Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/796fcb52-584e-3843-b108-e5c3d8bdefc9.roa
File:                     796fcb52-584e-3843-b108-e5c3d8bdefc9.roa (raw, json)
Hash identifier:          +JkTAoO4kFatTXz9oVM7vLrFua3oJ3GZ15/2HBExMJI=
Subject key identifier:   67:0C:80:36:68:16:D7:33:B4:9E:98:C6:49:9C:DD:39:90:A5:F6:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA78FB1364A8D3B1F7B28AD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/796fcb52-584e-3843-b108-e5c3d8bdefc9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396599
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:b1:36:4a:8d:3b:1f:7b:28:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3ba846fd-0cbd-4ab0-a771-158bbdbb895c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:66:92:03:3c:52:1b:b2:a1:f3:d5:cd:8d:
                    67:7d:28:51:ca:84:b3:16:6f:25:45:31:f9:42:90:
                    2d:3d:9a:63:99:25:c4:cf:2b:a5:94:33:63:56:62:
                    6a:53:26:56:43:35:d5:8f:74:a3:27:6f:b5:3a:95:
                    f5:e7:f7:3f:a3:47:0d:ec:70:d8:fb:04:82:75:05:
                    21:b6:7d:65:97:57:12:4c:82:04:ea:55:3f:99:f5:
                    58:54:3c:52:4d:15:ab:b4:9d:1b:b0:0f:78:19:1e:
                    d2:11:35:7c:be:ac:22:cc:76:9a:98:58:59:2e:6e:
                    09:75:79:f4:19:bc:87:01:bf:d2:05:68:b5:2b:ee:
                    10:06:43:26:7f:8c:fc:2a:38:8e:24:b8:46:83:ff:
                    65:10:41:66:3d:6f:a6:29:7d:8a:c1:f6:0b:27:94:
                    5a:d5:24:a0:ae:b8:a9:ce:ba:fb:c1:5a:2f:c9:67:
                    72:52:87:17:16:dd:0f:e9:ef:52:b8:05:6c:bf:e5:
                    f6:74:5a:55:81:ed:51:d4:76:55:6a:f6:db:4d:7b:
                    99:ea:71:6c:c8:b5:97:7b:f0:3a:eb:c4:36:67:ce:
                    e7:b7:af:02:a9:c5:74:5d:b3:e3:57:81:42:4b:68:
                    50:33:35:b2:d0:80:e8:5f:c0:d6:c0:b2:65:7f:92:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0C:80:36:68:16:D7:33:B4:9E:98:C6:49:9C:DD:39:90:A5:F6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/796fcb52-584e-3843-b108-e5c3d8bdefc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:cd:96:d9:39:4b:b6:41:cc:ac:d3:3b:44:25:a3:72:d0:5a:
         02:bd:bb:70:92:dc:a7:0f:57:2a:e3:6b:ac:45:c9:4f:94:d5:
         c8:c4:0a:8c:8b:cf:b8:55:6d:5d:b8:04:ae:92:b4:de:90:b2:
         85:37:e9:a7:c6:fb:8a:0d:13:e4:1f:6f:3d:fd:52:4f:f2:64:
         9d:24:47:f2:49:cb:50:54:88:af:43:d2:ec:41:3c:6d:0b:f1:
         ab:40:22:04:e9:d5:75:9e:bd:92:d6:55:ec:80:af:7f:05:e4:
         20:36:51:50:cb:fb:05:ad:c9:b0:02:42:a1:47:ba:79:9f:0e:
         a8:23:c5:d6:fd:39:3f:4b:2c:b4:1f:23:35:49:c9:0b:fa:ac:
         fd:21:65:0f:3f:55:93:6c:d9:d9:c5:86:de:c0:f1:c7:b9:e8:
         bc:2d:b1:d2:d4:fa:22:ed:77:65:26:94:14:a0:19:0d:66:61:
         e3:04:41:ef:2a:43:bf:be:fc:c3:dd:c7:88:73:0d:e9:c3:60:
         b5:12:ee:5d:3f:50:ef:bf:23:aa:fb:c1:ed:ee:4e:57:cb:e6:
         0e:73:15:a9:d0:ad:c2:1d:56:2b:82:a6:11:fe:fc:53:47:f9:
         c7:bf:a5:1c:06:53:e5:e7:b4:67:8e:07:b8:78:b7:58:8f:48:
         fe:81:0d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:16:08 2026 by rpki-client