Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f4eaa-e000-3c3c-aea4-83f317957683.roa
File:                     0b9f4eaa-e000-3c3c-aea4-83f317957683.roa (raw, json)
Hash identifier:          OliLMnkcWFgX/nnbw6PO7kX+N4cGVn0s3t+nLy4528U=
Subject key identifier:   F8:A5:A5:56:D4:4D:9C:8C:95:0D:12:4A:E1:CD:DB:8F:D2:19:79:E7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E815F858B3A14379D6A4CA900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f4eaa-e000-3c3c-aea4-83f317957683.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     396608
IP address blocks:        192.48.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:85:8b:3a:14:37:9d:6a:4c:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=5ae75192-96d8-4c3e-825a-9179c3488ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:0f:f9:5f:ae:f6:69:98:2f:6b:10:44:af:
                    3a:f7:3b:48:24:c8:37:97:85:ee:bf:88:b2:f1:77:
                    31:a8:29:ca:50:fc:3f:03:8c:da:75:4f:15:81:d1:
                    32:50:36:29:6f:a1:a5:03:e3:b2:f6:4e:72:04:d0:
                    88:34:ce:0c:62:6f:97:39:58:2b:65:b8:b3:f8:9c:
                    7a:8b:f9:96:fe:58:fa:be:1c:85:cc:17:61:a8:dd:
                    d5:a5:14:ef:f2:1d:b8:ca:53:4c:9c:44:01:ee:4b:
                    80:af:65:94:2a:05:36:33:18:06:20:c8:43:f6:b2:
                    d0:11:c2:f8:e4:5f:59:2e:04:96:00:d3:a5:cc:df:
                    35:cd:58:23:5f:ec:f9:bf:a2:52:e0:ce:79:27:e7:
                    c4:32:29:ae:cf:a3:e4:99:1b:63:f7:61:1d:c8:e7:
                    80:c4:85:eb:fa:ba:fb:73:35:5d:b1:a8:88:27:29:
                    a9:60:b4:7f:d9:47:f0:97:e2:fb:45:bc:e3:b0:92:
                    a3:db:02:8d:39:b0:7f:b0:73:54:3a:0a:d8:cb:f1:
                    bd:44:92:cc:9d:bc:a4:33:8d:33:b6:80:97:d5:61:
                    7f:c6:dc:2a:29:d1:be:0f:7b:84:06:7e:63:2d:d1:
                    93:44:9e:b1:b8:87:eb:da:73:21:84:44:0a:ce:db:
                    20:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:A5:A5:56:D4:4D:9C:8C:95:0D:12:4A:E1:CD:DB:8F:D2:19:79:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f4eaa-e000-3c3c-aea4-83f317957683.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:92:ef:28:53:f2:d2:f2:75:5f:f4:24:5d:18:cc:e8:18:16:
         06:5f:10:7b:6e:eb:f6:ff:0a:6d:e6:3e:91:09:83:bd:83:f5:
         b8:49:5a:44:9f:86:13:90:75:25:4b:39:8e:7e:c3:43:77:34:
         6d:ef:75:ea:71:8f:43:25:d2:43:f8:19:96:c3:6e:eb:b5:91:
         d2:a1:75:21:ee:97:53:11:d7:5a:2f:4c:c4:37:38:86:06:cc:
         fd:c5:80:99:75:1e:62:77:fc:7b:b5:58:5b:92:bd:2e:2d:c0:
         f2:f3:30:6d:64:4d:5c:5c:c6:d9:cd:85:3b:02:b8:82:80:13:
         6c:db:3a:a5:ea:63:16:56:d8:db:98:0f:2f:dc:24:fb:b3:57:
         b1:6f:e1:ae:8b:ed:9c:f8:ac:71:a4:70:92:66:60:f4:b3:56:
         a7:c1:78:67:cf:7c:ce:86:49:b0:30:2d:bf:4a:18:56:22:e5:
         59:87:83:ac:b6:38:fd:2a:76:3c:ae:70:dd:7a:02:69:04:a7:
         24:46:70:81:48:bb:75:85:c2:cd:5b:d3:27:6b:a7:72:41:8d:
         bd:e9:c7:1b:74:f8:38:c1:71:a2:25:25:fe:d0:25:03:9c:f0:
         c5:18:4c:28:43:87:66:0b:92:b5:6b:b1:46:97:e7:1d:13:27:
         77:e5:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:56:52 2026 by rpki-client