Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc5a3d-8fd2-3514-aa6e-01e5ff16b662.roa
File:                     2fbc5a3d-8fd2-3514-aa6e-01e5ff16b662.roa (raw, json)
Hash identifier:          Jz8DZwxvrmJUfaTXvaAZsUFmY+9S0kDTO3pyiPI5ZZU=
Subject key identifier:   36:8F:B4:C9:58:08:48:FC:C2:CD:89:2D:45:76:57:C2:06:8F:1B:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EB847445DDBE99AEA20991000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc5a3d-8fd2-3514-aa6e-01e5ff16b662.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     7342
IP address blocks:        192.81.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:44:5d:db:e9:9a:ea:20:99:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=ab45373f-04b7-42ac-a48b-96aaab3c9483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e3:6f:95:f9:f4:ed:5c:6d:c0:05:2c:27:b4:
                    72:c2:06:66:36:1f:bb:1b:d8:c9:b7:68:85:d5:e5:
                    8d:bb:90:e1:2a:67:7d:6d:eb:3d:9c:c2:9f:d4:1a:
                    6c:0d:5b:af:12:b9:d3:1e:17:cc:15:3e:dc:b8:3e:
                    03:93:a6:01:74:8b:79:40:ad:01:ec:1c:4e:65:3e:
                    bd:ba:0b:19:60:82:b7:ea:5e:af:38:83:60:5e:4a:
                    a6:ca:55:15:cb:a6:d8:c6:bc:0c:06:31:ac:07:72:
                    95:bf:13:f3:90:c7:d1:c4:2a:7f:5b:67:8c:59:de:
                    db:15:84:31:45:f3:25:bb:a9:3c:ef:23:be:6c:4d:
                    be:67:05:3d:b0:64:c4:2b:9a:44:d7:c9:da:f6:7e:
                    e7:76:10:e8:ea:b8:9f:71:3e:9b:ee:87:c5:f5:db:
                    f8:0d:e8:b1:77:91:c5:61:58:22:2f:49:c0:ad:af:
                    80:47:ae:a5:f8:fe:e5:b1:64:fe:a3:2a:11:a7:6c:
                    2c:e8:57:6e:25:7a:cc:e2:da:7b:0e:82:ed:43:53:
                    bb:4e:60:b0:54:ca:9f:21:cb:ab:53:b6:f2:e1:f3:
                    09:10:ad:56:a1:ff:c2:c3:97:2a:ed:73:58:4a:64:
                    c1:71:fe:8e:2b:8a:c6:ca:98:4f:cc:c8:ae:30:96:
                    62:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:8F:B4:C9:58:08:48:FC:C2:CD:89:2D:45:76:57:C2:06:8F:1B:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc5a3d-8fd2-3514-aa6e-01e5ff16b662.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:f6:d9:bf:7d:aa:fe:46:7e:cb:b7:95:79:6a:43:b3:ec:f7:
         36:4e:33:ff:10:3d:28:e4:f3:fb:01:2c:ee:e9:d7:2e:3f:6b:
         32:af:4d:94:a5:4a:48:30:7d:02:23:62:56:bd:fe:31:8a:2a:
         e3:4a:eb:4f:12:0a:ab:c0:28:f0:76:95:ac:8c:1f:b2:ce:7e:
         72:9e:05:16:7f:0c:d0:aa:8c:c0:83:fc:5d:0b:aa:10:1c:5a:
         8c:77:bd:36:9f:d9:fc:8f:88:04:d9:b7:ca:d0:b0:f4:ae:83:
         e7:63:04:ce:27:26:98:4b:1a:be:0f:ac:f1:f2:da:97:1e:6c:
         ed:bb:42:fb:c7:54:48:d8:16:17:7f:ec:ba:91:5d:e8:f1:d3:
         3f:ed:0a:67:e6:cb:29:56:fa:ba:17:c3:66:e6:09:d5:9e:b3:
         b9:34:c9:14:b9:db:e4:5d:0e:3b:33:23:90:dc:3e:a7:c5:06:
         93:66:0f:6e:db:56:ae:d8:fa:35:db:95:67:02:61:24:bc:9e:
         f8:96:e1:33:d2:d1:23:24:16:38:9c:e1:2c:d3:32:7b:f9:b4:
         24:a3:5f:1c:93:64:b9:6d:7d:2f:eb:50:20:7f:07:8c:19:16:
         22:1c:89:97:6f:7c:76:ae:09:24:85:94:db:c4:a1:d0:2c:58:
         b0:5e:79:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:03:51 2026 by rpki-client