Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fbbfa0a-7d42-3440-a25b-6c5486dd19ee.roa
File:                     6fbbfa0a-7d42-3440-a25b-6c5486dd19ee.roa (raw, json)
Hash identifier:          jd7VPyjZWP7io9rjqPHcq07UufCnKoDVv3QsVsq5H48=
Subject key identifier:   6C:96:63:EC:97:5A:4F:0F:AE:EE:14:BF:7E:04:A8:85:39:84:99:66
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E5084B55748904FAF89D4BB40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fbbfa0a-7d42-3440-a25b-6c5486dd19ee.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     396542
IP address blocks:        192.42.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b5:57:48:90:4f:af:89:d4:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=1dc6cb2c-11bb-4b56-8e1f-74690eb64b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a8:e8:db:7e:12:6a:24:41:b2:79:a6:b4:96:
                    40:7d:58:d9:00:8a:a2:1f:2b:63:eb:2f:3c:bc:00:
                    53:d2:fd:af:d9:4a:74:b9:ac:92:6a:b3:4a:a2:c5:
                    9a:87:18:39:00:1b:9c:ae:5f:41:9e:8c:e8:0f:33:
                    3e:ea:a1:ce:0f:87:1c:79:98:1a:67:86:8d:e5:60:
                    56:ef:b2:34:93:fc:18:a7:e4:d3:f8:b5:11:25:8e:
                    cd:d4:96:2c:bb:e6:04:8a:c5:f7:22:6a:6e:10:cf:
                    26:5e:d2:62:98:22:96:a5:e7:fd:7f:df:00:f1:ca:
                    6a:c3:23:a4:6d:f4:e8:ac:82:8c:e3:aa:e5:2d:25:
                    fd:14:38:c7:7d:59:7f:66:55:c9:21:a8:20:b3:e5:
                    ff:0c:66:8a:d0:5f:e9:fe:be:b7:8e:e9:9a:81:b9:
                    ae:bd:26:28:b3:53:4b:9a:e2:a1:7a:0e:24:08:e6:
                    53:00:04:3f:0f:d1:e4:7b:10:d5:f3:45:cb:25:dd:
                    17:6d:c6:ce:1c:d8:30:f6:d4:0d:6d:53:62:21:97:
                    f7:dd:d3:ab:0d:8e:a7:b1:79:2d:b5:f5:57:72:c9:
                    d7:f8:98:f8:4f:30:3b:69:1d:29:c0:68:43:6b:fd:
                    60:0d:06:6d:ea:fc:99:1a:64:c8:b4:5b:29:73:f9:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:96:63:EC:97:5A:4F:0F:AE:EE:14:BF:7E:04:A8:85:39:84:99:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6fbbfa0a-7d42-3440-a25b-6c5486dd19ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:f8:8d:c2:21:3e:ff:a7:c5:6a:30:bf:9d:72:18:82:22:2d:
         b8:c7:e2:f0:3f:96:ff:a2:f8:77:8d:5d:1e:3f:41:bc:8e:5e:
         70:ad:44:f3:d1:89:06:34:ff:b4:1b:29:7c:82:73:64:92:8a:
         24:ff:24:a4:21:2e:4b:0a:ff:f6:22:43:0f:0c:6a:2a:0b:87:
         66:5b:f6:95:c1:a3:d5:d4:cf:44:16:2d:0e:25:92:d8:ff:4a:
         3a:d0:f7:00:83:21:4a:74:e2:58:f6:f4:a8:08:0f:20:38:75:
         d3:37:c0:1c:7f:83:80:0d:5f:18:b8:ba:78:49:c6:a7:86:bd:
         8e:42:03:90:2e:2c:2a:33:ea:b3:70:e9:f0:d7:87:b3:92:95:
         87:cb:7a:52:ff:33:14:28:ca:06:23:d6:fe:4c:38:8a:b8:39:
         ad:15:99:36:27:55:81:eb:39:7d:09:8c:97:da:22:eb:ac:ae:
         09:f9:af:0d:13:68:04:a7:cc:d4:9d:94:6e:15:bb:60:f5:4e:
         af:41:dc:08:f2:c1:8a:f7:dd:a9:49:5c:c4:f6:64:01:08:ed:
         e4:16:77:63:56:0d:2f:58:87:2c:e1:48:7f:b8:df:3d:e2:f7:
         95:44:10:39:67:03:91:80:77:50:1a:db:0c:dc:64:15:45:d1:
         1f:1c:4f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:36:02 2026 by rpki-client