Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bbe9bd8-d4ab-3042-bcef-ad6e70e21fe2.roa
File:                     8bbe9bd8-d4ab-3042-bcef-ad6e70e21fe2.roa (raw, json)
Hash identifier:          HMzKP9qRGRw3YD/VHz/+42ilN8gzC+U0EEZ4SJbNOyo=
Subject key identifier:   28:FF:BD:B5:92:FC:C8:B4:23:E4:B6:9E:78:12:29:48:F2:B4:36:B1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE53A281BABC37625121630
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bbe9bd8-d4ab-3042-bcef-ad6e70e21fe2.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396574
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:3a:28:1b:ab:c3:76:25:12:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=4ff81b04-dab8-4371-96ef-1011b95677af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:db:90:df:69:7a:e6:15:5e:ca:e3:e1:fd:
                    7c:33:3b:59:c5:b3:c7:dd:2f:53:35:bf:e0:58:94:
                    c8:f7:63:8d:bf:22:24:e5:23:55:c3:cd:36:33:e3:
                    c6:27:cc:7e:d7:31:fe:4c:11:2c:67:06:cc:d0:75:
                    bd:20:e0:25:29:0d:50:69:48:4d:6a:f3:c7:33:c7:
                    df:5b:ee:49:7c:0c:a7:ca:8b:a6:10:26:f0:7b:e5:
                    0d:7b:81:38:ed:34:85:ba:38:4f:1f:15:6c:b5:2b:
                    b1:17:83:71:c7:a1:69:f6:89:34:c7:87:fe:5b:fe:
                    a5:88:8c:cb:59:ee:9b:91:74:12:cc:ed:2b:b0:66:
                    c4:ae:ba:81:7f:b0:38:64:b5:cb:5f:a7:54:b3:0c:
                    c8:f3:a0:77:8e:24:63:2c:06:ac:15:5e:73:cc:4a:
                    4f:07:0e:da:92:ea:bb:80:67:1f:aa:d4:16:cd:b6:
                    7a:f0:83:0a:5c:0b:8c:de:85:4b:fa:30:b7:39:02:
                    d9:2c:e6:09:6f:f9:99:8f:0f:3a:52:d9:f2:9a:5f:
                    99:3c:85:d3:d5:96:c5:b5:80:ce:13:4b:76:a0:7c:
                    20:48:a9:3b:63:7d:ac:3b:35:14:c4:e1:71:7a:39:
                    f5:d5:6f:bf:48:d3:e5:ba:8c:18:c0:70:91:5e:d4:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:FF:BD:B5:92:FC:C8:B4:23:E4:B6:9E:78:12:29:48:F2:B4:36:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8bbe9bd8-d4ab-3042-bcef-ad6e70e21fe2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:04:22:9d:0a:fd:e3:28:a2:fd:b0:9c:2c:df:7f:9b:2a:
         c9:d4:cd:d1:38:52:41:87:36:d6:b3:b5:12:81:02:1b:b8:df:
         d3:53:78:56:31:a7:20:f9:54:54:39:24:7d:ac:52:74:bb:ad:
         29:e3:aa:2e:5e:69:8b:bb:74:b4:1b:a3:6c:af:f9:cd:d2:71:
         ed:a5:10:62:07:d1:b7:98:f1:9b:ff:b8:0c:f8:f9:66:28:c4:
         f2:da:5c:ff:ad:ff:2b:88:f9:dd:0f:d9:b0:b3:70:7d:bd:3f:
         65:4f:5b:d7:05:21:39:7e:41:e9:38:97:2b:cd:e4:46:3c:0c:
         11:63:04:5d:68:b3:b4:94:66:05:55:e1:df:1e:70:11:00:35:
         c0:ed:34:c4:89:75:df:b8:41:55:10:96:fe:89:e3:b8:2e:9c:
         b5:c5:18:1b:9b:53:87:bf:a5:2f:7c:03:44:4f:04:38:38:90:
         0d:2d:77:a2:54:4b:40:fa:09:17:a8:c4:57:7a:5c:97:e5:d4:
         f7:df:6d:b9:20:67:ff:ce:6c:fc:4e:d9:65:1b:24:4f:03:30:
         ec:5d:87:5c:36:be:6a:6e:cc:8b:24:24:99:41:29:c9:66:01:
         63:68:5c:d9:55:e1:86:a9:2c:e0:2d:cd:b0:c8:99:75:0a:25:
         62:dd:fb:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:48:36 2026 by rpki-client