Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a8e510-bc92-3110-915a-43642ba525fd.roa
File:                     f4a8e510-bc92-3110-915a-43642ba525fd.roa (raw, json)
Hash identifier:          2UpgejHciG6thqElBZe+WApBZ+JP+YOWtKShs8ZPtDk=
Subject key identifier:   E0:63:87:8A:90:D0:39:D4:64:3D:5E:D6:A2:80:37:36:33:D6:0B:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78F2DB76F5EAF8338078D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a8e510-bc92-3110-915a-43642ba525fd.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36626
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:2d:b7:6f:5e:af:83:38:07:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=07942fd8-d500-4944-9312-2dbb8b947d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:1e:d4:00:33:f1:9f:6a:14:88:64:98:6e:
                    36:6d:ad:b2:9a:a0:f7:70:a8:19:66:cd:57:3a:bc:
                    2a:73:7c:6b:c3:a6:d7:28:37:8b:39:e8:8b:59:cd:
                    01:e1:f9:ff:60:a4:b1:43:9e:20:aa:97:db:bb:b3:
                    4e:c5:94:fa:8f:92:6f:dd:9a:c9:e9:f1:58:04:f8:
                    90:29:47:e3:6b:ee:89:38:59:33:46:01:a1:a2:61:
                    31:ac:87:1c:22:08:a1:1c:19:f2:42:31:a9:67:51:
                    42:f8:f9:31:70:ba:fa:9a:94:7a:2c:82:12:9f:9d:
                    f9:00:11:8f:9e:8a:9f:74:f7:cb:46:be:03:d3:80:
                    4e:09:06:99:bf:e8:01:a7:92:ff:20:a4:7a:2c:f8:
                    17:4d:b7:ba:c0:aa:d5:5b:66:7a:51:de:ac:de:86:
                    ac:59:5f:93:bb:70:36:22:01:3c:01:05:54:5a:09:
                    5c:f7:71:58:ea:11:25:65:aa:72:ca:08:8a:a8:03:
                    37:66:9d:a8:b7:41:58:f2:f2:0f:3d:b7:85:83:07:
                    05:a4:f9:11:c1:18:f0:98:4a:67:bc:b4:e3:97:52:
                    42:2b:be:79:03:1f:53:d3:e4:c5:a0:c6:cf:40:1a:
                    e3:b6:ae:58:47:82:83:a1:a7:46:eb:35:82:56:ba:
                    6c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:87:8A:90:D0:39:D4:64:3D:5E:D6:A2:80:37:36:33:D6:0B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a8e510-bc92-3110-915a-43642ba525fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:97:e4:a6:cf:a7:13:65:8b:7a:c0:e6:44:a0:06:b0:8d:51:
         3e:6b:c0:da:bf:0d:20:5c:0a:29:2a:78:49:2f:82:9a:a5:73:
         4c:a1:8f:1f:73:c5:70:f5:84:de:76:53:5a:d2:8c:08:c5:02:
         80:9e:a1:9b:81:53:73:8d:f1:d7:86:86:b4:19:75:1b:a6:fa:
         bd:f3:99:25:8d:0f:19:25:19:9a:de:0e:40:6f:10:ad:64:95:
         2a:74:5c:81:52:a0:1e:27:f3:8b:bd:c8:c2:cc:31:3e:91:4a:
         15:e8:ed:b0:9c:d0:9b:16:fc:bf:70:69:5f:c1:85:a6:02:83:
         69:37:6c:73:26:02:55:2e:4b:41:30:63:b8:ee:c0:54:ed:38:
         df:7c:a7:90:d1:13:b1:5d:0d:69:07:b9:4a:cb:be:2f:ca:b3:
         11:0d:8b:40:28:12:96:ab:88:d7:56:df:aa:b7:50:87:47:4a:
         97:10:5d:c1:27:e8:29:17:80:12:91:d3:00:5b:9f:99:3f:97:
         b5:17:29:3d:03:74:45:77:80:d3:a2:52:90:87:81:16:be:3c:
         9e:d7:85:da:34:b1:8d:a2:ff:da:bf:8c:06:33:5c:a0:6f:10:
         68:e3:25:06:43:f8:fe:ce:f0:84:b4:25:ea:ca:ae:a0:89:2f:
         d3:cd:8d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:33 2026 by rpki-client