Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae260d9b-013f-37c2-bea3-7b56f32fe5ca.roa
File:                     ae260d9b-013f-37c2-bea3-7b56f32fe5ca.roa (raw, json)
Hash identifier:          Os2vY7VpD200DRWTQ9IYDWmNyKe9lE3tTxZxchzPq+Q=
Subject key identifier:   DB:86:FC:FD:90:E4:D6:96:8A:5D:37:F4:73:0C:A9:61:7B:0C:9C:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1E2CF175814321C0C364A680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae260d9b-013f-37c2-bea3-7b56f32fe5ca.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     396587
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:f1:75:81:43:21:c0:c3:64:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=df44ab2b-5d41-40e8-96c0-c36eee951f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:2f:82:4b:31:43:51:ce:e0:56:69:20:2d:
                    a4:3f:5a:e0:9f:08:90:a4:82:1f:17:44:2e:27:40:
                    22:c6:5d:ed:bb:49:7b:7f:9d:e4:95:dd:36:dd:af:
                    0c:95:54:c8:f0:92:fc:d2:e7:94:a0:8b:b6:66:3b:
                    b1:79:f5:0d:70:e6:f0:9f:26:ef:1b:af:18:59:75:
                    ac:d1:78:ee:68:e7:f1:6b:91:fb:07:83:1e:19:ab:
                    76:c5:18:5e:0b:fe:70:9e:a2:6f:e8:03:1f:be:f4:
                    52:81:95:9a:af:e6:36:c9:05:34:4f:77:74:10:67:
                    34:e2:9a:1d:ea:54:32:c3:6a:25:52:29:c6:b6:a9:
                    34:fd:7b:f1:80:f0:56:55:2e:67:40:b8:6b:b3:b8:
                    98:fb:68:cb:48:c7:2e:55:cf:fa:fe:6d:f2:a8:12:
                    96:7f:4a:06:d3:55:43:ce:65:8c:b3:71:cb:a1:07:
                    26:c3:4e:a2:43:5e:cb:bd:b9:3c:a5:dd:6f:fd:41:
                    94:cc:67:7a:e1:bc:ed:f8:6c:b2:37:ce:5c:4c:f9:
                    54:6b:aa:71:26:1e:a9:91:51:8b:f4:80:09:37:18:
                    19:76:82:ee:ed:15:4a:9f:40:cc:ae:3c:29:03:aa:
                    06:b7:cf:90:7c:b1:94:c4:71:3e:63:66:b2:03:e5:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:86:FC:FD:90:E4:D6:96:8A:5D:37:F4:73:0C:A9:61:7B:0C:9C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae260d9b-013f-37c2-bea3-7b56f32fe5ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ce:c7:fe:5a:35:62:01:c8:cc:b3:0d:17:70:ed:28:6c:2a:
         d0:a4:2f:2f:41:76:eb:db:8d:62:1f:ad:29:25:bb:2d:26:3e:
         31:e3:ff:6c:ec:28:6e:77:89:4a:ed:f0:69:48:d6:2e:40:19:
         8b:5b:6a:e3:c8:3f:e2:5e:cf:6a:07:b4:2c:19:3f:0f:3d:2d:
         ba:ae:f1:75:93:ff:da:d5:ff:54:b3:b5:55:fc:b1:31:24:52:
         e4:b7:b6:e1:b8:c5:77:4f:b3:cd:8e:e4:0c:e6:71:28:1b:5b:
         e2:5f:20:3e:54:b2:48:9f:7a:e0:df:8b:e0:cf:f5:b2:61:d8:
         d6:67:8d:e5:5f:e3:22:bd:2c:c3:02:34:cc:5d:27:ae:60:0f:
         c6:f9:ff:e7:8d:39:d9:f3:24:5a:92:ac:c8:f8:4f:93:ef:5c:
         69:69:3b:cb:71:ce:97:30:98:74:4b:a5:17:b9:2f:c8:62:60:
         7a:6a:7b:7c:77:78:7e:ed:f8:8a:14:08:8e:78:dc:2c:bc:3a:
         5a:a9:0e:71:45:fb:44:8d:c7:99:60:a0:4f:c3:12:9a:17:45:
         b6:21:ab:41:3f:5c:16:81:f2:cf:6d:20:48:ce:e9:b2:b6:ac:
         ba:40:f1:a7:78:d1:80:19:5d:43:f4:0d:f2:ca:84:f6:25:b8:
         ca:95:61:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:58:37 2026 by rpki-client