Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d035d94-0434-34ed-af54-ba5c4a063194.roa
File:                     8d035d94-0434-34ed-af54-ba5c4a063194.roa (raw, json)
Hash identifier:          VYajE/prWb9a0yO7olqpmY9VNLPzcP+5jc2oUozxaco=
Subject key identifier:   BA:30:B5:21:87:09:6C:FA:B2:73:5C:19:EF:B3:08:FB:56:8E:9C:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC0A71277F16EC289A7B26A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d035d94-0434-34ed-af54-ba5c4a063194.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396594
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:12:77:f1:6e:c2:89:a7:b2:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=18d831a7-940b-4fa2-8a10-c91b0e7b6765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:df:e5:0c:a3:fd:c7:96:02:af:a0:b0:d1:8f:
                    a1:f3:94:a3:f0:f3:c4:34:0a:a1:6b:95:4a:61:f7:
                    c7:8f:16:85:9a:0d:94:67:a5:27:05:30:7e:e1:7e:
                    41:8f:7e:a5:dd:72:1d:65:ef:2a:31:b5:ad:f6:0d:
                    69:02:1f:af:69:f1:4b:74:ed:5d:ac:b8:68:bf:f7:
                    d3:83:ce:dd:70:0c:17:d7:9c:a4:b5:17:f0:35:b7:
                    16:0b:84:93:1e:b6:a5:13:a6:65:6e:d2:3b:2d:d5:
                    6e:80:12:05:72:ad:cb:42:de:98:b9:b4:bb:d7:fd:
                    0c:69:40:61:d2:f5:58:5d:cc:9d:4d:83:11:37:f7:
                    23:fd:bf:ac:05:f5:ec:42:68:c4:cf:18:40:c5:d5:
                    a5:5f:ef:17:a1:45:9b:af:c1:9a:20:48:ee:bf:c1:
                    5c:6c:c6:42:13:9f:d0:19:93:82:33:4b:ca:67:7f:
                    6a:18:52:f8:1b:70:8d:c9:eb:52:9e:6a:69:df:98:
                    0b:35:8d:ec:28:6a:f1:91:48:2e:37:2f:aa:21:8a:
                    97:73:3b:41:3a:b7:ba:f0:75:b0:fb:74:7f:d5:5e:
                    70:65:c5:51:55:07:5c:97:6e:1c:7a:d3:ad:fa:53:
                    d3:44:b1:39:d6:b3:b5:c2:5a:9f:c5:5c:c2:a9:8f:
                    65:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:30:B5:21:87:09:6C:FA:B2:73:5C:19:EF:B3:08:FB:56:8E:9C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8d035d94-0434-34ed-af54-ba5c4a063194.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a9:1f:f2:f5:49:fe:c2:b8:72:b0:8c:e1:9a:99:4b:84:3d:
         bb:b3:fd:1d:fb:34:d8:eb:02:02:0d:7b:55:f0:00:80:8e:4b:
         83:ee:d1:51:c5:e1:ed:29:ca:34:e8:5c:fe:e8:a7:93:db:a1:
         5f:16:22:36:e3:90:4e:c2:f6:69:0d:ee:b1:46:79:35:06:2b:
         2f:5f:68:74:b7:71:a4:aa:ac:e2:a3:38:f4:0a:87:44:4b:8d:
         d6:58:00:4a:fc:15:6e:fe:15:37:05:09:6a:0b:46:1f:6e:46:
         5b:d9:f5:32:e1:93:e0:31:2b:45:f9:5e:4b:8c:57:97:f1:14:
         5f:af:3a:59:03:dd:57:52:35:47:13:ff:1f:4d:06:a2:cf:d8:
         01:19:11:2a:d3:f5:14:65:5c:33:12:e2:53:a6:4b:b2:3b:39:
         e6:9f:1a:43:a4:a4:ae:af:aa:46:36:8f:fb:8c:96:f4:e9:bc:
         85:27:37:3b:37:c0:e9:e2:2b:03:12:c7:c0:04:03:c5:39:4a:
         93:27:91:45:45:9a:6c:1b:3e:37:fd:1d:85:90:2d:03:c5:a9:
         76:e0:f8:4d:2a:80:f0:82:0f:54:2d:aa:2b:86:ed:6c:be:03:
         bd:59:d5:b6:c4:c5:95:80:2e:a0:c6:9d:4f:84:39:63:04:d1:
         5e:43:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:34:59 2026 by rpki-client