Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/adaf6d2f-364f-3af6-8f0e-6c366f894ee5.roa
File:                     adaf6d2f-364f-3af6-8f0e-6c366f894ee5.roa (raw, json)
Hash identifier:          HfP1jb6WCrNh1xn1257fV2pIfh0tqVTqnbqYK1xqtao=
Subject key identifier:   7E:AD:56:E9:6B:19:A5:CA:2A:AE:85:1C:D2:AB:48:B7:BE:5E:98:89
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC0A712390AE9D53A5E6C3A40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/adaf6d2f-364f-3af6-8f0e-6c366f894ee5.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     396692
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:12:39:0a:e9:d5:3a:5e:6c:3a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=248d767f-b7db-487e-806d-e8a29a24c273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:87:7b:59:4d:24:50:68:b9:b2:5d:e8:af:
                    6f:ff:58:7e:0e:32:09:55:28:53:82:8c:ce:6a:f3:
                    92:11:81:68:ed:c2:46:43:b3:2a:60:96:58:3f:da:
                    5b:13:a2:0b:f8:d2:52:11:08:a3:1e:35:22:d0:d1:
                    b3:a2:60:ca:93:be:aa:4a:ad:22:92:28:5a:b7:4b:
                    2c:28:24:e6:11:21:be:85:21:68:0c:66:52:ba:07:
                    43:1e:3e:a2:94:d8:0d:79:64:77:ee:3f:de:23:8d:
                    71:7d:98:0e:5b:83:33:d3:a6:e4:06:6f:02:03:56:
                    22:3b:f3:8a:50:bc:d6:a4:e4:1d:ac:fc:a1:6d:1e:
                    f2:a8:3e:74:03:4b:17:85:0b:c8:04:2c:67:55:60:
                    1e:e1:4a:32:c7:5c:1d:10:b3:ca:0d:ee:af:87:eb:
                    1c:bd:41:f9:5e:85:24:84:28:a5:19:d1:11:9a:31:
                    29:8e:35:d1:7c:13:46:25:1c:9a:16:e5:df:77:3b:
                    c2:7f:45:c5:b5:76:64:6e:4c:d9:4f:d5:20:f0:a0:
                    7c:34:64:e2:5a:f9:96:30:1f:49:3a:b7:09:8f:8c:
                    a3:57:76:c5:96:57:c0:d1:4b:5b:f1:84:5c:9a:86:
                    ad:ac:2e:d6:ac:4c:6b:c1:37:e6:6a:2c:3c:16:de:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AD:56:E9:6B:19:A5:CA:2A:AE:85:1C:D2:AB:48:B7:BE:5E:98:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/adaf6d2f-364f-3af6-8f0e-6c366f894ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:c6:4e:70:da:66:0c:8d:52:6a:42:ea:92:4c:19:80:6a:c4:
         a1:5c:f6:d3:18:bb:e4:43:05:ce:63:17:ae:b0:10:64:f0:49:
         bc:6a:75:77:00:ca:dd:4a:4b:04:07:d4:2a:f3:7c:cf:9c:b4:
         b5:7a:c3:b9:84:95:8e:92:9c:ab:ac:0e:a0:09:55:8f:8d:e4:
         da:a3:97:08:59:63:75:8e:b1:a1:6a:d7:d7:b9:4b:3e:51:73:
         ce:04:77:fc:92:93:c3:6f:41:eb:02:da:67:12:96:d3:50:9e:
         59:dc:a3:40:fc:d4:37:21:82:78:9d:60:0b:6e:57:61:86:61:
         d1:67:b3:d5:a5:75:5b:2d:1b:99:8a:c5:8e:db:25:5c:9b:c0:
         88:a4:7f:34:17:b4:66:be:bc:d7:15:ff:d6:c8:b6:26:da:3b:
         5c:7d:f1:d8:2a:eb:a9:22:bf:fb:64:9d:27:33:57:5d:2c:a9:
         9f:13:8f:cb:8b:23:41:8b:35:a9:dc:fc:5d:f0:1c:5c:0e:c7:
         45:c7:40:ad:54:96:12:11:eb:70:1c:74:dd:b5:9d:d8:97:8b:
         16:e5:99:2e:f9:36:a2:b6:37:5c:76:75:dc:f0:49:69:a1:15:
         40:02:c0:43:18:30:4c:92:ce:3c:f0:76:7f:c0:e5:6c:23:07:
         e6:0f:e8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:14:32 2026 by rpki-client