Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a8e510-bc92-3110-915a-43642ba525fd.roa
File:                     f4a8e510-bc92-3110-915a-43642ba525fd.roa (raw, json)
Hash identifier:          4Mrjg16zE+Zgky0s98nahFzBz4Lc8rpOC9e1H3ZFxMA=
Subject key identifier:   38:9A:AC:C0:BC:D8:44:97:89:19:BC:EC:1C:A9:C5:A4:DF:CE:10:5E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE1506B373635E1977DC84880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a8e510-bc92-3110-915a-43642ba525fd.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     36626
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:6b:37:36:35:e1:97:7d:c8:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=5cdeb5cf-7c17-4817-a89e-953879a83e58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1c:32:cb:76:ae:be:06:1d:b3:46:fc:da:7f:
                    6d:be:dd:b5:83:25:3b:1f:45:3b:05:e8:b1:6e:3b:
                    51:03:71:37:9a:34:30:fd:51:33:d2:f0:ed:30:d0:
                    94:85:01:b8:7c:5a:85:f0:0a:94:d5:a0:fd:75:43:
                    f9:e5:e3:26:9e:d0:96:1d:2d:02:70:22:6c:5a:fd:
                    b5:fe:1e:a8:be:de:3a:50:fd:d7:0a:23:1c:8c:77:
                    42:ee:a7:b2:a4:a8:76:6b:31:9a:3a:02:78:8a:80:
                    de:a4:8b:3f:43:16:b3:8c:23:19:e3:cf:46:49:ba:
                    83:ee:a0:99:ae:bc:d3:5f:e7:bd:39:f8:34:a3:65:
                    c7:49:11:0a:1a:92:f2:22:db:bd:85:ad:90:fa:87:
                    88:92:cd:ff:fd:14:d7:47:03:86:64:ce:73:49:63:
                    0d:e8:44:16:0f:df:a0:12:4c:e5:4c:a1:ef:0c:d5:
                    59:91:31:83:1b:2d:d9:87:e3:77:6b:7a:26:13:eb:
                    fd:98:4a:44:a8:72:2e:17:b6:3e:aa:e7:c0:c6:a5:
                    29:2b:bb:46:e9:0a:d9:03:8c:1b:eb:43:77:ae:82:
                    81:b1:ee:4c:53:74:83:2d:6f:25:65:18:3d:b8:50:
                    6e:c5:bf:47:bb:28:66:a3:a9:ea:6e:c5:34:9c:25:
                    f4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9A:AC:C0:BC:D8:44:97:89:19:BC:EC:1C:A9:C5:A4:DF:CE:10:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f4a8e510-bc92-3110-915a-43642ba525fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ef:3a:35:50:a0:42:db:d6:f4:ab:48:41:35:f9:0e:27:e8:
         2a:8c:4d:1e:f7:8a:79:b1:de:31:d2:c3:21:b3:cf:08:29:06:
         98:61:4c:fe:2c:f5:32:0d:62:40:e4:94:2f:d5:aa:dd:ef:b3:
         c3:44:14:bd:8d:4b:00:8e:85:78:01:4b:9c:cd:bc:23:1e:a3:
         a9:2f:2f:e3:29:aa:48:3e:a1:65:fa:6e:5a:15:88:b0:6b:07:
         f1:86:e4:a1:34:5c:ca:20:1a:a6:85:b3:5f:cc:4c:04:06:1d:
         84:01:cf:c9:12:05:c1:1d:1b:32:76:a9:cd:e0:da:51:2f:56:
         9d:e6:17:80:29:f8:7a:ec:2f:f8:5d:72:7c:d6:38:a1:e6:9c:
         bc:60:d4:9f:46:90:7f:59:dc:df:0b:c2:70:c4:0c:69:b3:85:
         07:b2:5c:c2:59:3f:0d:34:62:20:ce:e3:34:3f:de:4d:fb:a0:
         2b:57:5b:22:c0:86:c2:d7:1a:38:92:9e:30:bb:f3:60:e4:e0:
         cf:f6:93:a8:51:bb:15:07:76:f0:1e:01:51:1b:83:ee:73:74:
         0a:51:fa:14:cb:a2:19:f3:e4:53:19:95:5c:cb:5e:25:45:b4:
         4b:09:de:bf:69:82:31:90:91:72:13:5f:71:f1:b0:33:af:e0:
         6a:2b:63:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:03:34 2026 by rpki-client