Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a720cfed-271d-388d-993d-9b9062355316.roa
File:                     a720cfed-271d-388d-993d-9b9062355316.roa (raw, json)
Hash identifier:          p9UTwlsQr0Gt/N+UlSXDy9hbaeKjN8b3zMVzectIFl8=
Subject key identifier:   9D:2C:3C:14:33:2A:E3:14:46:95:AA:CA:4D:19:45:73:D3:0F:46:24
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2D87E0A10433FCFE81252440
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a720cfed-271d-388d-993d-9b9062355316.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     19836
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:e0:a1:04:33:fc:fe:81:25:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=10689451-daa8-41fd-9b0b-1031e7ca1298
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1b:b3:ae:ac:f4:ad:97:67:89:e2:67:28:6b:
                    dd:74:9d:24:00:3e:c4:09:97:0c:8b:b6:14:5d:05:
                    91:fa:00:50:ef:84:1c:60:eb:c0:75:73:c5:a3:b6:
                    57:9c:00:f8:24:a5:a7:bd:68:33:5f:ad:cb:06:19:
                    a7:56:8a:0d:b3:4a:d4:13:cc:c4:8f:6b:d5:09:e3:
                    0f:32:f0:51:89:f2:7c:55:88:cf:a3:b5:f3:ac:bc:
                    33:d9:1a:7e:25:95:ef:65:9f:7a:e8:79:47:b0:f8:
                    93:ae:30:cf:bc:18:a8:6c:c8:61:76:f2:04:a3:c5:
                    c8:a3:75:d0:1f:ec:6e:5d:37:d2:52:06:f4:17:b4:
                    20:e8:45:43:f1:55:28:b0:59:de:e5:be:d4:bb:d1:
                    7b:79:a2:83:27:6c:bd:da:3e:82:ec:13:f6:ac:f6:
                    e2:35:3a:cf:23:5d:1a:83:0f:96:c7:61:af:b9:ad:
                    71:a7:d3:d8:b6:25:69:a8:ed:98:8c:e5:7a:53:28:
                    09:51:54:cc:15:67:02:e0:7c:46:71:7f:6b:58:36:
                    16:28:24:d3:75:66:b5:94:ed:ec:b2:11:99:c4:ff:
                    70:7d:91:ad:df:ee:dd:e7:04:45:35:1c:f2:0e:9d:
                    ee:98:4d:18:aa:cb:a0:4f:4e:93:01:68:d1:40:ce:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:2C:3C:14:33:2A:E3:14:46:95:AA:CA:4D:19:45:73:D3:0F:46:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a720cfed-271d-388d-993d-9b9062355316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:1b:0f:dd:b7:5d:c0:1e:a0:17:75:4d:6a:94:90:ee:cc:45:
         b1:e3:98:19:c3:ca:89:ec:82:21:30:4b:9b:0c:e3:b0:8a:ba:
         7f:39:aa:89:92:2f:5e:dc:c7:e1:9e:55:f7:07:c0:91:bd:c3:
         b6:57:14:b7:8f:65:80:fb:13:8a:c6:bf:d2:7b:ae:44:f6:37:
         ca:a9:39:7a:27:7a:77:69:9c:cc:a9:34:48:d9:0b:9c:5b:94:
         2e:75:b6:46:c9:b5:6d:7f:51:f2:38:75:5d:2d:a5:96:d5:46:
         6b:46:1d:f0:ca:cf:ca:87:f5:ad:3f:f6:43:af:5d:1a:03:40:
         b2:8f:ce:0e:19:61:09:e9:e8:5d:43:a3:fc:e5:4a:81:c4:ed:
         8e:98:ae:ec:08:1e:7b:3b:fa:f7:f5:84:68:ca:50:8b:b7:2f:
         c0:fc:85:c9:45:6d:15:5e:60:e6:d7:ff:87:eb:c3:d9:70:f8:
         7b:9f:7f:77:77:70:44:6d:c8:a0:0c:be:62:b2:a6:b0:df:76:
         57:a4:2e:53:b6:98:cc:3b:30:38:95:3f:dd:fb:f2:a2:73:62:
         67:cc:0a:03:b2:87:7c:fb:7d:16:54:eb:d8:9f:cf:43:2e:71:
         4e:eb:5b:90:08:a7:02:8d:08:ee:ab:e7:46:86:18:b5:26:29:
         66:6a:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:29:15 2026 by rpki-client