Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28e1d947-8dc7-3323-bcad-cbac1c21ccb0.roa
File:                     28e1d947-8dc7-3323-bcad-cbac1c21ccb0.roa (raw, json)
Hash identifier:          b8ywQKQj1xEEghOl7t9TCR3RuaWuzURPMX3F7sK5Tyk=
Subject key identifier:   B9:E5:65:C3:28:38:75:69:6A:4B:99:44:77:55:3A:F0:06:23:DC:7E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8B24E8E76492E4C90E121CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28e1d947-8dc7-3323-bcad-cbac1c21ccb0.roa
Signing time:             Sat 18 Jul 2026 21:00:11 +0000
ROA not before:           Sat 18 Jul 2026 21:00:11 +0000
ROA not after:            Fri 16 Oct 2026 21:00:11 +0000
asID:                     396555
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8b:24:e8:e7:64:92:e4:c9:0e:12:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 18 21:00:11 2026 GMT
            Not After : Oct 16 21:00:11 2026 GMT
        Subject: CN=187d558f-c039-48a9-bcd6-0307363f55e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:78:76:ce:56:74:e0:f4:49:74:aa:68:a7:a2:
                    d3:4b:d8:ea:33:85:fa:1d:92:5c:a5:c9:fe:a8:28:
                    05:e9:1c:c7:6f:50:6b:f4:8b:c7:f7:49:53:fa:a2:
                    b0:43:37:c6:b5:44:dd:cd:25:c1:7d:91:df:4c:f6:
                    38:ee:06:29:81:e4:4c:db:5a:1e:34:f9:e4:bf:be:
                    1f:b2:ae:b3:61:1d:99:c4:eb:c1:66:63:0a:6f:37:
                    34:ef:35:17:ae:2b:ce:a0:cd:30:17:25:58:af:45:
                    85:cf:69:a3:bf:03:b5:75:b6:1a:2e:00:b1:31:01:
                    60:b7:0d:62:e6:01:5b:2e:18:97:74:f1:a2:3f:f4:
                    15:02:5a:ef:59:b9:e8:c7:29:62:d3:c3:8c:a9:11:
                    20:42:08:84:93:f3:f6:3a:44:d5:80:ac:d8:15:70:
                    ce:ee:8a:e4:2f:95:e3:58:20:55:c7:0e:8d:7c:86:
                    1e:72:84:ec:9b:c9:5f:2d:73:d5:64:27:e5:3a:76:
                    ab:15:45:d4:db:9b:97:1f:42:5b:08:32:0f:c6:b4:
                    65:87:d2:86:cb:4a:da:4b:0f:a2:cb:65:e3:95:5b:
                    f9:85:f4:58:9a:9f:18:62:d5:a8:a9:bd:c1:4b:d6:
                    89:aa:72:6e:21:4c:ba:ed:94:9b:39:c5:54:b5:c9:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E5:65:C3:28:38:75:69:6A:4B:99:44:77:55:3A:F0:06:23:DC:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28e1d947-8dc7-3323-bcad-cbac1c21ccb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:54:78:9d:a8:be:f5:19:c5:03:c5:9d:3a:06:ac:be:05:fb:
         b6:93:b3:38:92:09:d0:bd:2a:83:56:3d:1b:b9:6c:4b:5a:00:
         06:d0:fe:ab:3f:b0:a9:7e:f8:f1:ae:42:1a:19:b9:d7:4e:1b:
         89:b9:3a:87:80:6a:2e:7a:a3:4f:98:d9:94:de:a6:8b:17:bf:
         c8:13:bb:7a:57:47:d9:11:cd:69:e3:be:7e:df:5b:1d:26:86:
         cf:43:78:75:71:41:28:2a:11:59:11:b7:99:4e:7c:ed:90:a5:
         7f:6b:57:08:99:ee:59:55:05:1e:73:0a:d0:50:cd:cd:63:d6:
         2a:30:0b:40:36:6f:55:91:69:3d:2e:a1:d9:8d:ca:d8:6f:63:
         d9:22:16:59:c1:f5:78:2a:a3:22:58:be:22:84:0c:d3:32:d6:
         e6:3e:4f:4e:78:c3:7e:91:96:fb:a7:fa:05:fb:4f:1d:2c:86:
         31:49:7a:9d:5b:f8:de:92:e6:b6:22:0a:82:bb:c3:62:bd:cc:
         59:96:c6:9d:18:ec:25:ab:13:7c:92:8b:a9:9c:0c:7c:b2:45:
         5b:43:9d:1e:2a:68:6f:c9:59:9a:30:5d:4e:10:39:bd:6b:e2:
         89:dc:08:48:50:48:28:1f:03:fa:d5:5e:c5:84:7e:80:08:cc:
         96:6a:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:11:58 2026 by rpki-client