Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0919e30e-f1d9-3f23-96ae-4e9b029f546e.roa
File:                     0919e30e-f1d9-3f23-96ae-4e9b029f546e.roa (raw, json)
Hash identifier:          SkK0u8mWFSwkjZlX8MijXIgU1qOnicw6PWq/CxoZN8I=
Subject key identifier:   C9:4F:C4:84:01:AF:E3:D9:9B:9C:D0:31:3C:F1:75:6F:40:CE:29:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED431D5ECF3F1873770CB5980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0919e30e-f1d9-3f23-96ae-4e9b029f546e.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     40717
IP address blocks:        192.52.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:d5:ec:f3:f1:87:37:70:cb:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=905b96c4-a65a-4ca0-9182-339654536f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:36:c3:56:12:78:d0:0b:3b:1b:c7:94:42:a1:
                    17:2b:e5:a4:63:b4:0b:95:25:c4:63:c4:c4:a6:07:
                    a4:2d:20:63:69:1d:27:60:61:f7:42:e2:e6:71:4c:
                    2b:08:6d:dd:17:49:70:40:dd:82:a0:9b:2a:f8:fa:
                    89:14:a8:49:c8:63:6d:93:f2:4b:24:5c:b5:88:0f:
                    bd:4f:be:42:9f:00:f5:77:60:8a:64:6b:7d:e2:e9:
                    27:12:55:be:37:13:25:d7:aa:d9:58:ca:91:70:1e:
                    79:be:ec:04:a5:31:bb:af:dd:b2:a3:44:d8:89:d5:
                    d2:ec:9f:79:f6:3d:48:5a:15:49:7b:fd:fc:4f:51:
                    ed:57:20:01:29:40:1f:a9:95:e5:ed:da:a3:0a:8c:
                    e4:a2:8d:d3:11:d4:7c:27:da:7a:72:dc:0d:10:39:
                    a5:e7:48:a1:73:0e:c0:6e:b9:56:7d:84:cc:d6:82:
                    0f:5c:ee:5f:d5:5f:04:79:67:26:97:bb:06:2e:2a:
                    bb:aa:6d:b4:3c:d3:6f:a8:bb:64:c8:fb:30:73:26:
                    ef:bb:2f:5b:43:d1:6d:95:26:20:fa:af:bb:61:39:
                    25:76:dd:f7:b0:05:9c:0a:29:01:7d:91:b5:87:73:
                    1a:29:c5:41:2e:b7:16:73:f7:04:a0:7f:41:0a:66:
                    b7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4F:C4:84:01:AF:E3:D9:9B:9C:D0:31:3C:F1:75:6F:40:CE:29:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0919e30e-f1d9-3f23-96ae-4e9b029f546e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:33:40:36:98:62:41:68:bf:b8:65:3d:65:64:1d:8a:41:5a:
         9a:1a:63:f2:5a:72:e8:8a:84:1c:1c:2c:29:55:5c:a8:7d:11:
         70:5e:5d:4a:0e:11:bd:a5:27:fa:42:49:82:3b:d9:f6:45:73:
         90:fa:cb:30:d6:61:5d:c6:57:1a:5b:6f:97:3d:48:71:11:c8:
         ac:a4:a1:6b:36:06:85:c2:0f:c0:71:b0:e8:c3:93:c0:52:12:
         bf:22:21:2f:bc:b6:09:d3:91:e9:c9:49:60:b4:f2:0d:f2:cc:
         27:22:c6:1e:b3:39:42:60:e7:71:e3:2c:d3:c1:31:ce:8b:f3:
         e1:bf:c5:7d:1e:57:ed:91:17:a8:78:5d:fb:ef:8e:b6:2f:4d:
         37:d7:86:8b:46:48:bd:a3:9e:72:de:c6:79:86:c7:47:55:0b:
         f3:8d:28:3b:91:5a:6b:9c:f7:0f:bf:98:7e:cc:2b:8e:39:5f:
         80:97:56:24:31:bc:05:9a:d5:15:fd:05:7d:df:91:5f:38:69:
         24:2a:a4:8e:a3:d3:c5:7a:b1:26:56:24:55:05:d6:f8:58:c5:
         44:f4:4b:08:13:7e:b9:58:41:a3:72:3c:70:f6:85:ca:e5:5e:
         f6:bb:06:0c:43:44:36:a8:53:13:17:8f:69:6a:ef:3a:18:ff:
         02:aa:25:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:35:37 2026 by rpki-client