Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdbc4ce4-a3fe-307b-80d2-f86d960059e7.roa
File:                     bdbc4ce4-a3fe-307b-80d2-f86d960059e7.roa (raw, json)
Hash identifier:          qQ+cI1MQyWy5yCnTZ+vJYxIPTv/aESGCXdxI2Q2jyls=
Subject key identifier:   96:67:28:D8:97:4C:E9:93:BE:FC:BD:2B:ED:F2:1E:68:64:6D:0A:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5FA8680F25C88A5821DA03AE
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdbc4ce4-a3fe-307b-80d2-f86d960059e7.roa
Signing time:             Thu 02 Apr 2026 14:22:41 +0000
ROA not before:           Thu 02 Apr 2026 14:22:41 +0000
ROA not after:            Wed 01 Jul 2026 14:22:41 +0000
asID:                     40647
IP address blocks:        192.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:a8:68:0f:25:c8:8a:58:21:da:03:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  2 14:22:41 2026 GMT
            Not After : Jul  1 14:22:41 2026 GMT
        Subject: CN=1f1a889e-c295-4246-88df-c93a2c096e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:e6:77:3a:13:4b:91:66:ba:c1:9a:a1:97:
                    fe:95:91:d1:b7:60:43:85:e4:38:83:53:f7:77:2d:
                    de:96:7e:02:9c:7e:d4:7b:55:05:75:e1:42:dd:c0:
                    30:9d:b0:a2:bc:37:89:17:7f:1b:50:44:de:e6:8b:
                    b2:20:b0:70:9a:ba:48:5d:55:5c:c6:f6:3c:b4:a9:
                    2d:68:a4:75:c0:bf:e0:90:af:a1:e2:d1:42:38:b7:
                    9d:15:63:e6:43:20:1d:ca:7f:4d:8f:0c:59:79:ae:
                    2f:2e:d5:a0:e4:c7:06:e1:32:a2:2a:82:2e:b1:bb:
                    c0:d5:59:47:fc:1a:30:07:5b:6c:75:ad:f1:0f:a5:
                    e8:4a:0e:0a:2c:aa:24:16:00:21:21:7e:1c:d7:1c:
                    d6:cc:12:06:f9:74:09:5b:f8:1a:62:f4:2e:92:2b:
                    ce:da:c9:28:f4:63:cb:c9:7b:ff:19:26:26:f7:6c:
                    07:20:a3:ea:ea:85:f3:b4:29:8a:f3:8f:1f:69:20:
                    eb:8a:8d:e0:46:ea:1a:fd:3c:6b:1a:39:4a:1a:58:
                    a0:26:9d:e7:79:95:68:89:b6:2e:48:ee:2c:d5:81:
                    17:88:67:32:d2:f2:30:6c:79:48:a2:65:57:14:ad:
                    8b:79:a1:f5:f7:ca:8a:02:f5:f5:fc:19:5e:65:44:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:67:28:D8:97:4C:E9:93:BE:FC:BD:2B:ED:F2:1E:68:64:6D:0A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bdbc4ce4-a3fe-307b-80d2-f86d960059e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:50:f9:94:bb:ae:fc:5c:70:b3:30:ea:8b:c0:e8:28:2c:7f:
         14:ad:b1:61:7b:14:8c:b5:27:77:8e:4b:27:40:f6:1b:e7:b1:
         64:bb:8a:d2:fd:ad:3e:8b:1b:94:34:e1:60:46:c1:a4:5e:20:
         a7:2e:ed:8f:d3:82:98:53:2f:95:14:ff:29:e1:a7:e4:c8:cd:
         fc:7d:91:15:31:e0:11:39:69:e3:21:37:0e:58:ca:40:24:9b:
         1c:14:b9:2e:a4:8d:2d:bc:d1:99:f2:11:35:38:92:a3:3d:48:
         cc:07:e0:8f:77:a8:10:52:78:8f:2b:f7:41:aa:a1:70:8f:05:
         ab:3d:82:e8:54:6d:2b:19:a4:35:56:fd:92:6f:43:50:87:8d:
         b7:0a:ab:d3:90:b5:af:09:c0:ff:21:5b:f8:38:20:cd:c8:6c:
         b3:4e:42:e3:06:c0:4e:ee:b8:2e:34:db:af:55:d1:89:ca:aa:
         d5:e0:d3:da:43:d0:15:1a:43:24:3f:af:32:11:d0:e3:0a:40:
         ce:3b:e2:e3:53:1f:19:b2:8e:1a:06:a8:01:d6:00:0b:ea:50:
         06:67:c3:4b:c9:78:5e:ff:18:4e:c1:c3:11:cc:54:09:54:0b:
         7b:ad:90:ef:b4:e1:3d:5f:7b:f4:4b:64:f9:8d:03:3a:65:36:
         da:47:fc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:18:34 2026 by rpki-client