Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6d7678-f1ae-3a75-a38e-2ec0dd4a1e54.roa
File:                     bf6d7678-f1ae-3a75-a38e-2ec0dd4a1e54.roa (raw, json)
Hash identifier:          ZNdW4izY6+EmfUFUni0VhM3oKLmjb1jCXrcOzgnxpCs=
Subject key identifier:   F8:6C:BF:7C:6A:4D:59:63:2C:D5:3E:A1:A0:B8:3B:87:01:2F:98:E2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79A01B1595434FA653600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6d7678-f1ae-3a75-a38e-2ec0dd4a1e54.roa
Signing time:             Thu 16 Apr 2026 14:09:50 +0000
ROA not before:           Thu 16 Apr 2026 14:09:50 +0000
ROA not after:            Wed 15 Jul 2026 14:09:50 +0000
asID:                     396580
IP address blocks:        192.42.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9a:01:b1:59:54:34:fa:65:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:50 2026 GMT
            Not After : Jul 15 14:09:50 2026 GMT
        Subject: CN=b32bf952-fcb4-4ee3-a167-d1d3590cb605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4c:b0:35:2d:78:86:76:29:47:43:fd:43:c1:
                    f0:a3:d4:e0:00:6e:b8:0d:15:3a:2b:92:62:90:3b:
                    57:df:8c:d5:59:2a:30:cb:e1:e2:3a:0b:dd:f9:80:
                    73:1a:6b:9e:60:8d:8b:90:3a:45:ed:c8:0c:a0:a6:
                    70:6a:6d:5c:05:c7:11:7d:07:03:8b:fa:4e:e3:73:
                    5a:af:ad:d7:04:8b:3d:5c:74:90:ad:b1:c3:0a:f4:
                    18:92:e4:bf:f8:9d:21:a0:6b:e4:af:cf:94:ba:3d:
                    e8:6f:20:cf:7e:e6:9d:3b:31:65:68:59:cf:60:21:
                    de:fc:e5:03:03:a9:cb:49:f9:98:96:ce:17:4d:c0:
                    91:51:8e:bc:fc:6a:7f:3f:96:fc:eb:1c:02:f3:c6:
                    30:9e:66:c7:57:6f:56:5f:15:92:9d:e5:13:d3:d2:
                    59:da:f0:93:e4:80:c5:66:23:e6:a7:9c:b2:a3:fb:
                    ee:e7:40:43:5e:62:47:6f:b7:40:bf:2a:09:42:e4:
                    74:06:aa:e3:02:e2:95:a3:de:f2:d7:c1:07:37:10:
                    95:cb:c9:45:45:eb:83:3f:f4:f0:62:a9:3f:d1:32:
                    bb:90:ab:ce:27:8c:a8:47:c2:f0:03:b6:3b:bf:f3:
                    20:5c:b4:be:84:60:8a:b6:34:98:f2:d6:16:c9:5e:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6C:BF:7C:6A:4D:59:63:2C:D5:3E:A1:A0:B8:3B:87:01:2F:98:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf6d7678-f1ae-3a75-a38e-2ec0dd4a1e54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:77:c5:bd:99:3f:7c:ea:75:81:8c:94:9e:2a:bd:f9:e2:57:
         d1:0b:62:73:49:66:13:10:62:fe:65:11:02:11:55:7e:24:29:
         6f:b7:37:3a:ef:8c:e5:4d:a9:82:e5:c2:02:01:5d:6b:51:02:
         a3:22:9a:aa:86:1f:3b:3f:56:f1:56:20:53:f0:97:7f:60:d4:
         07:af:9b:29:9b:b4:be:a2:4f:88:b6:61:f4:cd:17:49:e7:88:
         96:04:78:d6:82:02:b6:af:29:60:e5:5d:45:9c:30:a8:6b:b2:
         6f:d7:e8:6c:c1:d1:f8:aa:3e:71:0e:ee:09:8d:07:61:90:f5:
         21:bf:a0:d5:be:ca:8e:c4:b8:dd:66:38:60:5c:40:6c:b7:6b:
         b7:84:50:5d:e0:2c:3b:6f:09:08:a9:46:2b:86:cc:7c:49:ee:
         63:d8:07:45:76:8a:10:b7:d0:98:97:f7:55:66:e6:8e:c8:f9:
         5d:ed:2b:d6:36:85:8f:cc:c6:66:67:fc:c3:05:32:d2:12:58:
         c4:86:9a:fa:0a:8f:62:ff:88:99:12:25:c9:bd:1c:0d:4d:bf:
         4f:68:c9:52:ca:a2:47:b3:c4:26:46:c1:d1:60:8e:63:65:ed:
         8b:09:98:0d:a9:17:f2:15:83:e2:1c:9d:37:7b:9a:cc:94:bd:
         5b:98:ec:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:02 2026 by rpki-client