Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e460f4cd-7b0a-3be1-bb14-8f0c3c5da43f.roa
File:                     e460f4cd-7b0a-3be1-bb14-8f0c3c5da43f.roa (raw, json)
Hash identifier:          zT1XrPoyjLJ3WqUEU6r+6M0pPx4VpnV27rS+NiOcRUE=
Subject key identifier:   EC:4C:EB:8D:D3:5A:5C:30:1C:EC:D8:42:C5:1F:44:5A:42:08:8E:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA17AAA59E85A2835203AFCD8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e460f4cd-7b0a-3be1-bb14-8f0c3c5da43f.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     396603
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:aa:59:e8:5a:28:35:20:3a:fc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=07e12a0a-59f6-44e7-bf38-df20520086d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:33:7b:95:a0:49:55:b5:a5:ff:5f:2d:9d:9f:
                    53:ed:03:39:53:be:77:cd:38:3b:90:c0:b0:81:a9:
                    9e:ab:f1:d2:68:54:73:14:91:b7:4c:95:ee:cb:32:
                    e1:38:7c:59:df:40:f9:5f:da:e9:44:08:a4:75:3a:
                    04:f8:f1:5d:56:59:ed:ec:ea:a6:b5:b0:3f:cd:ed:
                    5e:c3:44:e0:12:8a:59:5a:1a:ed:3c:72:76:e8:20:
                    9d:d5:8a:4c:ae:51:9e:32:f9:75:dd:0c:ef:7a:d7:
                    f1:81:42:e9:39:0c:43:3d:1a:f7:6c:ff:46:fc:00:
                    1c:71:fe:a3:49:0f:89:2d:1a:b4:37:fd:05:c2:7f:
                    b5:b5:53:42:fe:a4:93:ab:38:b8:38:9a:1c:4f:93:
                    5d:cb:73:9a:29:cc:6f:00:5b:f1:2d:49:9f:5c:e5:
                    7a:9a:99:cf:4f:b1:5c:41:aa:75:44:94:46:d9:8c:
                    e2:0b:48:d4:d0:9f:c5:c6:04:62:e4:8a:87:d4:28:
                    17:40:1e:4d:22:40:3a:9c:45:46:ac:98:01:16:b8:
                    70:bb:6d:56:74:51:a5:9f:47:88:8d:ad:b4:78:fc:
                    9d:2a:65:96:3c:29:3d:10:f8:b9:df:05:90:02:9c:
                    91:13:98:75:58:7c:15:56:81:e2:4f:55:6a:68:6f:
                    b3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4C:EB:8D:D3:5A:5C:30:1C:EC:D8:42:C5:1F:44:5A:42:08:8E:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e460f4cd-7b0a-3be1-bb14-8f0c3c5da43f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e7:cf:0f:f9:88:63:ad:d7:3b:18:32:c9:9e:c2:fa:65:43:
         f9:00:c6:61:06:cc:fa:a5:5b:34:3d:a5:31:50:b4:28:0a:56:
         a9:9c:54:24:aa:37:ef:40:d7:04:ec:f5:b3:40:fe:7b:9c:77:
         9b:ff:03:72:28:1d:dc:05:ad:a0:45:2f:76:36:82:b8:4b:68:
         e2:31:a8:9b:36:cb:d0:92:3f:da:3d:fb:95:a1:fe:e8:96:b9:
         fe:27:4b:3e:70:a1:67:cc:50:66:7e:ad:56:f5:cc:64:27:4a:
         fd:2a:e8:02:92:8b:ac:07:ea:72:aa:10:97:68:4f:0e:dd:31:
         f1:de:0d:e6:35:d5:02:fe:1c:f5:4f:54:20:78:06:29:b3:6b:
         36:46:7c:15:f5:e5:36:68:61:6f:07:f8:b7:53:fb:d7:eb:08:
         e6:8a:41:27:10:71:27:57:35:5c:22:4b:7b:4a:03:7d:23:e1:
         34:0c:76:b3:dc:7c:8d:9b:bc:cb:40:e9:ad:8d:e5:16:e2:c4:
         ad:d4:23:fd:ef:d7:c5:ad:28:61:36:05:a1:d2:53:ff:97:bd:
         da:1f:55:b9:0b:e3:be:d1:62:f3:f9:73:19:09:6b:cc:31:4b:
         f9:4d:ff:3a:03:e7:91:5b:2e:86:42:d0:2f:b6:e4:f2:1e:92:
         22:07:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:34:09 2026 by rpki-client