Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f3c8562-1b37-33e1-8a29-01598563355c.roa
File:                     5f3c8562-1b37-33e1-8a29-01598563355c.roa (raw, json)
Hash identifier:          e4R553hGpAF9ohJ9diDMdEm1XUgJnevs2lpXtJ33bSk=
Subject key identifier:   B7:A4:43:FB:8C:BE:04:5C:39:DD:D5:8E:C2:17:F1:21:CC:3D:D6:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6AAAAD9EA58F0E73C1B13ED8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f3c8562-1b37-33e1-8a29-01598563355c.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     396544
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:ad:9e:a5:8f:0e:73:c1:b1:3e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=f07d99d9-42b1-4b98-b084-dd06e375126f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:49:fa:79:c1:14:93:1d:95:7e:aa:fd:d5:c2:
                    43:15:5e:2e:1c:9c:54:70:75:28:54:13:c1:98:d6:
                    f4:06:e2:2b:26:be:e1:20:b5:0f:41:31:a0:f9:f6:
                    e6:54:4f:17:f0:11:93:9f:6c:be:07:ec:b3:32:2f:
                    b1:98:6c:54:03:e4:e2:91:bb:1e:8e:fe:77:d7:ea:
                    dd:77:0a:bf:17:7f:8b:d0:20:5e:75:29:03:35:b3:
                    c8:1a:6d:99:48:30:80:f5:3d:8a:2e:cf:a7:47:4a:
                    d6:c5:c1:92:48:de:f8:ac:fc:cc:f8:97:89:97:4c:
                    ab:71:93:31:ba:51:ca:4e:6d:04:58:d0:ab:49:1d:
                    80:4d:04:2c:5d:fb:77:a3:09:4a:66:e9:61:6b:2b:
                    5d:84:e6:65:a6:2b:07:99:01:67:b4:b8:29:67:e2:
                    ef:6a:85:6e:1f:80:49:87:52:b4:78:9d:83:ae:88:
                    a8:e4:b3:22:a6:4c:ff:e8:6b:48:ac:bb:96:98:a4:
                    7d:af:37:c9:bf:4c:1e:ea:40:b6:19:e9:39:a7:c6:
                    28:88:ac:40:c9:42:36:32:2d:48:30:51:f6:1e:7e:
                    5b:f2:80:b0:a3:c9:27:22:fe:1f:9d:a2:61:62:43:
                    0f:b5:4d:46:4a:76:9a:f8:a6:bb:a0:a5:e0:94:1a:
                    35:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A4:43:FB:8C:BE:04:5C:39:DD:D5:8E:C2:17:F1:21:CC:3D:D6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5f3c8562-1b37-33e1-8a29-01598563355c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:33:fc:74:02:5a:7f:c4:91:40:fa:e6:7e:99:6c:1d:78:ae:
         aa:95:02:d9:87:04:12:50:fc:56:f0:ce:12:c6:0c:72:c8:0e:
         f9:09:19:b3:d9:81:71:65:28:08:55:52:02:25:12:36:01:85:
         f1:92:6c:1c:af:ac:75:a2:46:c7:f2:93:05:45:97:50:66:bd:
         ef:27:70:f1:04:fe:7e:fb:1a:88:de:a0:7e:e1:18:94:e6:b6:
         ba:44:e0:34:16:3b:09:88:72:95:39:71:7e:d4:b4:a6:6d:6e:
         85:c4:cc:7b:7d:e2:91:21:aa:6b:b8:c3:62:83:6c:0d:db:31:
         1b:78:8f:29:7e:0c:9a:71:ff:88:84:27:2e:9f:ff:9d:04:4e:
         cb:55:12:cb:bf:db:76:0d:fa:e8:2c:8c:17:36:f6:10:70:fc:
         91:43:f9:12:1f:be:7c:e7:c1:ef:b4:a6:8e:a0:fe:f8:fc:ec:
         c3:7e:40:83:72:3c:f6:fd:d8:ae:7b:9b:04:14:57:18:ad:db:
         b4:be:75:a6:58:60:b7:f4:27:80:b7:7d:b9:39:07:4b:f6:7a:
         a7:d2:c7:21:68:70:79:b6:1c:7a:ce:97:db:17:a9:36:f0:6e:
         29:e8:33:ac:50:f0:b0:2d:51:51:f8:80:fd:45:3a:a9:90:28:
         f2:13:bc:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqq2epY8Oc8GxPtgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
ZjA3ZDk5ZDktNDJiMS00Yjk4LWIwODQtZGQwNmUzNzUxMjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0n6ecEUkx2Vfqr91cJDFV4uHJxUcHUoVBPB
mNb0BuIrJr7hILUPQTGg+fbmVE8X8BGTn2y+B+yzMi+xmGxUA+Tikbsejv531+rd
dwq/F3+L0CBedSkDNbPIGm2ZSDCA9T2KLs+nR0rWxcGSSN74rPzM+JeJl0yrcZMx
ulHKTm0EWNCrSR2ATQQsXft3owlKZulhaytdhOZlpisHmQFntLgpZ+LvaoVuH4BJ
h1K0eJ2Droio5LMipkz/6GtIrLuWmKR9rzfJv0we6kC2Gek5p8YoiKxAyUI2Mi1I
MFH2Hn5b8oCwo8knIv4fnaJhYkMPtU1GSnaa+Ka7oKXglBo1IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLekQ/uMvgRcOd3VjsIX8SHMPdbjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWYzYzg1NjItMWIzNy0z
M2UxLThhMjktMDE1OTg1NjMzNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJUz/HQCWn/EkUD65n6ZbB14rqqVAtmHBBJQ/FbwzhLGDHLIDvkJGbPZ
gXFlKAhVUgIlEjYBhfGSbByvrHWiRsfykwVFl1Bmve8ncPEE/n77GojeoH7hGJTm
trpE4DQWOwmIcpU5cX7UtKZtboXEzHt94pEhqmu4w2KDbA3bMRt4jyl+DJpx/4iE
Jy6f/50ETstVEsu/23YN+ugsjBc29hBw/JFD+RIfvnznwe+0po6g/vj87MN+QINy
PPb92K57mwQUVxit27S+daZYYLf0J4C3fbk5B0v2eqfSxyFocHm2HHrOl9sXqTbw
binoM6xQ8LAtUVH4gP1FOqmQKPITvP0=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:22 2026 by rpki-client