Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98a7bae0-078b-330d-a183-82416b2f1072.roa
File:                     98a7bae0-078b-330d-a183-82416b2f1072.roa (raw, json)
Hash identifier:          mzB3YyheV0ziLnlB/i9A1OHXuBhF5f/RPT6nyvyjFFo=
Subject key identifier:   90:01:38:A5:3B:C3:2D:15:25:E8:31:4B:9F:E9:E1:91:FF:95:FC:E3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584ED431D1951BF0E20798D4CAC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98a7bae0-078b-330d-a183-82416b2f1072.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     36618
IP address blocks:        192.52.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:d1:95:1b:f0:e2:07:98:d4:ca:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=d5499fbe-6c9d-49aa-8a98-1a535aaf9390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:31:d5:f1:5b:83:a9:ed:9f:1a:47:a1:07:
                    7d:a7:35:ea:06:40:59:44:42:07:c0:20:b2:b1:a9:
                    aa:e7:97:ba:8c:b4:7a:a1:97:3c:5c:46:eb:c3:a7:
                    d3:5a:1d:3c:48:d3:06:fb:b9:28:c7:7d:54:74:ea:
                    f8:0d:a8:c9:8b:c6:eb:f3:b5:c8:1f:0e:42:13:23:
                    7d:cb:1e:9e:bb:80:67:c3:ed:e2:e4:f2:0b:77:be:
                    a8:4d:96:59:83:03:90:0a:22:88:7f:7d:a1:5b:95:
                    cc:b0:a5:9c:52:a2:db:ac:70:e4:e9:19:98:f3:bb:
                    df:88:2f:cb:19:e0:96:bb:4e:9a:59:09:42:58:b9:
                    56:a5:30:e2:e4:65:dd:0d:f2:b7:ee:a0:55:ac:ce:
                    1e:94:d7:61:15:f1:08:df:d3:db:26:3c:11:99:7b:
                    2c:db:21:8e:21:84:a0:71:e1:67:89:b7:7f:d5:4f:
                    bb:d6:32:95:a3:3f:f9:47:de:a8:3e:f3:20:82:b1:
                    62:bc:b9:22:7b:82:f8:be:76:45:90:98:f8:93:62:
                    9a:ef:a2:a9:4f:41:2d:a1:d2:81:e8:cc:4f:97:9f:
                    3f:75:37:bd:75:18:11:e4:3b:e3:00:b5:a8:e9:82:
                    21:0b:02:47:e5:45:e9:85:8f:a3:56:8c:cb:fc:0e:
                    38:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:01:38:A5:3B:C3:2D:15:25:E8:31:4B:9F:E9:E1:91:FF:95:FC:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98a7bae0-078b-330d-a183-82416b2f1072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:e3:a8:a5:8d:cb:f1:43:52:c2:3f:e2:7d:f0:e5:a8:a0:47:
         7f:5d:64:87:f3:77:70:61:78:74:4d:45:f2:fe:e7:1f:d4:49:
         f3:83:67:dc:e4:32:62:8d:62:fc:1a:46:ae:b1:ee:81:f8:10:
         28:51:a4:b6:68:6a:cc:10:69:7f:10:04:d5:cb:76:ae:84:36:
         97:35:4b:5e:88:1c:6b:af:ac:ff:cc:98:5c:11:7e:e8:05:ba:
         27:3f:5f:52:37:bf:34:47:3c:06:de:42:b2:bd:6b:4d:6a:cb:
         7f:27:42:6c:dd:c5:e8:c9:2e:c0:24:fc:58:24:75:32:74:0f:
         46:83:ac:71:e6:e5:3f:e7:f3:87:eb:bd:34:a6:72:a5:da:ef:
         8f:93:3d:7d:b6:9e:76:75:d5:ad:c7:a7:f7:3b:0d:51:83:86:
         dd:e3:ce:24:a2:86:4a:87:77:cb:fb:4a:36:e3:8d:8b:65:a9:
         29:a1:c1:df:78:a7:65:ff:85:43:46:23:c7:74:b5:ad:87:4f:
         d5:58:a9:a3:c1:58:e3:cb:74:ea:26:5e:85:f2:6e:a4:47:38:
         cc:2f:74:89:8e:fb:69:da:68:6d:fa:d3:18:89:47:52:5f:77:
         a4:1a:bd:36:92:b9:af:9e:a0:53:aa:0d:21:70:c2:da:bd:c8:
         14:d6:0d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:26:27 2026 by rpki-client