Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef3cbeb7-6fcd-3f9f-b68e-24db1301def3.roa
File:                     ef3cbeb7-6fcd-3f9f-b68e-24db1301def3.roa (raw, json)
Hash identifier:          vBLLKnbPCtFb4AmS7AzXxstKIiryGQal+XiM1600pPY=
Subject key identifier:   9E:94:44:34:F0:5D:92:0B:B8:D4:6B:63:73:D9:5A:FA:00:15:2E:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EF2E7648DB8A09259D5A4F428
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef3cbeb7-6fcd-3f9f-b68e-24db1301def3.roa
Signing time:             Tue 25 Aug 2026 01:00:12 +0000
ROA not before:           Tue 25 Aug 2026 01:00:12 +0000
ROA not after:            Mon 23 Nov 2026 02:00:12 +0000
asID:                     396608
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:e7:64:8d:b8:a0:92:59:d5:a4:f4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 25 01:00:12 2026 GMT
            Not After : Nov 23 02:00:12 2026 GMT
        Subject: CN=2fde1881-7737-4907-b63e-81c1496c39cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c6:78:ce:4e:7d:8f:fb:95:69:b3:07:12:4e:
                    79:da:e0:26:30:87:04:3c:bc:99:44:29:49:c4:b9:
                    17:37:17:fa:f6:f4:af:d9:7e:f5:e2:05:01:28:d3:
                    e8:18:04:5d:11:77:d1:72:3f:ba:a2:87:b5:c6:42:
                    3d:6c:59:ce:00:e8:41:fb:71:7b:d9:4b:aa:36:06:
                    86:d6:36:77:97:67:19:59:2e:f2:59:e8:48:a1:92:
                    4f:ac:4e:b5:34:05:3b:c3:74:4f:f2:60:57:fb:58:
                    ce:c9:e0:0e:a2:33:03:cf:16:31:e2:85:4c:72:de:
                    23:b2:2a:45:a0:f9:a2:32:9d:a9:95:8f:e4:e2:59:
                    f7:a4:55:3a:ab:dd:98:18:15:7d:0c:30:28:76:c5:
                    8a:a1:48:d6:82:23:be:ec:f0:b6:7f:8c:dd:d0:cd:
                    82:13:2f:9d:3d:ef:2c:ab:6d:c2:34:81:18:9a:31:
                    23:cc:a1:4a:98:33:1c:7e:31:f2:0a:a4:c9:6c:57:
                    3d:83:b1:21:f6:df:67:f2:f9:70:50:3a:9d:5b:01:
                    30:0d:db:5e:74:52:47:68:65:dd:83:ff:53:59:96:
                    79:7c:31:f4:ac:26:52:5b:cf:29:29:38:47:ca:5c:
                    c3:a5:27:37:b3:5f:54:f2:fd:67:59:33:98:21:f2:
                    48:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:94:44:34:F0:5D:92:0B:B8:D4:6B:63:73:D9:5A:FA:00:15:2E:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef3cbeb7-6fcd-3f9f-b68e-24db1301def3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:0e:9c:e6:71:53:e9:05:03:93:63:8d:24:ce:46:e8:5f:6e:
         3b:bf:ee:43:99:02:09:ca:e5:c6:f1:72:42:9f:67:20:01:6c:
         cc:37:b4:a0:1d:dc:37:ea:6c:11:65:06:8a:ba:3b:31:44:24:
         55:43:d4:60:80:34:52:22:a4:e1:69:1f:cb:2f:73:66:b3:2b:
         45:25:62:fc:01:ba:4b:99:c6:cf:92:27:27:36:4a:81:9a:32:
         fa:0a:b8:f0:c4:26:db:e2:dc:83:65:7b:d9:c2:f3:4e:96:78:
         a8:ee:da:52:17:1c:e2:74:22:c8:0f:67:e3:84:ca:9f:22:cb:
         59:82:7d:9d:a4:b8:24:ba:ff:ab:e3:54:d4:5a:05:c2:55:81:
         ac:41:23:18:81:b9:19:3f:f9:cb:d1:51:d2:c9:c6:d7:f7:06:
         1d:d5:eb:53:81:98:01:79:a1:df:b6:f1:05:fd:8e:4c:99:75:
         92:7c:13:57:5b:c5:ec:04:b2:15:80:9e:78:5f:6e:d0:07:75:
         04:93:1d:c4:8b:ae:cf:2b:4c:b6:9e:3b:31:b3:5c:49:1c:e3:
         7d:ef:5a:19:dd:74:08:d4:22:d5:8b:4e:b8:74:35:12:71:72:
         7c:5a:cc:7d:ef:e0:70:c1:41:fb:42:7f:11:3c:2f:79:25:81:
         26:99:04:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:01:06 2026 by rpki-client