:6d:29:2b:88:fe:eb:b2:d3:8e:
                    00:9e:86:d2:0e:68:b4:83:e0:7b:4e:6e:c7:9a:0c:
                    e0:5c:9f:41:0a:64:c4:75:f8:28:85:6c:31:21:17:
                    dc:50:19:a4:79:ab:47:d5:5a:18:a2:ac:4f:60:06:
                    72:0c:98:dc:7c:83:53:90:2d:c3:93:a6:b6:d1:bd:
                    7b:9e:51:a2:05:27:a3:11:e1:b3:d4:61:39:b1:0f:
                    00:95:21:27:8a:f7:e5:d9:16:1a:84:a1:4e:30:a4:
                    92:31:f5:62:b4:7b:b7:37:e8:69:b8:6d:9c:ba:d2:
                    e1:e6:24:95:ee:a6:34:3f:53:63:c1:5b:e8:fc:9a:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:53:6E:2B:5F:78:43:55:84:26:2A:A8:DC:F3:FB:D5:02:75:DE:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/597e2432-f3eb-3ea5-ae9b-a81789ab8826.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:d5:1f:fa:48:57:c7:6c:b4:3d:ae:a7:07:1e:c5:d6:f3:5a:
         ec:fa:36:65:04:9c:37:46:5e:00:62:3f:d5:f0:d3:e3:bf:88:
         d1:40:39:15:c9:26:36:7f:a4:d3:9e:28:20:be:41:fd:4a:32:
         e2:60:64:3e:1f:a4:d7:1f:c2:1d:1c:71:f1:5a:d0:ab:90:ce:
         64:12:5b:5c:49:92:c1:52:6c:79:1f:18:36:f4:85:cc:f8:fa:
         3b:02:0b:84:ab:60:d6:f4:8d:2d:15:43:78:b5:8d:ee:84:47:
         29:a0:e0:09:68:1b:73:3d:5d:90:2a:ed:49:48:06:ae:1e:c1:
         5f:95:44:ce:31:a9:9c:a0:cc:24:64:f6:69:0f:ec:ca:d2:fa:
         a4:16:58:f8:ab:cc:0f:ea:dd:5d:66:42:f5:bc:4b:e7:ad:22:
         9f:1f:be:dd:8e:4f:7b:cd:92:42:b6:47:5c:9d:33:6e:66:8c:
         88:d9:15:e3:db:43:a8:95:d7:ab:c1:ba:73:27:1f:ad:db:5d:
         58:18:98:0c:5e:15:d8:34:ec:15:52:d1:8b:e8:74:a4:f3:77:
         11:ba:d6:c0:b3:bb:4e:fe:92:ee:f0:ec:06:51:28:38:cf:90:
         46:d6:0d:0c:54:fb:fa:0b:0b:41:f3:e2:2f:39:42:12:d3:ce:
         ec:0d:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:00 2026 by rpki-client