Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31141562-b78e-3b71-a711-609d8da4d352.roa
File:                     31141562-b78e-3b71-a711-609d8da4d352.roa (raw, json)
Hash identifier:          JftwtSucZERXqH3jHnsqDhRiUdjO6u2wvIyPY9qDlLA=
Subject key identifier:   A5:BF:2F:70:3E:61:63:24:E1:7C:AA:F6:5F:A3:D5:BE:36:6B:A2:26
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B116CC3C6ECE7A9E49CD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31141562-b78e-3b71-a711-609d8da4d352.roa
Signing time:             Tue 24 Mar 2026 15:44:58 +0000
ROA not before:           Tue 24 Mar 2026 15:44:58 +0000
ROA not after:            Mon 22 Jun 2026 15:44:58 +0000
asID:                     396595
IP address blocks:        192.42.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:16:cc:3c:6e:ce:7a:9e:49:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:58 2026 GMT
            Not After : Jun 22 15:44:58 2026 GMT
        Subject: CN=3ab5ed73-5164-44e0-ba78-e88f9aecf6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a9:3d:9e:c1:66:3f:13:c3:72:14:fd:7f:2e:
                    e8:9c:40:94:d0:10:f9:b2:40:f9:93:69:df:fe:1a:
                    4d:00:9d:3f:bb:0b:59:ec:9b:62:a6:71:ad:c7:49:
                    4f:4f:ca:81:d0:a8:87:c2:53:2f:6e:f6:53:74:b9:
                    39:76:e4:7a:33:1b:ea:ce:e3:ff:db:25:88:3b:16:
                    b2:25:2e:89:65:3d:4c:dc:69:06:03:9f:bf:fa:b8:
                    62:c6:90:fb:a2:9d:03:d6:25:7e:eb:ce:9c:5d:ac:
                    82:13:b6:87:4a:72:70:bd:3f:58:00:a3:68:f0:77:
                    da:0e:7d:0b:45:d9:8c:cc:57:cb:8b:00:c6:c0:82:
                    65:8a:56:f9:df:21:79:3a:ee:13:74:c3:bc:58:0b:
                    da:a6:3e:87:d8:56:d5:22:5b:14:05:9e:9b:e8:45:
                    16:7b:38:fb:47:45:09:44:13:d4:fe:6d:0f:e8:33:
                    f5:f8:4d:b6:7c:b2:4e:80:0d:71:fe:5f:26:87:55:
                    e9:23:4c:13:87:13:9e:cf:4e:ce:af:ba:ca:d1:95:
                    07:ab:5a:9c:98:64:cb:a2:7a:c1:db:45:01:57:59:
                    6b:bc:d5:7c:f6:fe:99:38:16:69:69:75:ad:31:a9:
                    04:da:22:c0:ba:53:af:16:e9:c3:30:b4:65:1a:e9:
                    44:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:BF:2F:70:3E:61:63:24:E1:7C:AA:F6:5F:A3:D5:BE:36:6B:A2:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/31141562-b78e-3b71-a711-609d8da4d352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e1:2f:c9:6b:42:2d:76:aa:33:26:9b:62:62:c9:9f:2e:26:
         77:ae:70:59:96:65:ac:3e:71:f8:12:82:8f:69:b3:d4:51:b1:
         32:7c:9d:d5:0a:7d:a4:6f:20:2a:41:7b:24:c5:66:2c:37:0c:
         06:43:60:bd:9c:17:8a:6a:02:cf:f0:d2:88:ed:66:20:a0:26:
         b9:ad:6f:66:f2:e4:6e:88:91:cd:89:ca:66:6a:7f:53:8a:46:
         6c:b2:6c:85:e6:8b:1c:4f:42:cc:0d:ef:0c:5e:f0:0b:9c:bb:
         88:fe:13:b0:94:5e:06:a6:7b:0c:b3:92:c6:d6:0e:4f:3a:e1:
         58:18:d8:62:71:04:ff:ca:3c:d8:fd:0d:b3:07:79:a2:49:90:
         30:5c:6f:73:22:09:a2:15:27:f4:ab:9a:2b:88:72:6e:d8:d4:
         1b:0d:52:03:5b:20:5c:f1:d8:cd:f6:06:85:09:6d:e2:5c:60:
         a2:2b:e8:fc:19:86:b2:81:11:c4:93:b4:ba:a6:a1:0f:29:81:
         2d:8f:51:d6:83:80:b3:61:3c:98:e4:08:86:1e:87:13:be:e0:
         8f:87:81:87:d8:5a:4a:1c:99:a7:6b:15:b7:df:4b:4b:11:f5:
         f8:79:3e:a1:cc:00:02:cd:18:06:24:36:9f:d2:de:05:81:6f:
         2b:d4:bd:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:03:46 2026 by rpki-client