Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74a5c85d-c808-3673-a128-ea14ba79a270.roa
File:                     74a5c85d-c808-3673-a128-ea14ba79a270.roa (raw, json)
Hash identifier:          dvz4EVU/JzBuz+ccsW3N5ND4WaPA+Mf3BTriqnrsyaU=
Subject key identifier:   5A:56:1B:77:F7:48:8D:44:EA:9F:61:BC:77:19:CC:61:F4:6F:97:B9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE1509DD0B196C6DBE0DE8400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74a5c85d-c808-3673-a128-ea14ba79a270.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     396594
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:9d:d0:b1:96:c6:db:e0:de:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=56e0b483-1cc6-4964-8414-82c04f24d6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9b:05:40:7d:33:29:f3:bb:27:0f:62:11:a4:
                    37:be:3d:28:68:d1:e3:4f:a0:d6:42:58:fe:eb:e7:
                    8a:98:6d:55:b1:86:af:12:82:5a:05:7c:bf:15:25:
                    6d:20:fc:27:86:63:43:2e:ed:94:00:b5:c5:87:dd:
                    c1:9c:58:39:7e:fc:c2:df:48:79:98:0b:9e:7f:d7:
                    c1:b2:4c:fc:14:e5:aa:69:01:c8:30:69:d1:d5:d8:
                    4b:67:41:0e:22:94:d8:45:5b:d6:3a:a4:0b:50:c0:
                    8c:80:94:42:0a:8b:82:b1:3d:7c:48:72:83:07:a3:
                    60:fe:8a:46:8b:a8:2f:e9:55:d7:c6:09:f1:22:df:
                    6e:6e:2d:64:0a:75:d4:fb:5c:39:fe:03:bc:38:45:
                    1a:73:93:7a:a4:f9:65:3c:86:19:7d:da:43:24:df:
                    cb:84:ab:e7:e0:62:79:61:8d:ec:cf:76:4e:6f:52:
                    eb:58:ab:58:8d:b0:bd:b4:85:80:80:09:f0:38:eb:
                    4f:bb:c9:c5:30:0e:e8:d0:38:3f:8d:08:f9:97:ff:
                    b8:cd:e1:ad:63:83:7e:1e:f4:d2:10:88:c4:f1:9d:
                    5f:da:07:aa:d3:21:0a:2f:f5:c1:7f:a8:d3:a2:ef:
                    0a:cf:77:3c:32:8e:84:28:12:30:63:75:81:c3:9c:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:56:1B:77:F7:48:8D:44:EA:9F:61:BC:77:19:CC:61:F4:6F:97:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/74a5c85d-c808-3673-a128-ea14ba79a270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:cb:a5:91:56:f4:6b:a0:f4:20:be:62:c0:00:64:c1:41:00:
         77:65:c2:46:6e:97:40:b8:29:1a:40:83:c2:cc:14:d2:7a:13:
         78:6d:ef:ca:2b:14:8f:db:d3:31:c4:52:ee:f6:88:84:51:15:
         df:b6:ad:e9:29:9f:7b:b4:57:c5:d4:45:91:96:9e:fe:bd:67:
         e7:25:aa:67:c8:ab:ec:e3:cb:c5:8c:d4:1c:27:b0:a8:2f:fd:
         1e:bd:9f:4a:09:2d:07:73:e1:61:c9:12:ea:93:5f:29:f9:d2:
         c3:87:6c:38:9e:91:9d:ed:bc:62:4e:35:fc:70:39:81:4a:18:
         71:35:89:07:09:4e:ff:71:1e:72:4a:cd:7c:a9:09:44:ec:89:
         11:ad:c3:88:b9:02:6b:95:3e:a2:63:61:b6:9b:f2:61:b5:34:
         cc:d7:07:c7:62:15:41:8f:31:d9:03:1b:fd:30:a9:24:57:db:
         08:38:90:a8:f5:b8:46:e8:bd:1f:c3:63:99:20:9d:73:87:4a:
         86:6f:4f:0d:3d:1d:44:34:55:e1:e4:00:cf:36:a5:8b:83:77:
         6a:c1:77:1d:9b:59:33:61:07:bf:22:5c:23:7f:e4:29:f6:b6:
         c4:fc:a2:ab:f3:6f:ab:df:ea:d2:0f:5a:42:4f:d0:c1:7f:71:
         df:73:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:15:52 2026 by rpki-client