Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e48d5d54-3101-309b-abec-fa2ac68e052d.roa
File:                     e48d5d54-3101-309b-abec-fa2ac68e052d.roa (raw, json)
Hash identifier:          ZnxSpYDyfg8mNhT0Nbr4NJH10AJvssuv1zUY5kL8Zs4=
Subject key identifier:   9C:16:53:9F:5B:BB:98:CB:52:E5:0B:F7:15:2D:C5:8C:E1:68:EA:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498B81AF77A1851E70179EE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e48d5d54-3101-309b-abec-fa2ac68e052d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396596
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8b:81:af:77:a1:85:1e:70:17:9e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=47f01907-922a-43ff-92df-bbcfeae7c267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b9:27:9e:1e:28:c2:58:20:c7:17:b7:6e:a3:
                    66:c2:35:4e:43:e8:61:4d:50:a3:89:93:7b:c2:e6:
                    17:0b:1e:ca:d1:cb:2e:28:8c:1d:1b:c8:00:8c:38:
                    84:90:81:c4:8e:26:ba:14:61:59:04:d4:45:4c:e0:
                    7f:4c:a4:63:00:8f:2b:e4:3a:a6:63:06:62:53:75:
                    0c:69:00:4a:48:8e:0b:02:09:c5:b2:19:07:37:76:
                    26:30:ca:e2:b5:e8:8b:d5:fb:8b:9a:41:f4:c0:31:
                    67:7a:cf:7b:e2:2c:0f:6f:4a:17:d2:dd:00:de:13:
                    73:23:24:b3:e8:8a:c5:f5:cc:35:d3:d3:4d:2e:21:
                    7e:5e:e2:6e:ea:8a:1a:21:70:cd:78:0c:1b:3c:f8:
                    91:db:fa:db:2e:ac:39:58:2f:94:03:9d:c2:b5:c4:
                    80:e8:f1:df:69:69:f5:6c:13:79:d8:9a:f1:81:47:
                    a8:33:77:36:c9:fc:de:88:7f:3b:d4:6b:a1:89:88:
                    52:5f:b6:ff:74:3e:81:51:e4:aa:62:11:d3:00:dc:
                    d6:5f:2a:a7:95:6f:92:94:c9:e1:4a:aa:63:ae:f7:
                    b8:c1:56:31:d3:1d:a0:b4:84:ab:36:36:48:1d:73:
                    32:89:ff:18:90:58:cc:7f:e1:56:0e:56:82:82:43:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:16:53:9F:5B:BB:98:CB:52:E5:0B:F7:15:2D:C5:8C:E1:68:EA:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e48d5d54-3101-309b-abec-fa2ac68e052d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:3f:ae:fb:13:47:4a:fe:e6:69:b5:79:37:b3:88:c3:4a:
         29:bf:f1:8c:56:8a:23:f9:3a:aa:d1:ce:99:fa:f0:db:9e:59:
         d4:f9:f4:2e:08:c0:9d:cf:bf:cf:45:b7:80:9c:84:89:3b:a0:
         0c:c1:31:cc:de:2a:67:3d:76:e4:53:68:f4:b2:0f:3b:3a:eb:
         b5:bf:38:aa:5e:2e:d9:24:40:9b:53:12:4f:2b:a5:50:df:e3:
         a4:ec:97:3d:67:3b:9f:3c:88:14:b4:ed:b8:45:41:cb:e1:ad:
         bd:dc:1e:a0:61:c0:87:e3:43:f9:74:3c:f8:57:47:6e:e5:20:
         75:b8:fa:f8:95:8c:62:a0:f7:a3:35:75:69:7d:89:41:44:8b:
         0d:01:71:05:8b:ce:e9:f9:8e:34:df:d5:9f:f4:a7:06:0a:0b:
         61:e5:50:30:c4:84:c7:4d:01:2a:5e:06:7e:4b:f6:6e:f8:01:
         33:5e:e4:fb:b2:cd:ce:40:d5:2d:c9:c2:dd:e0:49:3e:52:b4:
         e1:91:61:8b:5e:f0:5f:ee:0a:73:8e:5c:35:04:8a:50:ed:88:
         52:4b:2c:28:b4:37:e5:5c:44:87:1a:e4:05:b1:f4:9f:c8:17:
         3f:b2:6e:52:aa:40:b2:72:0a:9a:ae:62:20:30:d6:f2:9c:2d:
         32:cd:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:53:17 2026 by rpki-client