Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb53b668-2b9b-39e6-9a41-a1a70c3e2216.roa
File:                     cb53b668-2b9b-39e6-9a41-a1a70c3e2216.roa (raw, json)
Hash identifier:          C91xOt221VaCPzGdRUOiAYbLtejVLaZGM6kuc5RbgJ0=
Subject key identifier:   25:5F:6E:0B:BC:B2:58:E5:0F:61:C8:A0:2D:94:79:F1:FA:2D:DA:A1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA787ABEC79185B82962BA900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb53b668-2b9b-39e6-9a41-a1a70c3e2216.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396584
IP address blocks:        192.26.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:ab:ec:79:18:5b:82:96:2b:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=607032cf-9775-4557-9936-ff3082d9109f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:a2:c1:5f:bb:e0:02:d4:71:d7:db:e4:d3:
                    81:08:cb:12:d6:e8:4b:15:cc:73:63:ab:f0:94:4b:
                    d8:47:e9:e0:4e:59:cd:72:32:d5:23:78:84:9d:1f:
                    7b:ff:67:72:9a:ad:7a:8b:6d:f6:6a:04:89:ad:bb:
                    3e:a9:38:61:38:5b:d6:bd:b0:07:df:b7:9f:1c:12:
                    51:66:a3:72:c6:58:75:ca:6b:dd:4d:de:9f:13:6c:
                    20:96:ab:fc:c7:33:9b:dc:67:1e:4a:39:63:23:95:
                    8a:06:3a:88:42:cb:2f:dc:59:70:f8:e3:3d:93:f0:
                    96:47:8d:cd:f0:e8:9c:52:3c:87:79:dd:4c:3b:56:
                    f0:ae:e0:a8:ff:11:db:bb:17:e4:f9:b3:9b:38:62:
                    12:17:68:a4:04:a4:1a:8e:51:12:05:e0:8f:85:3a:
                    75:78:62:00:6f:0b:aa:76:32:14:cb:d5:3a:6b:74:
                    c5:92:72:32:3d:9f:d6:2a:6f:bf:39:0c:c8:ee:e1:
                    1f:62:6a:c2:84:a6:9f:48:2c:d5:0e:89:c5:9e:86:
                    cd:6e:c5:4d:58:b3:92:ec:d3:88:9c:9c:93:8d:3d:
                    87:ac:f0:02:da:df:fc:27:77:49:d8:93:c2:5f:ac:
                    e3:0f:23:26:15:fb:8f:dc:b2:ca:a0:78:92:81:c9:
                    57:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:6E:0B:BC:B2:58:E5:0F:61:C8:A0:2D:94:79:F1:FA:2D:DA:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb53b668-2b9b-39e6-9a41-a1a70c3e2216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:2a:2c:86:11:5e:97:69:a5:d1:69:d6:64:26:98:b0:49:70:
         53:9a:32:b5:35:bd:26:91:34:22:39:6e:19:c2:c1:ce:f0:dc:
         cd:8f:2f:6f:b9:64:88:91:f1:33:bf:1b:19:2c:29:59:86:c3:
         8c:b8:52:30:f3:b7:01:a0:9a:b4:cf:f5:85:f4:3a:06:4c:2d:
         f6:b1:86:ed:79:a5:44:ce:d0:85:41:b3:aa:b9:4f:34:c8:3f:
         52:bd:84:62:19:69:b2:8f:63:7d:ab:bb:ef:ce:4d:71:9d:ff:
         86:26:39:7e:f3:b0:67:96:73:70:7d:30:1d:2a:65:44:14:db:
         9f:5f:f6:51:a2:20:a1:32:b6:d9:0f:bd:74:c5:9a:0f:74:f0:
         c1:f0:08:bb:65:eb:bc:07:c1:f6:bf:a0:31:29:42:0e:9c:c6:
         9c:11:f6:d2:0d:f1:6c:32:1c:01:c3:24:19:69:59:bc:ad:47:
         c3:e7:3b:2c:ef:7d:86:84:25:25:22:81:d2:ed:0f:84:c9:b7:
         c4:c9:fb:80:b9:0e:1d:64:4f:88:ce:76:13:7f:6d:a0:d5:aa:
         c1:ea:e3:02:d0:21:12:11:67:f6:51:c3:02:7d:78:3c:e3:90:
         db:80:90:24:07:b1:7e:a0:b6:b8:0e:d8:a3:83:86:4c:e3:ef:
         16:31:1a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:45:55 2026 by rpki-client