Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5c8c03a-6909-3b2d-81a5-05ccf6e56d51.roa
File:                     f5c8c03a-6909-3b2d-81a5-05ccf6e56d51.roa (raw, json)
Hash identifier:          ROmyZQHFwmForRGzh9BLHH8NgiANhTAG3aEnkL4n/4I=
Subject key identifier:   3A:82:AF:DE:F6:BB:03:6D:44:46:63:00:52:FF:B4:C0:5A:DE:95:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1CC7A26D97A54DD111270C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5c8c03a-6909-3b2d-81a5-05ccf6e56d51.roa
Signing time:             Wed 09 Sep 2026 01:00:11 +0000
ROA not before:           Wed 09 Sep 2026 01:00:11 +0000
ROA not after:            Tue 08 Dec 2026 02:00:11 +0000
asID:                     396543
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1c:c7:a2:6d:97:a5:4d:d1:11:27:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  9 01:00:11 2026 GMT
            Not After : Dec  8 02:00:11 2026 GMT
        Subject: CN=51029aa5-49e6-48a3-afd3-451fc795d810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:98:bc:d7:19:4f:35:4e:ee:c7:58:8f:13:8a:
                    ab:25:6c:e1:60:86:1f:4c:2f:9f:31:24:b3:7d:15:
                    1a:aa:dc:5e:1b:15:5f:6c:53:76:72:c7:17:69:eb:
                    11:21:bc:3a:df:ee:ce:60:69:39:5f:ca:f9:d8:69:
                    fc:d1:fc:2c:d9:17:6c:fb:e3:64:a5:32:c9:db:64:
                    68:05:f2:7d:9c:83:f9:69:19:85:03:b2:e1:ec:10:
                    b0:bb:d8:8e:dc:a0:47:7d:b7:c4:7d:1b:34:30:d3:
                    b0:39:60:3d:44:ba:21:26:b5:d7:a8:8b:ac:03:7c:
                    5c:f3:57:16:6c:bd:74:01:4f:2c:87:1e:2e:20:96:
                    79:05:81:7a:f9:ec:2c:db:47:cd:8d:74:5f:a0:9f:
                    98:ec:34:92:ff:60:85:6d:d8:67:36:72:34:70:50:
                    19:c9:95:d7:64:05:d7:07:5f:90:86:26:15:8f:98:
                    74:5c:4f:8d:7f:96:86:fc:a3:6b:08:b8:f7:e3:b9:
                    d1:29:ee:5a:05:ac:72:64:d8:eb:b5:41:ef:40:9a:
                    80:15:70:02:3d:9e:d4:c2:7c:58:a3:46:29:a4:2d:
                    57:4b:4c:30:83:c7:ea:0b:c4:14:6c:c9:ef:28:cd:
                    c4:e1:b9:fc:ae:fb:1a:7e:67:6c:04:7c:fd:43:a8:
                    20:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:82:AF:DE:F6:BB:03:6D:44:46:63:00:52:FF:B4:C0:5A:DE:95:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f5c8c03a-6909-3b2d-81a5-05ccf6e56d51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a3:a9:c2:5a:5f:f7:9f:44:9e:cb:68:94:3e:98:7a:5a:d6:
         ad:a0:f2:62:1a:8d:7b:9c:8e:05:76:16:71:34:32:bd:3e:4f:
         55:03:15:52:9b:9d:a4:0b:3b:52:2b:77:a1:a7:31:36:fa:35:
         36:39:a4:4c:3e:ef:d7:05:07:e2:38:d3:72:18:1f:a0:25:93:
         31:5e:69:5c:60:c8:3b:38:b5:1a:30:20:4c:b8:c2:b5:b8:a3:
         97:5a:2c:a9:a0:d9:ff:bf:82:33:86:85:21:62:e6:f0:d2:d5:
         9b:49:12:85:2d:e0:24:42:32:07:97:56:b1:b3:a8:54:75:45:
         eb:68:85:2f:45:ae:01:b8:00:69:1e:67:ca:29:cd:f0:26:ad:
         53:c7:2e:e8:01:d5:34:62:98:d1:77:d7:14:fe:8d:45:1f:98:
         42:af:e6:39:bd:c2:6e:dc:79:96:d0:38:33:24:a4:ed:51:3b:
         b2:20:01:0b:e3:ff:9f:b1:4d:4a:6d:ee:ad:7b:9c:2d:aa:5c:
         5f:39:97:42:e7:71:c6:dd:46:1f:37:36:98:a8:94:55:4e:6a:
         83:a1:93:b4:3d:83:e1:04:4e:57:12:8b:5c:9a:29:cf:43:bf:
         dd:8d:9f:8f:bd:8a:fd:ce:03:03:74:ce:20:a8:7a:d9:df:55:
         9d:7c:37:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:44:13 2026 by rpki-client