Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08626e0d-3b3a-3142-926e-37835e05307d.roa
File:                     08626e0d-3b3a-3142-926e-37835e05307d.roa (raw, json)
Hash identifier:          gaokXXI05CrWSPDRJyxjdMygIzjhp0h0Lqhi63a1oMA=
Subject key identifier:   47:9F:C3:37:95:B6:A2:6C:5A:D3:3A:EA:6A:E2:01:33:B2:CA:EA:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC482A2651719532DFEB880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08626e0d-3b3a-3142-926e-37835e05307d.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     36619
IP address blocks:        192.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:82:a2:65:17:19:53:2d:fe:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=cab487e7-3054-4174-bbdb-d514ddd91bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d9:65:e9:fe:f5:49:c0:5c:da:29:b0:4f:20:
                    eb:2f:84:c3:da:73:65:a5:cf:ee:c8:4a:f1:f4:3c:
                    3d:91:1e:2a:b3:60:7d:e6:b0:8e:13:46:90:1b:63:
                    6b:99:fb:ab:df:22:2d:29:6a:25:c4:ba:80:dd:73:
                    dd:74:63:9b:fa:f3:04:10:ab:a1:a9:88:9d:b0:27:
                    dc:47:0a:85:d6:48:ac:3f:46:f1:4b:ae:8c:14:83:
                    dd:f2:10:ea:ea:a1:54:af:64:65:fc:b3:16:69:84:
                    b3:ee:72:5a:d9:ea:58:a5:80:eb:4a:64:8c:05:83:
                    70:de:20:f3:cf:27:2c:da:8e:de:13:d7:f5:cd:8f:
                    04:e4:77:26:11:d2:a8:99:49:25:ba:c0:e8:34:bc:
                    2c:bf:0e:31:3f:cd:37:7e:e0:59:5c:ef:68:8c:5d:
                    d0:47:87:f0:c8:b8:a8:5a:b9:a7:8e:33:a3:20:ff:
                    b0:e9:84:1b:2d:2c:bd:15:21:65:86:ca:bc:59:ab:
                    4e:58:c3:06:5d:f9:6e:40:be:52:cc:f1:c9:8c:4d:
                    69:41:35:36:a3:d7:da:38:2e:76:c4:ee:41:6e:f1:
                    38:3b:33:76:c6:d0:08:a0:1a:66:2a:93:dd:f8:1c:
                    95:ee:bc:26:20:ad:2b:5f:d9:82:e8:cb:d2:48:7d:
                    ea:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:9F:C3:37:95:B6:A2:6C:5A:D3:3A:EA:6A:E2:01:33:B2:CA:EA:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/08626e0d-3b3a-3142-926e-37835e05307d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:c2:68:2f:c2:32:f9:1d:3e:15:e9:01:fb:8e:c0:b1:0b:51:
         7b:c8:61:16:4e:e4:10:c1:23:fc:46:52:c5:91:bf:38:d7:77:
         fe:34:0a:55:9a:31:b2:56:12:8f:0e:b0:36:4b:a5:fc:5c:91:
         72:38:de:f2:8b:22:7a:60:4f:dc:e8:66:fe:ed:35:4b:31:02:
         3d:5a:6c:1b:d3:21:48:bd:ac:0e:95:b0:61:53:25:0b:ab:01:
         86:04:97:2f:30:4e:ee:4a:a7:34:e1:26:c3:7c:ea:d8:54:52:
         23:8e:39:6e:74:ad:4a:d5:2b:26:d0:94:c9:65:15:f9:83:4a:
         24:b9:38:ca:d7:bd:df:08:cc:b1:4b:52:80:31:d2:24:92:bf:
         d6:5f:b7:f4:cf:a5:bc:9c:a1:dc:bb:2f:81:af:f0:3d:ae:99:
         5d:c7:8a:86:f5:25:77:04:4e:87:df:e5:62:04:58:21:15:ab:
         0b:0c:74:50:c5:bd:ed:f2:67:dd:84:4a:2d:d6:a2:f1:b1:93:
         53:e7:84:e6:86:67:00:7a:bd:c6:af:e1:91:4a:b7:55:f7:12:
         9e:3f:ef:ee:a2:7a:d3:40:0b:67:33:6d:c1:4c:59:9b:c4:16:
         44:f2:9b:23:f8:e7:63:d3:ce:42:da:bf:77:cf:ef:d6:ad:51:
         cc:39:98:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:39:36 2026 by rpki-client