Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2644b1e5-c37b-3085-9123-bab2612b0d5e.roa
File:                     2644b1e5-c37b-3085-9123-bab2612b0d5e.roa (raw, json)
Hash identifier:          P9mInkamT83NxCB9cZGhRKBP6ldRORlunj6uEADNHFY=
Subject key identifier:   B7:08:EA:5C:2D:6A:8F:29:DB:58:5C:CB:C5:9D:6B:01:C3:9C:41:61
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6292C3BABB72B6E70855D480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2644b1e5-c37b-3085-9123-bab2612b0d5e.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     396743
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:c3:ba:bb:72:b6:e7:08:55:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=b8a4dba5-a162-4ddf-ab13-f2f8f3ea7f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:30:b7:38:94:ff:35:b9:ed:ff:97:72:e6:8e:
                    72:00:c7:5f:db:20:73:73:ce:36:66:94:2a:1f:40:
                    ff:3f:d5:9e:d3:b4:52:5a:49:59:52:1b:81:e9:fe:
                    18:08:41:01:30:59:ac:3a:ab:9d:ea:ed:f8:63:1a:
                    e7:04:6b:39:08:f7:10:16:2f:c2:6c:7a:6c:9e:43:
                    d8:85:c6:52:db:74:6c:69:63:64:9d:2c:e9:52:54:
                    ee:75:1a:90:97:59:35:b7:1d:04:97:f6:60:f2:c5:
                    0f:36:00:07:8d:be:c0:ef:28:bd:48:6f:f1:b4:75:
                    f8:79:a4:c8:61:3a:fb:5f:df:3b:e7:91:96:e0:6d:
                    6a:3e:ec:90:85:23:eb:5a:0d:82:f7:21:0b:b8:d4:
                    8a:d1:89:69:85:2c:7d:f9:45:6c:c1:59:b7:12:f1:
                    ca:95:7b:a3:93:3a:0a:4c:4c:3f:b7:fe:4d:0f:e2:
                    11:78:53:8c:d4:b2:ec:8e:72:0c:05:d2:7f:cd:32:
                    2a:b8:91:02:ae:93:8c:58:51:0e:72:7d:68:96:c2:
                    35:79:3a:ac:f2:e2:b3:22:8d:28:d0:dc:61:48:77:
                    0d:40:37:dc:6c:60:00:6a:e1:c2:f4:1f:c0:d5:44:
                    3d:c8:36:50:4a:ed:1f:36:9d:cb:2f:a2:ee:b5:ca:
                    69:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:08:EA:5C:2D:6A:8F:29:DB:58:5C:CB:C5:9D:6B:01:C3:9C:41:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2644b1e5-c37b-3085-9123-bab2612b0d5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:15:7a:0a:e8:50:3d:3b:6d:ef:48:7d:a9:21:6c:f2:65:d1:
         25:2f:49:e1:77:27:ca:d4:5d:0f:ac:47:b0:ab:17:55:1d:e2:
         7f:6a:8b:b4:b0:c6:57:e4:cc:b6:c5:f6:bf:b0:0b:52:b4:6f:
         9f:21:7b:a8:49:f1:4c:65:33:b0:d3:0f:c1:d9:3c:30:d0:72:
         98:cf:d6:f3:51:b7:3b:27:17:51:43:0a:2c:92:32:74:4b:40:
         fd:48:fa:ca:8b:d5:fa:fb:37:ac:77:c2:0f:85:ed:33:76:11:
         fc:d8:3a:ef:c0:67:41:ed:bc:71:f1:c0:4e:c7:1d:2e:d5:70:
         2b:3d:6d:5a:ca:15:48:af:eb:5e:a4:0b:0c:b6:df:5d:ea:b3:
         3b:7a:f1:6e:2d:07:90:bd:26:0f:5d:cd:9d:6b:78:25:a1:98:
         3a:28:e1:dd:dd:3a:f3:00:68:e3:ff:7e:f4:06:f0:6b:f8:b7:
         29:48:44:2a:9d:1b:f9:eb:f1:da:c4:87:3b:46:79:10:89:d6:
         13:51:7b:50:06:b4:1b:2d:f4:e7:4f:11:49:6e:49:99:59:3b:
         42:23:fa:05:a6:7e:4b:61:9f:9a:7a:7f:69:e1:f3:e8:82:07:
         dc:b6:60:cf:3f:6d:6a:48:ab:63:bb:7b:ff:82:38:70:6a:8b:
         7e:79:b6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:19:06 2026 by rpki-client