Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5821446-b145-39a7-833b-2b06706c396f.roa
File:                     d5821446-b145-39a7-833b-2b06706c396f.roa (raw, json)
Hash identifier:          2xzDdibxzWvsAiweS4IElA9oHXatgF8jJdKAZ9V19Hs=
Subject key identifier:   F1:CD:BA:3B:67:2B:04:C9:AE:11:02:39:DA:92:DE:E6:E6:37:FE:49
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D703FDBB8637B2F548A78E8FB
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5821446-b145-39a7-833b-2b06706c396f.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     396546
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:db:b8:63:7b:2f:54:8a:78:e8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=1aa9d212-d126-44f2-b0df-169d3fd22392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:42:4f:43:af:a1:11:cf:aa:4f:36:d3:ed:31:
                    81:29:27:90:cb:7a:2f:94:16:e9:63:51:36:e5:a7:
                    f4:b4:4e:31:b4:98:db:53:a1:fe:d9:48:ae:a4:f4:
                    3d:7c:8b:9f:85:e0:c5:20:0b:15:23:a5:aa:11:3d:
                    04:50:58:28:ba:5b:bb:c8:b6:29:56:de:62:58:a0:
                    44:6f:76:23:77:8a:fd:91:d3:d7:ca:f5:81:7e:9f:
                    1a:4e:30:0a:3e:75:17:1e:9c:5a:f6:8e:51:fe:7d:
                    a3:cc:3a:86:9a:dc:1f:b8:83:db:4e:ca:25:3e:49:
                    d4:3e:84:0a:db:f1:b1:88:e1:4e:1b:2a:e6:5c:56:
                    e9:63:9a:cc:fc:92:2a:7b:e6:8a:2f:38:29:4f:fd:
                    c1:35:1d:ff:06:ab:84:c8:c5:db:d5:46:71:40:d0:
                    78:07:f9:9d:b3:ee:8d:6f:27:36:2b:b4:12:b1:50:
                    df:7b:e6:fc:4a:e4:12:b7:c2:d2:73:59:c2:f2:db:
                    87:75:d9:2a:aa:35:93:05:72:76:e6:90:cc:9a:10:
                    de:1a:c0:ab:ed:65:44:d8:24:08:29:be:d5:d1:61:
                    28:d6:06:41:0f:e6:98:d4:1f:da:d9:c5:67:80:1a:
                    95:87:e6:5a:bc:93:28:28:7a:08:d7:9c:90:47:31:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CD:BA:3B:67:2B:04:C9:AE:11:02:39:DA:92:DE:E6:E6:37:FE:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5821446-b145-39a7-833b-2b06706c396f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:9c:59:3e:cb:d5:31:63:8d:7a:39:c3:1a:24:e6:37:d2:db:
         aa:f2:77:ec:30:70:53:f5:ea:8f:ea:0b:49:cc:99:67:bc:6f:
         30:f8:42:a0:86:56:a8:65:d6:62:51:0d:26:75:bf:28:df:34:
         ff:09:f3:a6:42:a3:52:79:fe:c4:a2:f6:ea:ab:1c:63:6e:b2:
         42:8b:2e:dc:f4:55:db:46:b7:80:bd:ff:0e:6a:a3:6a:47:ed:
         11:a3:11:6a:a9:a9:59:4e:98:7e:b6:d7:65:01:05:82:a5:98:
         d3:e1:1c:b0:e4:7e:4f:37:72:65:67:a0:d7:65:64:6a:bd:d8:
         9b:52:07:c1:9c:9b:f9:08:d3:ca:75:43:10:2d:bb:a2:87:06:
         1d:47:ab:fa:28:b9:15:32:4d:39:ce:70:60:4d:57:a6:32:67:
         75:02:ac:fb:f5:78:b4:2c:b8:60:4e:78:5d:58:40:fb:11:c1:
         94:73:79:9c:3e:9e:f2:57:a2:78:9f:22:39:67:73:6c:1f:15:
         cf:55:7c:a0:ac:42:30:41:cb:4c:4f:02:f9:4e:27:b2:b9:16:
         45:42:8e:2e:1d:51:b7:55:72:fc:9d:78:88:cb:8c:6d:e1:67:
         64:02:31:e4:1c:fc:0d:ba:10:71:4e:73:65:29:14:28:31:4e:
         85:e5:4b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:09 2026 by rpki-client