Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c968816f-dec0-32c6-a3f0-64e93d4f577d.roa
File:                     c968816f-dec0-32c6-a3f0-64e93d4f577d.roa (raw, json)
Hash identifier:          /7m8QO8O6VQh8TNLL++HEaPk82RjKiq9pGznYysu6dY=
Subject key identifier:   0E:E4:8D:27:85:C0:44:8C:49:C7:31:C9:29:28:88:A7:BC:2B:80:F4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E9BE535F63500B41083B53780
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c968816f-dec0-32c6-a3f0-64e93d4f577d.roa
Signing time:             Fri 24 Jul 2026 21:00:12 +0000
ROA not before:           Fri 24 Jul 2026 21:00:12 +0000
ROA not after:            Thu 22 Oct 2026 21:00:12 +0000
asID:                     396739
IP address blocks:        192.5.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9b:e5:35:f6:35:00:b4:10:83:b5:37:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 21:00:12 2026 GMT
            Not After : Oct 22 21:00:12 2026 GMT
        Subject: CN=752f9524-a0f3-4e3e-8c10-e3c67bdbd9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:84:0d:b4:97:a8:ac:09:69:d1:a9:9c:68:ce:
                    9e:fc:5a:2c:6f:e1:18:85:d1:eb:f4:fe:d1:d6:e8:
                    76:ca:34:1d:58:ce:17:4b:41:e6:bf:1b:dd:ac:ee:
                    d7:1c:53:36:86:6d:e3:58:ea:c0:ca:99:25:76:cc:
                    43:54:0c:2f:c4:a6:64:01:3b:ff:d2:c6:60:72:3f:
                    bd:66:18:c5:72:61:21:5e:d2:56:88:bf:c9:a7:85:
                    aa:ff:e7:60:4d:02:97:e0:aa:c7:67:47:55:89:33:
                    92:09:b0:ad:8a:8d:a5:09:d4:3d:23:8b:03:f1:d5:
                    2c:1c:a4:17:5c:74:48:19:24:7d:41:0f:e2:be:a3:
                    d0:ae:79:cb:e2:3a:9e:fe:0d:1d:13:83:97:45:69:
                    22:a4:89:f5:91:f5:9f:78:2a:40:47:96:af:1b:3b:
                    18:fe:32:29:12:ce:37:ae:96:68:52:f6:89:cb:a9:
                    bd:47:05:6f:a1:6e:a8:d8:18:bc:57:9a:69:37:11:
                    ce:17:c3:28:25:03:50:75:fd:47:f0:9e:44:20:83:
                    7b:5f:28:83:f1:1f:d4:a8:27:0f:fb:f5:15:68:95:
                    77:36:5e:0f:fa:31:2c:7b:bc:7a:98:0f:45:86:4e:
                    c0:a2:ab:90:41:8c:f9:25:60:b1:a4:d0:1e:3a:81:
                    42:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E4:8D:27:85:C0:44:8C:49:C7:31:C9:29:28:88:A7:BC:2B:80:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c968816f-dec0-32c6-a3f0-64e93d4f577d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:90:f3:8d:ef:b7:2a:ef:27:83:8a:68:cd:08:0a:28:0c:94:
         9d:70:74:33:c7:fe:0e:76:8f:fe:23:33:04:ca:67:ec:0a:ce:
         9a:02:ba:1a:64:be:1d:b3:cb:51:b9:b6:97:d3:7c:cd:6d:39:
         6d:d6:64:c2:ba:8d:1f:14:ad:a3:cd:bf:00:36:0c:26:fe:be:
         fa:79:15:9f:03:05:06:79:99:bd:8a:2b:b2:50:55:a6:5c:3f:
         f5:d8:fc:97:fa:90:3b:ef:55:b8:93:73:92:fe:c1:2e:cd:23:
         ff:58:b0:3d:b8:48:c6:e3:e7:f7:80:2e:81:b4:41:50:3d:26:
         18:d5:23:58:0a:01:15:86:83:92:23:20:97:b9:6a:e4:3e:eb:
         fa:4d:61:4a:9e:1c:a8:4c:da:06:7c:b6:4a:d3:7e:a0:15:f2:
         c3:04:a0:94:d5:22:0b:45:4e:af:5b:66:4a:84:45:9a:a8:88:
         3c:e4:ed:e0:0f:c6:44:2a:b9:e8:38:d8:7c:e8:ac:a0:2d:6a:
         85:69:5c:5a:5f:87:81:be:22:e6:d2:d2:ef:32:5f:2e:d8:ca:
         d3:1c:e2:cb:9e:26:14:ec:62:b6:c2:d6:3f:dd:26:85:88:8c:
         9e:e3:16:47:bc:1d:22:f6:b2:73:a7:99:e2:ca:09:de:ed:ed:
         bf:c7:81:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:06:15 2026 by rpki-client