Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb110c91-0357-37a3-98b5-934049702ae3.roa
File:                     cb110c91-0357-37a3-98b5-934049702ae3.roa (raw, json)
Hash identifier:          1i5ab8p91HMEIvzAIBkgXHy366D1jEvNrR/joIMwJUE=
Subject key identifier:   85:BF:FB:FD:9C:A0:1B:12:CF:52:E8:57:23:32:E0:AD:64:75:73:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2D87B21E51D8ACA1597C8D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb110c91-0357-37a3-98b5-934049702ae3.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     396546
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:b2:1e:51:d8:ac:a1:59:7c:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=e8d3b630-9eab-4506-8826-40564fb8c40d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fc:e8:e4:26:41:94:92:94:1f:89:11:3e:70:
                    e3:99:e0:95:62:a3:37:25:97:d6:8c:e8:6c:95:e5:
                    47:2c:49:e3:a3:ae:b3:03:48:23:9c:34:3a:39:f2:
                    c3:d5:9f:38:62:3c:b0:9f:22:76:d0:f1:2c:ff:22:
                    f5:c2:9a:ef:34:61:bf:a5:96:7c:1a:5a:49:73:b1:
                    25:a8:d4:58:8e:e4:93:55:fb:31:ad:14:da:91:a4:
                    b2:b6:27:49:d5:74:2c:34:f9:86:a7:9c:03:6f:5f:
                    2c:a4:b9:94:1a:f2:b9:dd:08:35:85:9d:c8:93:a0:
                    c5:4c:f2:8b:d3:04:72:2e:a5:e4:fb:73:bc:cd:c6:
                    f3:28:61:fc:e7:96:39:a1:5e:90:d5:31:3b:42:74:
                    0c:03:18:15:37:71:3c:90:38:45:12:fe:52:3d:31:
                    28:02:14:5a:df:03:26:81:0d:a5:30:08:f3:b5:96:
                    f8:6f:9d:9b:91:48:e2:7f:0c:6a:59:86:4b:69:2d:
                    de:84:ef:a1:cc:2b:c8:36:69:3c:65:f4:1d:86:fa:
                    46:fb:bb:8d:90:51:20:45:9c:07:04:cd:a9:46:c3:
                    34:eb:6a:90:49:72:65:10:5f:38:94:a7:0f:37:63:
                    38:15:2f:1d:41:1e:5e:af:25:1e:2c:60:0b:4c:26:
                    ed:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BF:FB:FD:9C:A0:1B:12:CF:52:E8:57:23:32:E0:AD:64:75:73:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb110c91-0357-37a3-98b5-934049702ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:36:55:96:c2:6c:d5:02:f9:ad:1a:c6:4d:8b:1e:04:63:99:
         d5:99:5d:a4:b8:67:58:54:79:a8:92:51:7e:e0:ef:09:c7:86:
         f0:1c:cc:68:22:1b:53:fc:09:bb:80:f5:4f:70:bf:ec:22:1a:
         4f:70:ea:83:38:b2:a6:05:82:50:17:66:da:30:1f:fa:dc:e4:
         4e:31:03:b7:60:4f:b2:99:db:94:00:3f:a2:90:c3:15:e8:d7:
         56:29:ef:ea:58:44:bc:3b:ac:48:f8:5b:4a:7e:fa:46:7e:04:
         d6:80:6e:18:8c:c6:ee:9f:7e:eb:88:a9:3f:31:b5:47:0a:67:
         ca:83:e0:fe:2d:2c:5a:27:1e:fa:5f:65:fc:04:d1:c8:41:71:
         9e:b4:41:81:4e:15:73:8c:b7:af:e6:8f:cd:0e:cf:50:68:54:
         33:9e:33:64:c9:a2:03:40:bc:25:d1:44:ee:5e:cd:6a:e5:23:
         ff:3d:e1:54:2e:03:26:ef:09:d3:09:b6:c9:3c:76:58:1d:c1:
         b2:bb:57:11:5b:6d:37:d6:0a:3c:b7:8f:94:bf:49:af:c7:17:
         e9:e6:c1:e0:0d:ce:6b:9d:f4:24:45:00:28:83:89:1b:f4:5b:
         52:92:da:25:ad:b6:b9:87:db:57:5c:46:92:2f:44:4c:bf:ab:
         06:ea:8a:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th7IeUdisoVl8jYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZThkM2I2MzAtOWVhYi00NTA2LTg4MjYtNDA1NjRmYjhjNDBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/zo5CZBlJKUH4kRPnDjmeCVYqM3JZfWjOhs
leVHLEnjo66zA0gjnDQ6OfLD1Z84YjywnyJ20PEs/yL1wprvNGG/pZZ8GlpJc7El
qNRYjuSTVfsxrRTakaSytidJ1XQsNPmGp5wDb18spLmUGvK53Qg1hZ3Ik6DFTPKL
0wRyLqXk+3O8zcbzKGH855Y5oV6Q1TE7QnQMAxgVN3E8kDhFEv5SPTEoAhRa3wMm
gQ2lMAjztZb4b52bkUjifwxqWYZLaS3ehO+hzCvINmk8ZfQdhvpG+7uNkFEgRZwH
BM2pRsM062qQSXJlEF84lKcPN2M4FS8dQR5eryUeLGALTCbtyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIW/+/2coBsSz1LoVyMy4K1kdXNfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2IxMTBjOTEtMDM1Ny0z
N2EzLTk4YjUtOTM0MDQ5NzAyYWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFG5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADY2VZbCbNUC+a0axk2LHgRjmdWZXaS4Z1hUeaiSUX7g7wnHhvAczGgi
G1P8CbuA9U9wv+wiGk9w6oM4sqYFglAXZtowH/rc5E4xA7dgT7KZ25QAP6KQwxXo
11Yp7+pYRLw7rEj4W0p++kZ+BNaAbhiMxu6ffuuIqT8xtUcKZ8qD4P4tLFonHvpf
ZfwE0chBcZ60QYFOFXOMt6/mj80Oz1BoVDOeM2TJogNAvCXRRO5ezWrlI/894VQu
AybvCdMJtsk8dlgdwbK7VxFbbTfWCjy3j5S/Sa/HF+nmweANzmud9CRFACiDiRv0
W1KS2iWttrmH21dcRpIvREy/qwbqivE=
-----END CERTIFICATE-----
Generated at Sat Sep 26 06:36:15 2026 by rpki-client