Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/456052bc-8460-3293-a1cf-a07256003448.roa
File:                     456052bc-8460-3293-a1cf-a07256003448.roa (raw, json)
Hash identifier:          1OFjgmaXFlW2mJtdgreakt/qYabTrdTKWhXYwGeFgCw=
Subject key identifier:   93:0E:1C:AE:7D:BE:DB:CC:3E:C9:3A:82:81:38:6D:81:56:D6:D4:63
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D9B85601555FFF8DCCBF80500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/456052bc-8460-3293-a1cf-a07256003448.roa
Signing time:             Fri 24 Apr 2026 01:00:23 +0000
ROA not before:           Fri 24 Apr 2026 01:00:23 +0000
ROA not after:            Thu 23 Jul 2026 01:00:23 +0000
asID:                     396545
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9b:85:60:15:55:ff:f8:dc:cb:f8:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 24 01:00:23 2026 GMT
            Not After : Jul 23 01:00:23 2026 GMT
        Subject: CN=1ce9c523-74c5-42ec-8937-63e2049d7fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:28:55:99:5b:17:97:07:9d:0c:7d:24:af:
                    9e:65:fa:35:21:4c:04:02:4c:73:f8:e4:6d:58:75:
                    8d:de:1a:65:79:25:a8:8d:81:df:f6:f2:b1:08:a7:
                    8d:a5:fb:96:2c:77:9b:b0:7d:db:9d:6b:33:27:63:
                    68:19:a6:af:44:ae:94:34:5d:8e:21:ce:98:ed:f9:
                    25:4f:3b:22:87:1d:46:35:5a:33:8f:b1:92:be:b0:
                    d8:29:33:4c:7b:04:d7:b4:c0:22:b1:44:f6:59:1f:
                    37:f0:e1:e2:fe:af:e9:8e:b6:fd:34:2c:96:7a:32:
                    21:eb:e2:83:a4:3a:88:b0:41:4b:3d:4d:ca:e5:8c:
                    de:ac:45:04:3d:f4:8d:db:4c:e4:c3:b7:91:ee:74:
                    a0:b3:ac:ad:5d:5a:cd:5a:68:f5:a2:89:ff:ed:21:
                    de:6e:d8:7b:a9:2a:96:ca:b5:a8:a5:1a:f0:db:1d:
                    5e:f8:31:36:46:28:44:cf:ed:06:22:69:13:fa:ef:
                    a3:cb:de:38:c4:32:a0:ab:72:71:60:6a:3b:30:7a:
                    75:d9:e0:7f:91:29:3d:c7:0b:98:bb:a5:97:4e:40:
                    e9:93:39:ba:bb:de:5f:03:6f:86:4f:7b:7a:a7:0f:
                    da:26:6a:bb:0a:71:78:94:18:14:bc:c0:03:7f:10:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0E:1C:AE:7D:BE:DB:CC:3E:C9:3A:82:81:38:6D:81:56:D6:D4:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/456052bc-8460-3293-a1cf-a07256003448.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:24:82:3c:0b:f8:37:f3:55:fc:87:a6:6a:91:cd:b4:14:ac:
         60:d6:9c:c2:db:e3:b7:58:c8:f1:6f:bb:6c:20:a4:bb:2f:fe:
         bf:53:65:3b:a2:2f:f9:9b:45:99:91:72:8e:09:c8:f6:72:d5:
         82:1b:65:4a:83:5f:e9:08:b0:7e:99:9d:37:11:5d:31:6e:58:
         cb:64:28:82:6d:cf:14:6e:e5:52:3d:3f:84:89:a9:9c:6a:48:
         43:09:de:2a:41:a6:5a:59:1b:ab:83:52:3a:cc:3b:d2:76:1f:
         2d:cb:3e:ee:09:bc:02:b6:7f:d5:87:0c:db:2e:19:ae:5e:9a:
         ce:2c:73:18:1b:c2:ee:db:6e:39:cc:91:14:f7:d9:2f:87:8f:
         53:21:80:c2:f2:89:0b:94:49:0b:e1:c1:3b:6e:52:ce:7c:46:
         4f:29:d8:ed:a2:b4:48:7b:ad:01:a9:3e:78:f6:52:17:af:4b:
         50:ed:92:d9:f6:84:19:e1:93:6a:8c:1f:4a:94:17:2a:cd:68:
         fa:2e:1b:e8:f4:87:f8:4b:1c:4a:9c:89:80:25:ef:fb:d8:29:
         a2:bb:5d:b0:09:a0:4d:74:eb:38:9b:b3:9e:59:48:f3:67:23:
         5a:31:98:d2:df:9e:62:05:c0:2d:cb:2d:47:a3:e8:36:a1:85:
         83:d3:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:50:03 2026 by rpki-client