Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa
File:                     0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa (raw, json)
Hash identifier:          iXR07NU0ifm/o0Om+eR5N9ngAJd4NY4krwGd8A+IDyc=
Subject key identifier:   C8:63:98:81:BE:51:A7:DA:13:36:1E:2F:28:17:2D:A0:3E:F3:B7:E1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC0A75B7852EB0A00FAF66BC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396694
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:5b:78:52:eb:0a:00:fa:f6:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=b9a093b7-00e3-4807-a308-f8232762398a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:11:67:ba:4d:d5:fa:16:1c:63:b3:28:10:
                    b0:47:44:64:5e:06:8d:70:72:9d:58:b5:10:d1:c0:
                    ee:4c:5f:e8:89:d2:95:97:af:0c:97:44:99:55:8a:
                    28:18:61:80:ac:bd:a3:aa:3f:01:00:c1:cb:be:3c:
                    c4:7d:6a:99:f4:73:6e:60:c1:0c:06:52:b1:db:4b:
                    bc:39:87:00:ee:db:b9:eb:4a:da:82:8b:9b:09:8f:
                    73:e5:6c:72:0c:66:9c:fd:2a:f9:b6:f9:fd:56:42:
                    41:8a:8f:27:70:c2:97:80:1a:a2:5e:d2:72:01:e4:
                    8b:2a:53:13:ae:5d:44:bd:aa:2a:3a:6b:ac:ab:19:
                    43:9a:c6:26:30:d5:7a:43:22:df:ee:4c:f2:63:9e:
                    e5:78:41:74:ff:80:68:54:cd:b6:62:b8:b4:bb:57:
                    46:01:a3:3b:62:b0:f1:ae:10:98:fa:d3:bb:db:0a:
                    a4:4e:72:dc:4c:f2:14:66:3e:e1:44:c8:54:d8:15:
                    f6:da:20:b3:2e:4d:c1:69:d0:09:fc:73:32:62:87:
                    96:46:3c:bc:ab:be:f6:79:89:89:3f:1b:b8:9c:23:
                    8f:8c:67:0e:b9:cd:ea:50:a3:33:c1:da:8f:2e:31:
                    89:d7:9d:ba:bb:28:47:34:b7:3d:be:4e:b9:ba:34:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:63:98:81:BE:51:A7:DA:13:36:1E:2F:28:17:2D:A0:3E:F3:B7:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0ee87ba0-6e6c-3046-9435-0071ddbc60be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ce:21:22:e6:ef:ce:f1:56:38:71:f7:c5:87:9f:3c:5c:a2:
         93:e1:08:95:8c:7a:a4:45:e7:17:1f:a0:5c:a6:94:51:e9:24:
         56:84:b5:1a:fb:71:01:50:77:1c:d5:f2:dc:b2:39:de:00:d0:
         00:2b:14:1c:a4:9f:4d:8d:e7:0a:22:96:91:b6:7e:d0:b4:2f:
         d9:80:a1:9c:9c:fb:db:0a:0a:64:ef:f9:65:4c:9d:8e:d8:c7:
         3d:b5:82:64:54:60:86:ab:5a:9b:50:6f:ca:15:9d:a7:88:b8:
         97:07:ef:00:2a:53:27:51:8a:e9:4f:ed:e9:1a:49:c1:cd:c3:
         2d:c8:35:a2:8b:9e:aa:08:bb:3c:51:56:a6:fc:ca:6b:da:61:
         aa:ce:d9:5d:2b:b7:70:07:e6:d9:f0:01:91:43:e1:38:7a:65:
         26:74:b4:6d:e5:90:9e:6c:4c:51:39:97:43:68:ff:6a:18:9c:
         bf:2f:a9:38:a8:ea:64:d9:10:18:f8:b7:82:a7:61:9b:6d:4d:
         de:38:85:1c:5b:68:41:9b:39:e4:7d:13:66:d1:ff:0b:d7:fe:
         7d:17:9b:f8:51:cd:8a:33:12:88:dc:5a:8f:3f:77:73:8b:57:
         0e:39:b1:b9:1c:78:76:c2:3d:8c:15:a5:99:1c:b1:1a:49:a4:
         13:bd:61:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:11:28 2026 by rpki-client