Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3c61e4f-dd33-339e-baac-d73b89793a32.roa
File:                     e3c61e4f-dd33-339e-baac-d73b89793a32.roa (raw, json)
Hash identifier:          03OYIK97KaYtPJKZ16hXDkKC3x/iurrZogTBTO6ZKO0=
Subject key identifier:   BC:E7:1A:89:9B:6F:A0:D2:C8:10:F4:65:C7:C6:D0:B9:2B:3F:33:6F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F6C58170EB3692D8DA039A000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3c61e4f-dd33-339e-baac-d73b89793a32.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     396585
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:17:0e:b3:69:2d:8d:a0:39:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=f42b83f4-5bb8-440d-8416-07653c2c26e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:89:15:36:f0:a1:74:93:ef:f6:2d:a5:8e:
                    18:64:52:d3:21:74:9c:d4:08:ba:0d:1b:9a:0d:f9:
                    6a:5a:45:2b:39:37:e7:31:b1:cf:61:3b:fd:8d:3d:
                    6c:a6:7e:13:e1:b2:20:58:92:fb:66:ba:91:e7:c7:
                    bd:a0:27:59:58:d9:0a:ed:bf:d4:33:76:f1:4c:1c:
                    40:8b:24:3f:2b:3c:bc:72:f1:44:a7:92:88:31:d3:
                    12:84:39:cc:11:19:a6:de:cc:77:4c:05:ff:7a:d7:
                    e8:99:68:9a:b5:b2:22:15:24:67:c1:c8:3e:83:3c:
                    59:55:cc:5c:53:4d:da:55:23:08:e1:a8:20:00:bb:
                    d5:b3:83:85:4b:b8:44:24:54:52:26:eb:6d:f7:53:
                    f4:6a:1b:4a:f1:eb:e4:68:24:d9:42:47:d0:30:aa:
                    11:f7:e6:35:9e:53:8a:02:1d:66:a5:2e:d7:e8:62:
                    9b:ac:9e:0c:44:93:82:51:d8:cf:44:fd:8d:43:9a:
                    24:f8:3f:d5:14:97:4a:39:dd:6b:61:dd:bc:85:ef:
                    89:7f:08:34:17:eb:fd:93:3a:55:aa:21:f4:20:ee:
                    ba:ef:c9:82:c3:73:4c:8b:97:ef:51:49:48:b5:3e:
                    16:3d:61:11:24:f4:a1:6f:52:d1:d2:2e:4e:0c:3f:
                    32:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E7:1A:89:9B:6F:A0:D2:C8:10:F4:65:C7:C6:D0:B9:2B:3F:33:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e3c61e4f-dd33-339e-baac-d73b89793a32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a5:94:77:d8:88:73:33:49:82:b9:08:27:a1:87:5a:64:f9:
         46:e8:de:e7:8e:f3:1b:7e:42:f0:07:16:d8:74:57:1a:52:dd:
         0d:f7:43:c8:0b:80:b4:16:e8:c2:2f:90:5c:64:e3:76:05:93:
         de:fc:9a:eb:03:96:8f:31:5e:94:8a:f5:8c:5d:33:e2:04:83:
         29:5b:c6:90:da:a1:21:c6:4f:4e:8b:f1:e4:bf:31:9f:b6:bb:
         97:d4:6f:e1:46:85:8f:03:a0:1b:68:33:22:32:7d:a7:6f:20:
         67:4b:8d:bf:bc:98:78:66:8b:6a:b8:13:38:f6:57:5f:6c:25:
         84:ad:2c:88:bc:87:8c:50:f9:e1:4f:cc:73:c9:7f:aa:71:d0:
         3d:b8:0b:7c:2c:0a:8b:86:fc:83:94:56:61:9f:8a:0b:4a:64:
         ee:ea:ca:a2:fb:6a:da:1b:13:c7:ec:d4:af:51:ce:78:ed:29:
         27:57:5d:cf:a9:28:53:e8:f1:e8:fa:75:a9:29:70:ba:1a:ac:
         0d:31:95:28:ca:d7:1b:bb:1f:97:65:19:f8:f0:72:77:3d:44:
         c9:13:f2:1c:13:03:c5:5e:4d:1b:13:14:af:25:40:68:95:2a:
         2d:60:c2:89:df:e1:17:02:46:40:03:b3:66:8d:6a:95:e7:a9:
         ca:f6:8d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:20:39 2026 by rpki-client