Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7488a149-b581-31b5-9810-d2af5c92b047.roa
File:                     7488a149-b581-31b5-9810-d2af5c92b047.roa (raw, json)
Hash identifier:          s9hIaqiJrBkKpEL2WJYTP3kkozhs/Nc9CjmonXpGIqs=
Subject key identifier:   A8:D1:37:6F:91:5D:52:50:BE:80:12:C8:8E:78:63:AA:58:29:28:C4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA17AACF0EB5106D358EAA000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7488a149-b581-31b5-9810-d2af5c92b047.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     397209
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:ac:f0:eb:51:06:d3:58:ea:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=32764b33-331d-4520-86a3-65feced15d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:87:66:9b:bb:2d:0e:f8:72:51:e8:e8:5e:62:
                    54:d0:97:32:04:af:98:8a:ec:23:f0:3b:8f:b3:9d:
                    71:75:24:e2:3a:1e:cf:f7:4a:2d:96:de:09:e9:b6:
                    40:38:93:5b:08:a9:21:50:71:c1:dc:c4:d2:1b:51:
                    a1:61:10:eb:2c:58:b7:cc:a6:b5:1d:5e:c2:74:75:
                    9f:1a:82:0a:5e:d4:97:3e:0d:1f:86:3e:1c:97:a8:
                    e9:0b:da:c9:c7:90:c0:ee:82:dc:94:21:9f:e0:e8:
                    6e:fc:3f:7c:de:09:69:25:b2:0e:de:72:6c:61:bf:
                    72:d6:5b:d5:b6:2c:4d:e3:31:d0:8c:c1:79:1c:b5:
                    d6:9b:9b:6d:6a:94:52:07:0a:bf:af:4e:e4:45:61:
                    18:94:e6:fa:9a:62:17:fb:da:62:d4:f4:40:80:38:
                    8c:83:cc:01:14:7d:da:0b:d4:36:8b:8d:db:f6:b5:
                    83:33:e4:09:8c:ff:5a:17:27:e0:22:75:f3:97:a5:
                    22:d2:c9:be:14:35:a6:b4:a6:62:91:b6:a0:fa:81:
                    f6:1c:43:10:86:fd:31:53:cd:b6:0d:ac:9d:5d:85:
                    5b:23:8d:be:0a:07:2a:f6:e0:55:bb:d7:8a:d6:45:
                    1b:e7:88:e1:48:40:6f:46:a6:d9:20:75:6a:92:6f:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D1:37:6F:91:5D:52:50:BE:80:12:C8:8E:78:63:AA:58:29:28:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7488a149-b581-31b5-9810-d2af5c92b047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:c9:fc:4e:8f:b0:56:d4:0b:50:56:c9:38:d9:f8:ed:dc:
         61:0e:1c:fc:d3:3d:11:6c:80:4b:81:54:b0:48:ec:28:c3:9d:
         e6:25:d5:0a:50:db:d1:d5:a7:ac:f3:5b:9f:00:b7:ed:88:0d:
         06:ec:e1:95:47:90:7c:8c:a3:c4:11:fc:80:c0:2f:f6:db:dc:
         0a:11:74:b8:8a:12:33:2a:e3:26:8a:d4:73:fc:02:20:e4:97:
         99:7e:7d:39:c0:52:f8:6c:07:dc:1a:c9:cf:7c:31:1c:57:bd:
         c0:3b:d4:8b:21:81:11:c9:f7:0b:75:d5:7a:8c:5d:5c:7b:c6:
         87:79:8a:a7:7e:03:c9:18:19:10:93:60:8c:93:99:3a:b1:d8:
         21:ce:e9:fd:d2:da:b0:10:f2:0f:e4:00:ea:c7:46:d3:49:71:
         5e:51:73:68:66:3c:99:21:0d:5e:4a:1e:f3:dd:2c:df:3a:ea:
         ac:e9:bc:ff:d9:a6:2a:88:46:8a:ff:e1:d0:46:01:e6:ce:a3:
         fa:74:1e:03:bb:57:15:73:bd:64:00:3b:66:0f:74:ca:f8:3e:
         3e:2e:e5:e0:16:ac:62:f1:df:39:a3:bf:75:ed:b6:fb:bd:db:
         6b:ab:96:3a:c9:2a:e4:49:42:2a:42:69:6b:8d:7f:7b:a1:3b:
         45:a6:8f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:25:10 2026 by rpki-client