Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ca58d4-09cc-31b5-986d-78586d98af75.roa
File:                     f8ca58d4-09cc-31b5-986d-78586d98af75.roa (raw, json)
Hash identifier:          tMFMRRpfgZsn7+fsxt+bJD+3Z3OvTmte8NUhl40+aO0=
Subject key identifier:   61:CE:A8:0F:0E:7E:77:CC:A9:2F:42:18:D7:94:2C:D4:90:D9:28:C7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E3FC485ECD4FAA3E43ADAD180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ca58d4-09cc-31b5-986d-78586d98af75.roa
Signing time:             Sun 21 Jun 2026 21:00:12 +0000
ROA not before:           Sun 21 Jun 2026 21:00:12 +0000
ROA not after:            Sat 19 Sep 2026 21:00:12 +0000
asID:                     396541
IP address blocks:        192.42.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3f:c4:85:ec:d4:fa:a3:e4:3a:da:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 21 21:00:12 2026 GMT
            Not After : Sep 19 21:00:12 2026 GMT
        Subject: CN=363b36aa-d6b0-4d17-bd2e-88baf67ca72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:62:2b:ec:0e:65:79:b1:76:30:f0:26:23:
                    bd:c4:b6:5f:dc:19:41:c7:4a:15:ce:21:f0:a9:1f:
                    dc:67:71:6b:e7:09:21:e3:99:d3:45:bd:99:42:c3:
                    e3:01:0b:f9:c6:97:17:2f:b2:00:45:f8:2f:a7:11:
                    b0:64:11:51:7c:e5:72:a8:26:03:b0:b8:a7:e8:c7:
                    00:20:7c:d5:ab:29:c8:22:2e:52:6b:57:6b:4d:f9:
                    49:e6:27:37:f6:35:d5:8a:bf:5b:22:79:4d:7c:ca:
                    f5:83:8b:26:72:ac:b7:5f:4c:4d:c2:d8:13:47:66:
                    60:c7:aa:eb:6c:d4:6e:7e:f1:3c:80:66:4a:44:53:
                    4d:42:ec:ef:3e:41:0e:d2:10:7f:66:6d:ce:cd:db:
                    1d:58:84:b1:d1:89:76:92:0e:6f:fb:10:57:a8:e9:
                    8f:26:3a:c1:1b:b5:61:84:1f:83:43:18:5b:51:a3:
                    e4:7a:a4:94:d1:c0:0f:7a:66:a6:be:f3:6f:43:86:
                    76:94:1a:34:46:e5:df:cd:45:30:1e:0c:76:80:4e:
                    3a:4f:3f:9a:ea:c8:14:76:7c:82:d5:62:7f:57:e3:
                    d0:98:fc:4e:f3:d6:7e:08:3c:d2:0e:a6:88:e1:9c:
                    eb:b0:3a:b6:3f:a2:db:ed:ac:24:84:fc:b4:0b:53:
                    20:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:CE:A8:0F:0E:7E:77:CC:A9:2F:42:18:D7:94:2C:D4:90:D9:28:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8ca58d4-09cc-31b5-986d-78586d98af75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:05:76:bc:b4:9e:19:e9:28:19:19:50:d6:3d:3a:5b:bc:1c:
         fc:b6:58:74:67:a4:36:cc:bc:7e:b2:29:69:ae:b4:43:ff:1e:
         af:1c:15:c8:2b:5e:61:63:74:32:20:1c:9c:cb:24:36:50:cb:
         05:42:0e:ac:ee:cd:d6:2e:a6:8c:31:98:4a:1d:af:21:dc:cd:
         85:92:f7:b4:7d:cc:d6:b9:66:bc:69:04:0f:14:37:3f:e3:20:
         e0:3b:08:ed:1e:0e:3c:a6:37:93:4b:ce:b9:1b:9d:4c:2d:6a:
         ad:59:b1:85:58:4e:5f:3b:d1:da:fe:29:c5:86:ae:22:ae:42:
         b9:69:f1:c7:8d:a9:bb:48:74:1f:df:a1:53:3d:2c:31:87:5f:
         10:12:cf:e9:47:b0:b1:20:53:64:a1:d2:d9:4a:c9:a0:29:7c:
         50:da:8f:39:f0:19:66:bd:ad:31:86:59:78:91:87:1b:91:41:
         31:b2:21:0f:2e:0b:e6:97:7c:e8:b4:47:30:95:57:c1:0b:01:
         51:6c:43:ab:0f:d8:b9:57:55:ec:f6:66:79:4f:60:ae:b3:48:
         d8:ff:c4:9d:e7:09:c6:5c:cd:8e:06:58:e3:8c:a2:d3:a2:94:
         60:f8:67:58:9c:19:76:28:5b:a6:34:02:bf:11:e8:97:ea:d3:
         fd:cb:d6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:08:48 2026 by rpki-client