Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a849975a-8490-3533-b5a2-2658fda4ea2b.roa
File:                     a849975a-8490-3533-b5a2-2658fda4ea2b.roa (raw, json)
Hash identifier:          A5Zy6JF9zIqp2RAk/vnxaZYw0k1tijdR7WH/hmjnWN0=
Subject key identifier:   FB:9E:58:43:51:B0:DD:DA:0A:93:5E:D8:8D:6B:86:61:FB:2E:D1:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E4AEF42480CBE84F8C1F9AD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a849975a-8490-3533-b5a2-2658fda4ea2b.roa
Signing time:             Thu 25 Jun 2026 21:00:12 +0000
ROA not before:           Thu 25 Jun 2026 21:00:12 +0000
ROA not after:            Wed 23 Sep 2026 21:00:12 +0000
asID:                     396585
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:4a:ef:42:48:0c:be:84:f8:c1:f9:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 25 21:00:12 2026 GMT
            Not After : Sep 23 21:00:12 2026 GMT
        Subject: CN=ea1e5165-77c4-41b0-8a81-bf910c761ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:be:3d:00:b2:24:99:cd:ba:fd:8f:11:67:
                    ee:9c:fb:36:c1:6e:9e:1f:6d:64:d7:44:a0:15:4b:
                    6b:ba:3c:9f:44:55:97:d5:c3:03:7f:bb:8a:d3:08:
                    60:a7:ff:3c:a9:a0:18:73:b7:54:c9:9d:20:9c:17:
                    05:e9:9e:4a:f9:58:03:62:ef:c8:81:e6:8c:7d:de:
                    a5:9f:5b:46:bf:b2:6d:90:97:89:f8:8a:33:d5:28:
                    52:04:e7:d4:1c:09:0a:ed:5a:87:40:36:6b:b3:5a:
                    62:a7:bd:34:82:2f:75:42:a8:0c:fb:46:b3:40:cb:
                    21:f3:b5:8d:7f:62:27:cb:cb:fc:8a:fa:8b:0d:a4:
                    41:07:e6:25:1c:64:cb:3f:e5:05:03:4a:1d:e4:d1:
                    ec:fc:54:ff:8d:49:79:f7:81:ef:2b:6c:c4:92:4b:
                    7c:1a:d4:05:aa:a3:d0:67:21:45:8e:d6:33:cd:93:
                    72:12:b9:92:3b:72:19:44:1e:28:a0:d7:db:d2:bb:
                    55:80:8e:0f:a1:45:13:5b:de:b5:5f:56:84:d5:12:
                    b4:30:2e:06:38:00:3c:2b:a3:aa:ea:db:a7:62:17:
                    15:2f:7e:68:ed:e8:ff:c0:e9:17:a4:4e:c1:13:de:
                    b3:d6:a4:e7:c6:1f:c0:e9:3c:b5:d9:d0:36:f8:b6:
                    8a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9E:58:43:51:B0:DD:DA:0A:93:5E:D8:8D:6B:86:61:FB:2E:D1:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a849975a-8490-3533-b5a2-2658fda4ea2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f9:08:47:4b:23:1d:c1:6e:4a:60:bb:4b:53:de:a3:24:42:
         ef:c0:6e:32:b3:7b:d0:b9:46:35:66:5c:93:ae:20:a5:1f:35:
         31:5b:d7:62:b2:8c:87:3f:43:4d:5e:fd:fa:23:90:2e:f8:f0:
         e1:9f:7b:85:24:32:92:63:8a:54:fd:c9:37:01:00:71:a5:5f:
         84:42:b0:28:2e:53:96:a5:bc:b1:f8:f0:a9:de:26:e0:ed:ce:
         01:44:ca:53:04:d5:29:7d:2e:54:e2:1e:f7:d8:55:68:7b:58:
         dc:cd:3e:de:21:cf:6f:0b:8c:3f:16:fa:14:77:47:b6:53:63:
         bf:fe:39:a3:ad:8e:61:aa:96:55:b6:c6:22:e8:ff:66:24:39:
         bb:80:81:b8:b1:5d:6e:3f:e5:7f:9f:4a:37:ec:dd:94:d0:0f:
         29:86:3a:f4:e1:e8:7c:1a:1e:d1:a4:6e:d4:13:3a:94:c9:4b:
         f5:b9:0d:5e:0c:d6:f9:05:f0:e1:c0:bf:5c:97:18:57:98:93:
         0b:31:11:d6:c1:58:a1:5b:bd:f8:98:36:0f:42:b2:1a:b3:e7:
         13:ef:55:f4:9c:97:0c:fa:31:54:a0:b3:38:83:6d:80:2a:0f:
         75:d3:45:e0:fd:60:c0:77:e0:68:6b:26:27:bb:3f:f2:bd:33:
         4b:c4:93:23
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K70JIDL6E+MH5rQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk
ZWExZTUxNjUtNzdjNC00MWIwLThhODEtYmY5MTBjNzYxZWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+2+PQCyJJnNuv2PEWfunPs2wW6eH21k10Sg
FUtrujyfRFWX1cMDf7uK0whgp/88qaAYc7dUyZ0gnBcF6Z5K+VgDYu/IgeaMfd6l
n1tGv7JtkJeJ+Ioz1ShSBOfUHAkK7VqHQDZrs1pip700gi91QqgM+0azQMsh87WN
f2Iny8v8ivqLDaRBB+YlHGTLP+UFA0od5NHs/FT/jUl594HvK2zEkkt8GtQFqqPQ
ZyFFjtYzzZNyErmSO3IZRB4ooNfb0rtVgI4PoUUTW961X1aE1RK0MC4GOAA8K6Oq
6tunYhcVL35o7ej/wOkXpE7BE96z1qTnxh/A6Ty12dA2+LaKEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPueWENRsN3aCpNe2I1rhmH7LtEhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg0OTk3NWEtODQ5MC0z
NTMzLWI1YTItMjY1OGZkYTRlYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIX5CEdLIx3Bbkpgu0tT3qMkQu/AbjKze9C5RjVmXJOuIKUfNTFb12Ky
jIc/Q01e/fojkC748OGfe4UkMpJjilT9yTcBAHGlX4RCsCguU5alvLH48KneJuDt
zgFEylME1Sl9LlTiHvfYVWh7WNzNPt4hz28LjD8W+hR3R7ZTY7/+OaOtjmGqllW2
xiLo/2YkObuAgbixXW4/5X+fSjfs3ZTQDymGOvTh6HwaHtGkbtQTOpTJS/W5DV4M
1vkF8OHAv1yXGFeYkwsxEdbBWKFbvfiYNg9Cshqz5xPvVfSclwz6MVSgsziDbYAq
D3XTReD9YMB34GhrJie7P/K9M0vEkyM=
-----END CERTIFICATE-----
Generated at Sun Jun 28 20:38:12 2026 by rpki-client