Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9883323-71e8-3d5a-9146-b77ab23fd6cf.roa
File:                     b9883323-71e8-3d5a-9146-b77ab23fd6cf.roa (raw, json)
Hash identifier:          xf9NzZBueyDo766YUymXI/Bngdlmafr6qUT22tLe9eI=
Subject key identifier:   52:33:D4:65:01:E8:46:06:D4:89:57:21:34:73:D1:DC:FD:C1:45:93
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D6AAA7C54B34AB04F0266BD9C
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9883323-71e8-3d5a-9146-b77ab23fd6cf.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     396600
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:7c:54:b3:4a:b0:4f:02:66:bd:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=18a5ebe4-cb42-48d2-b593-0f7147facbf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:17:79:07:59:4b:63:c0:25:e5:cb:5e:88:43:
                    93:c1:7a:da:23:c2:5e:95:74:5d:35:ba:ff:fe:33:
                    79:68:f4:dd:ef:62:5f:30:03:6d:d2:b0:13:0b:9f:
                    66:95:3e:54:93:fc:85:00:5b:09:43:6b:9a:17:17:
                    db:75:19:4a:0c:8a:c9:dd:71:7a:6c:08:ba:76:f5:
                    5d:ad:4b:00:a5:d4:70:b0:0d:d1:aa:a7:51:84:7c:
                    82:48:e8:40:8e:f7:a6:fe:8d:21:a6:99:1d:53:6e:
                    4c:28:27:32:6d:48:5a:4c:79:69:d1:bd:d6:41:fa:
                    aa:7f:f6:36:5e:ee:6d:14:4c:b0:c2:cc:af:41:f2:
                    3b:0f:c2:af:53:8f:1e:5c:7d:19:29:ca:55:90:b6:
                    30:e9:42:c8:bf:f0:3e:2c:44:39:ba:d7:a6:fa:82:
                    57:25:20:67:28:6a:ef:c2:bb:69:25:3c:5e:89:4b:
                    bf:5e:c9:60:97:f2:c0:0e:08:e4:50:47:52:6c:ae:
                    4a:e1:9b:9c:95:31:ed:79:7b:24:03:bc:75:fc:de:
                    c3:28:7f:ce:e4:50:75:5c:15:28:eb:fb:0c:9f:cb:
                    5e:fc:3f:6e:16:85:22:3f:5e:de:82:6f:14:7b:96:
                    66:da:1b:a9:28:ad:7c:4b:0f:d7:64:77:47:0b:d2:
                    b6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:33:D4:65:01:E8:46:06:D4:89:57:21:34:73:D1:DC:FD:C1:45:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9883323-71e8-3d5a-9146-b77ab23fd6cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:16:40:73:60:86:e2:3e:cf:5b:11:6d:a2:a7:d4:e7:98:71:
         58:67:24:bb:eb:eb:69:e1:94:3d:f1:04:18:ca:51:20:1e:96:
         c1:b9:b4:05:05:78:b3:62:07:00:6a:ae:dd:14:a7:c4:76:91:
         ef:89:40:1b:35:d4:02:be:6c:9f:33:2b:07:59:1a:fa:7c:9a:
         4d:2d:12:81:c9:f6:44:53:12:bd:36:f7:f4:80:cf:98:46:14:
         2d:20:78:62:e0:32:19:c3:d7:1e:a9:a7:23:25:fa:c8:16:49:
         ea:0c:88:0f:34:0c:3a:42:bc:6b:67:0c:45:d1:47:b0:51:67:
         9f:18:fd:cd:1c:ad:fa:80:b3:5d:ce:4e:52:36:ee:2b:2b:19:
         66:20:4d:d0:c9:2a:9d:88:f3:02:01:f5:1f:c8:18:04:30:9f:
         7a:7f:89:18:bc:0d:3e:a8:e5:e4:4e:66:3f:66:c0:2a:4f:d0:
         94:77:85:20:45:98:71:2d:17:aa:b8:6b:41:87:9e:ab:48:37:
         b1:5a:1f:d0:f5:9b:65:a0:f7:db:d1:ca:76:c3:c9:84:29:5d:
         de:7b:db:73:03:b2:b8:e6:4a:57:c9:db:51:2d:13:d5:99:6c:
         14:9d:7f:b3:33:28:d5:77:99:1f:f9:e7:79:94:3e:33:79:c1:
         be:60:ba:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:33 2026 by rpki-client