Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42986c22-0695-43f9-a0ef-4db0c05c39b8/e24c6d84-05e1-3a0d-8e33-0d46ed82d6fd.roa
File:                     e24c6d84-05e1-3a0d-8e33-0d46ed82d6fd.roa (raw, json)
Hash identifier:          IhCYgaIaP5D3E4+UyzZ0fHSSaNXODZU+WAM3T04Zw9Y=
Subject key identifier:   22:70:E2:A9:3D:A2:CF:DC:07:A5:16:EE:88:4D:11:E2:D3:25:5B:D3
Certificate issuer:       /CN=42986c22-0695-43f9-a0ef-4db0c05c39b8
Certificate serial:       010D0C9F4328584D6E24553F2CA0F71966F04340
Authority key identifier: 46:6E:AC:5C:92:D7:7D:76:CF:0B:E0:E4:F6:53:91:77:DD:63:44:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42986c22-0695-43f9-a0ef-4db0c05c39b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42986c22-0695-43f9-a0ef-4db0c05c39b8/e24c6d84-05e1-3a0d-8e33-0d46ed82d6fd.roa
Signing time:             Tue 07 Apr 2026 18:53:42 +0000
ROA not before:           Tue 07 Apr 2026 18:53:42 +0000
ROA not after:            Mon 06 Jul 2026 18:53:42 +0000
asID:                     402217
IP address blocks:        192.65.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42986c22-0695-43f9-a0ef-4db0c05c39b8/42986c22-0695-43f9-a0ef-4db0c05c39b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42986c22-0695-43f9-a0ef-4db0c05c39b8/42986c22-0695-43f9-a0ef-4db0c05c39b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42986c22-0695-43f9-a0ef-4db0c05c39b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:24:55:3f:2c:a0:f7:19:66:f0:43:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42986c22-0695-43f9-a0ef-4db0c05c39b8
        Validity
            Not Before: Apr  7 18:53:42 2026 GMT
            Not After : Jul  6 18:53:42 2026 GMT
        Subject: CN=edf47739-18a7-48e4-bdbd-83cebc408724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:92:58:bc:3a:a6:e7:4b:28:eb:13:83:ab:6e:
                    d8:17:c1:bc:e4:de:d0:9a:ce:5f:37:69:a4:55:f8:
                    19:0c:1e:c7:79:b2:5e:52:b9:ea:78:bd:1f:e5:79:
                    02:41:25:29:0f:48:90:a7:06:49:55:58:db:02:d0:
                    bd:7a:5c:05:84:cf:ec:9d:fe:d5:72:8d:1c:d2:65:
                    60:dd:8a:e2:68:1d:5d:6c:2c:0d:13:df:ab:1d:48:
                    34:3b:8f:2b:7d:ee:bd:89:d5:55:8f:73:e4:96:9c:
                    96:f2:36:d9:f7:12:59:2d:cc:a5:f0:04:b9:6e:70:
                    27:bd:9f:c4:c6:a0:b4:c4:43:e6:04:cd:b6:9e:38:
                    2a:53:b1:17:67:15:ad:ee:f3:d6:ff:5c:40:d1:87:
                    04:6f:cb:f8:42:d0:5e:3a:f5:2e:57:53:44:49:d0:
                    33:56:64:a9:86:64:b0:1c:ed:d3:3d:87:99:47:08:
                    1a:c6:85:46:57:48:a4:65:18:fc:12:8a:18:b8:59:
                    35:fc:04:cc:93:25:6e:f0:69:c1:9b:8c:80:0c:52:
                    02:a2:75:3a:70:0e:30:21:68:e7:8c:59:58:bc:fe:
                    45:15:a4:f9:5f:3e:81:bb:09:ee:5f:f7:7f:41:b6:
                    3d:e6:91:f8:15:c0:d3:0e:b0:98:b0:15:53:95:44:
                    92:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:70:E2:A9:3D:A2:CF:DC:07:A5:16:EE:88:4D:11:E2:D3:25:5B:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42986c22-0695-43f9-a0ef-4db0c05c39b8/e24c6d84-05e1-3a0d-8e33-0d46ed82d6fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42986c22-0695-43f9-a0ef-4db0c05c39b8/42986c22-0695-43f9-a0ef-4db0c05c39b8.crl

            X509v3 Authority Key Identifier:
                keyid:46:6E:AC:5C:92:D7:7D:76:CF:0B:E0:E4:F6:53:91:77:DD:63:44:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42986c22-0695-43f9-a0ef-4db0c05c39b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.65.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:6e:1b:72:1e:79:c4:16:e7:25:24:29:22:c1:ba:04:c9:cc:
         2f:33:9b:07:2a:0f:c6:fd:59:58:a6:cc:2e:6f:21:fe:7b:f4:
         ac:b6:3d:72:47:87:2f:73:c0:78:b1:f5:88:86:bf:14:58:b1:
         4b:17:3c:ea:1a:25:bf:91:72:30:57:ee:93:67:59:03:e9:3f:
         19:f4:c6:02:35:e9:6a:20:57:c6:b2:81:ce:a7:25:ba:61:96:
         b5:8a:29:08:66:3f:31:83:fd:c6:5f:dd:51:ad:ad:e6:44:e9:
         d0:3b:a7:de:e6:6b:73:32:11:03:20:8e:9d:4f:9f:05:9c:68:
         d0:db:91:f6:e9:ba:53:d1:0d:de:40:e2:39:f0:54:6f:9f:2b:
         e8:06:ff:96:76:22:c7:1a:31:4d:d0:b7:f6:35:04:c1:42:e6:
         fc:2b:8b:11:2c:8d:44:f6:6d:a6:91:7d:7a:55:65:03:16:01:
         5a:5e:c5:b4:53:aa:6e:ad:39:f6:8d:a6:cb:10:5d:c2:c7:cf:
         89:a5:71:59:30:f0:99:a0:56:1b:11:ea:c1:d2:70:ac:f1:3d:
         cf:7f:84:f9:f3:d6:1d:92:eb:45:fd:7f:b0:15:7a:00:1a:dc:
         5d:9c:c2:3b:a8:3d:88:f3:64:b4:ce:69:0e:bd:3a:6b:e1:a5:
         b7:67:61:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 10 04:06:57 2026 by rpki-client