Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a4748a6-5b27-3f94-805a-e149799768cc.roa
File:                     8a4748a6-5b27-3f94-805a-e149799768cc.roa (raw, json)
Hash identifier:          T74bP9sgfF9tnmOvkMB0RSoQx1OA5VACdmS4EyPU1kY=
Subject key identifier:   45:04:20:9E:78:12:1C:03:CA:A2:5A:3E:FA:A8:2C:C2:5E:80:9C:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED9C72F98FA59D1120C4672C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a4748a6-5b27-3f94-805a-e149799768cc.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     396540
IP address blocks:        192.41.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:2f:98:fa:59:d1:12:0c:46:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=1d6cd004-7a54-49d5-9f3f-6048b2ea3e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6f:d3:fa:2a:51:88:e8:bc:e3:62:2b:1d:0d:
                    17:81:56:1e:d2:f8:cc:64:76:14:7e:b8:cc:e0:ee:
                    c6:98:02:b4:05:c9:1a:ba:74:50:61:dd:c1:4e:22:
                    8d:48:5b:37:fc:6e:d4:70:7f:91:8f:28:c1:53:a7:
                    45:4f:75:94:c5:7e:0a:55:a6:1b:da:ca:7a:c5:16:
                    0c:80:df:3f:2a:8c:8d:d8:78:a3:10:8a:d4:30:fe:
                    1f:2d:25:e9:5b:5e:36:7c:30:bf:e6:d8:e5:5e:d8:
                    58:ea:7e:44:4c:63:1d:d3:5f:93:2f:9b:5f:69:d0:
                    d2:f2:7c:68:fc:2d:b3:c0:3e:21:3a:50:d0:d4:12:
                    1a:7d:43:73:9c:f0:26:16:3d:2e:29:1c:c0:1d:e9:
                    94:ff:6e:a4:94:6a:f7:90:19:4d:06:e8:aa:96:a6:
                    22:76:fa:9c:02:cb:12:14:29:e7:7c:01:ec:85:8a:
                    c0:0e:3b:7d:06:89:2c:4e:d4:46:bd:c2:9d:c4:90:
                    ee:fb:90:61:ec:c8:bd:c7:7e:c2:07:45:79:50:6c:
                    0a:dc:1a:b6:40:b5:81:e7:51:94:ab:77:f5:b0:33:
                    7e:32:3f:2d:b7:54:d4:40:49:19:41:38:6e:e3:c7:
                    3f:62:cb:09:1f:81:2e:9e:b3:71:9a:ef:0f:41:9b:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:04:20:9E:78:12:1C:03:CA:A2:5A:3E:FA:A8:2C:C2:5E:80:9C:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a4748a6-5b27-3f94-805a-e149799768cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:84:91:7b:f7:7a:7b:8a:fc:45:52:d4:69:16:d8:de:8f:0f:
         44:0a:ee:56:d2:a7:0d:e2:60:d0:9a:b1:28:f8:1c:fa:59:43:
         80:c2:a8:16:7a:84:c7:db:ac:61:f1:b0:14:13:84:82:a7:51:
         95:26:02:75:dc:5f:ec:6b:02:d1:0f:6b:89:1e:ff:5d:9b:35:
         9c:13:53:cd:1d:b2:98:54:e4:80:83:de:9d:51:dc:98:36:5e:
         a1:97:77:aa:b2:06:13:c7:3f:e1:6a:69:02:e2:bf:b6:bb:71:
         90:86:d4:bb:3a:b8:a4:f1:28:8c:ba:f9:71:8e:f7:0d:b1:66:
         4e:ff:7c:4b:39:a1:d9:44:89:6a:37:8d:99:b6:db:26:5e:dd:
         b0:4c:b7:ec:3f:fb:ba:81:e4:9f:ff:66:d4:4b:b9:78:67:05:
         23:06:a3:b8:0d:06:3f:e3:89:d6:84:58:5e:44:d2:15:22:c3:
         97:ec:81:eb:f6:1b:a6:9b:26:3b:47:39:73:bc:91:70:75:e5:
         76:72:e2:cd:1d:7e:ad:38:eb:a5:e2:ac:1a:6b:71:4c:76:fc:
         d9:d4:8d:78:8f:0a:7b:ea:b2:8b:40:42:91:96:53:58:ce:88:
         ce:1f:dd:84:91:da:5a:a9:10:0c:88:37:9b:bc:4a:18:86:b4:
         98:40:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:18:38 2026 by rpki-client