Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2899d4c0-e9d5-3d82-a8a8-5ef1f3f6f845.roa
File:                     2899d4c0-e9d5-3d82-a8a8-5ef1f3f6f845.roa (raw, json)
Hash identifier:          qndT76QFO02eT+IZNN6Jxxm2H4GOJZQloI6k3I8LJlg=
Subject key identifier:   73:9A:BF:B1:47:B1:32:D9:FB:49:92:49:9F:CC:32:CF:55:38:42:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584FCF9130735DD2C7068ADE3680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2899d4c0-e9d5-3d82-a8a8-5ef1f3f6f845.roa
Signing time:             Thu 12 Nov 2026 02:00:12 +0000
ROA not before:           Thu 12 Nov 2026 02:00:12 +0000
ROA not after:            Wed 10 Feb 2027 02:00:12 +0000
asID:                     397203
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:cf:91:30:73:5d:d2:c7:06:8a:de:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 12 02:00:12 2026 GMT
            Not After : Feb 10 02:00:12 2027 GMT
        Subject: CN=5f85c825-6565-44c4-8049-fb7cef41df08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:15:d0:8c:b8:ac:65:f6:8f:1a:0f:35:eb:6b:
                    d9:54:7c:5e:12:a5:0c:95:4b:ca:0e:4b:f1:46:cd:
                    ae:a8:e6:f1:bb:64:21:88:41:46:64:d7:6f:df:4a:
                    23:a7:4c:ab:18:e9:33:58:62:9c:05:1c:32:a5:e9:
                    bd:f3:85:03:db:2e:33:f8:77:0d:4e:c9:e2:14:5a:
                    9e:a0:5c:9c:50:55:3e:5b:72:f1:40:d0:06:3b:95:
                    d0:71:e9:4a:80:a4:57:06:1a:fa:10:a9:dd:59:02:
                    e9:48:9e:5b:75:b2:a2:c1:96:b6:6e:70:c5:78:88:
                    61:71:59:5d:83:41:ca:7f:c4:7b:68:11:04:45:69:
                    00:39:18:b7:a4:96:ac:d5:56:61:24:81:9f:f0:bc:
                    b0:e1:e2:d1:a7:1f:32:bd:12:da:5c:a2:61:b0:25:
                    73:89:b0:22:e4:03:e0:e9:fe:63:01:2f:98:7d:9e:
                    ee:e1:42:fc:4c:c8:a4:a2:3d:52:27:9a:0c:3d:e2:
                    c2:03:13:15:53:2e:8d:77:42:6e:29:2a:ac:f7:f6:
                    89:c5:15:52:13:19:27:8c:4f:58:12:cf:5d:55:aa:
                    fe:39:81:61:04:2f:95:bf:b1:0d:4e:2f:17:32:1d:
                    8a:ff:47:98:64:3f:b6:57:31:ec:01:7f:3a:ff:f1:
                    e1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9A:BF:B1:47:B1:32:D9:FB:49:92:49:9F:CC:32:CF:55:38:42:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2899d4c0-e9d5-3d82-a8a8-5ef1f3f6f845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:7d:5f:26:c8:69:53:73:68:4e:73:f2:cf:3d:5a:4f:be:b8:
         e0:43:a3:3c:95:c8:95:5d:7b:48:41:9a:82:6e:13:79:87:b6:
         62:69:6c:61:db:2b:40:d5:cd:2c:82:2a:ba:cc:33:b3:75:5a:
         f6:82:94:53:5d:4d:3a:08:a4:b2:29:4e:22:57:96:aa:72:ca:
         04:5f:52:f4:dd:5c:a0:76:15:1d:c9:73:21:83:a0:11:d1:7e:
         ee:d9:d9:2b:6b:22:a1:63:32:75:af:20:a6:63:f0:4d:7b:93:
         97:4d:59:0f:91:e7:b3:94:92:f8:18:8c:a8:ad:6d:19:dd:d8:
         38:5d:cd:2d:d4:fa:f8:82:0e:69:3a:d3:23:b6:37:a9:3d:5a:
         e8:c0:77:a2:be:7c:35:b4:a5:73:95:03:56:61:c5:ba:73:64:
         e7:50:ab:94:4b:66:0c:34:3f:c2:ba:61:44:ed:0e:80:61:d8:
         7f:51:c2:6b:09:14:b8:0d:ae:a7:eb:0a:df:44:77:b2:97:ec:
         ff:1f:8b:20:9d:7c:12:3c:2f:6e:2e:66:a4:13:a1:32:31:94:
         fb:05:8b:05:16:4e:4d:1e:30:09:73:c1:b6:ad:84:bd:24:d9:
         1a:8d:3f:9d:22:ec:76:fd:c4:f7:b2:de:64:24:1a:2c:18:9c:
         e1:94:41:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:21:28 2026 by rpki-client