Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa282d63-873d-383c-a1f1-22b3ca2ccddb.roa
File:                     fa282d63-873d-383c-a1f1-22b3ca2ccddb.roa (raw, json)
Hash identifier:          eSwY3omLYxXi7OVdPsV+4tCI/edB6V4vdMSiqgoqjJc=
Subject key identifier:   FD:6D:7C:5A:39:3B:71:D4:EC:68:B8:7F:94:66:3A:C6:EC:2C:75:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EED523BC311849D36C075F180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa282d63-873d-383c-a1f1-22b3ca2ccddb.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     396546
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:3b:c3:11:84:9d:36:c0:75:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=30a52ed1-f57f-4284-a4a2-e09ebf9b6071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0c:0e:e9:84:0b:67:8c:8e:6e:5a:f3:ff:0f:
                    83:25:3c:05:49:c5:2a:43:fc:d4:37:bf:e5:02:ce:
                    d1:56:5d:c2:ac:07:1b:71:0a:bc:93:49:fa:e8:75:
                    da:a9:b6:2b:26:2e:39:01:ba:9b:93:28:10:77:9b:
                    13:8c:8d:da:49:f9:31:cc:df:df:a7:6d:7e:91:67:
                    34:5f:b2:b6:9d:5f:74:ca:54:60:6c:fd:ba:a2:f7:
                    39:1c:34:e0:7b:9f:18:63:0b:99:e0:fa:3a:2e:e6:
                    d9:86:24:af:e6:37:51:aa:c0:e0:b7:71:a6:39:3d:
                    25:4d:33:76:cb:f8:77:62:c7:97:89:56:2c:50:99:
                    5b:72:38:9d:ff:e2:dc:ae:b2:d5:a3:07:8d:fb:67:
                    74:ec:4b:d9:3e:af:f3:05:c9:5f:b4:13:06:1c:c1:
                    72:da:dd:ee:c2:21:2d:6e:3d:29:6e:50:e4:bd:b6:
                    f3:e3:70:cf:64:00:cb:e1:1c:de:23:98:e9:8a:e1:
                    5b:9f:22:f8:b6:9e:1b:77:1e:1c:29:2b:96:ed:30:
                    85:ad:bb:64:46:21:3d:8e:a8:72:db:0d:ff:98:e1:
                    6d:5c:63:68:e8:9e:99:11:43:09:ff:b1:ea:f1:96:
                    ac:f1:a8:a6:6d:22:a6:c8:b9:0e:f5:59:0e:eb:f7:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6D:7C:5A:39:3B:71:D4:EC:68:B8:7F:94:66:3A:C6:EC:2C:75:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fa282d63-873d-383c-a1f1-22b3ca2ccddb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:0e:ae:36:d8:18:07:9b:a4:bc:5b:81:6a:ad:e4:fe:75:fb:
         c1:96:13:bb:30:f0:1f:bc:ae:84:b3:90:36:58:8c:d5:90:e3:
         32:a3:bc:06:3d:d5:73:63:fc:73:74:dc:c6:d7:bc:67:f9:27:
         34:27:5b:be:f3:27:22:02:89:e7:31:13:2e:3f:79:4f:3c:98:
         b7:d3:4c:2d:61:ad:01:78:0a:c9:ce:ee:3a:32:b7:4d:d1:dd:
         ea:27:18:3b:cb:62:64:d0:78:06:6c:4d:36:f5:89:4a:58:94:
         28:72:ae:9a:2c:d9:34:a2:50:ea:cc:46:96:0a:e9:b8:7f:c1:
         69:86:7e:02:10:82:e8:c8:3d:69:19:0f:fd:15:ef:03:4f:ec:
         1c:f3:de:0d:20:61:6a:d3:65:95:5a:c6:52:7a:8c:02:d4:8d:
         59:40:03:d6:6f:3d:78:33:5d:12:37:d0:ba:59:c8:55:2c:2a:
         16:8f:2c:f5:ec:3d:54:67:25:a9:d5:3f:7a:87:35:3e:46:27:
         62:4a:bc:e5:72:a6:4f:15:65:f7:c9:c5:18:1a:b2:31:0d:8f:
         89:2d:ae:6c:e4:d5:cc:5d:ee:ef:77:c7:2e:12:a2:0d:f9:12:
         3e:1b:af:30:4a:38:52:b5:22:b3:05:42:67:6e:d8:92:f3:80:
         64:c2:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:54:58 2026 by rpki-client