Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/468ef32d-6652-3188-a85a-67e2683f38e5.roa
File:                     468ef32d-6652-3188-a85a-67e2683f38e5.roa (raw, json)
Hash identifier:          hDd3L1HRjc2nqz2aKyc0QnNATDK3lUZsY/AsT2IEyuU=
Subject key identifier:   7E:93:72:38:8B:56:93:18:4C:59:68:A6:FE:F1:AC:7F:8A:1C:6C:A3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972A04ABDB9D42DD9B931E0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/468ef32d-6652-3188-a85a-67e2683f38e5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396583
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:a0:4a:bd:b9:d4:2d:d9:b9:31:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=c185c280-3604-4996-b5de-5da6d1a42f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:28:18:ac:43:94:a3:7e:14:79:4f:0e:ed:
                    c9:b2:18:60:eb:e7:af:a1:a6:ba:d5:05:9c:9c:01:
                    34:63:0a:5a:9f:6c:7f:89:90:3e:35:67:02:ba:ee:
                    4f:51:b4:dc:b7:63:47:26:39:cf:6d:2a:53:ac:c3:
                    81:34:5c:73:9d:5f:f1:5d:53:16:06:96:c9:d6:99:
                    29:f8:56:87:66:14:1f:27:26:9d:8a:d6:d8:66:4b:
                    a3:36:a8:d1:c8:c4:83:31:4a:4b:27:5a:2b:48:31:
                    3f:84:cd:2f:9c:59:49:c9:f9:da:df:83:3f:f2:c9:
                    e2:be:10:a5:22:05:ad:1e:a3:17:6f:4c:73:3e:7c:
                    06:7a:66:28:7d:3e:c5:f5:2f:c0:bb:20:fb:4b:b5:
                    e6:c7:3f:f5:28:54:40:67:f4:66:99:e2:e0:cb:77:
                    ca:84:ee:ea:6b:6f:85:7a:67:e6:47:74:a2:b8:ee:
                    fa:02:cc:cd:52:39:50:d8:95:b5:b4:81:51:ef:18:
                    03:aa:46:cd:5a:e8:ae:0e:bc:41:88:20:f7:b1:57:
                    bc:3d:ff:40:98:90:1c:f7:15:e9:db:08:9e:1c:06:
                    11:40:d2:47:2d:60:fb:df:ef:c8:d6:58:df:51:3b:
                    a6:73:fe:51:5b:75:6f:96:9b:b2:9d:70:ee:6d:9e:
                    62:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:93:72:38:8B:56:93:18:4C:59:68:A6:FE:F1:AC:7F:8A:1C:6C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/468ef32d-6652-3188-a85a-67e2683f38e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:4f:71:42:7a:b3:3d:c3:d6:8a:fc:5e:b7:18:b3:2a:a8:69:
         84:cf:b4:48:72:7d:70:5e:19:01:a3:6d:76:1e:25:ff:28:13:
         a4:ab:e6:e9:f6:1c:55:b0:b6:48:cf:25:21:59:eb:21:4d:41:
         0c:78:3c:40:f9:9a:3f:ea:f2:93:b7:f4:85:d3:2c:b9:55:ad:
         ec:ae:1c:c2:98:d4:8e:9b:75:dc:97:fa:fe:3a:0d:1e:13:aa:
         27:75:14:7d:65:38:18:27:f1:52:59:f7:17:7d:78:a6:59:62:
         1f:8e:72:1f:26:a3:84:84:5e:bd:5a:1b:8c:c4:ea:0f:77:a1:
         0f:ee:a6:3a:97:13:40:26:d1:85:31:69:c0:e2:da:44:89:92:
         ff:fb:65:4a:ff:18:54:2c:17:48:9c:ae:b6:4c:42:fb:20:8c:
         91:a9:bf:e2:56:2e:41:e5:e2:aa:df:3a:76:34:3a:a8:9c:a5:
         d3:8a:55:c3:e3:9c:be:46:aa:1f:c9:a9:e6:d4:b5:87:1e:dc:
         98:2a:9a:11:e3:eb:4c:5c:b4:04:4c:32:ec:cc:14:a8:6b:33:
         1d:ea:b1:2b:40:13:fd:f1:e1:d2:3a:68:51:69:8b:92:ea:11:
         50:a4:b7:a4:45:ae:10:0a:32:b9:23:1a:6a:84:62:90:38:17:
         25:68:9f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:36:27 2026 by rpki-client