Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83c34121-8a49-3d09-9a9e-a8987c74512a.roa
File:                     83c34121-8a49-3d09-9a9e-a8987c74512a.roa (raw, json)
Hash identifier:          aAZplLgbBzOjz829a4qTVhBUJqocMjHqakqmOpJ+5w4=
Subject key identifier:   7D:59:A8:62:C4:CE:1E:94:14:82:64:4E:A6:3D:3A:5A:CE:AC:3B:30
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7A6503F4FB95D9965AA95B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83c34121-8a49-3d09-9a9e-a8987c74512a.roa
Signing time:             Sun 12 Jul 2026 21:00:13 +0000
ROA not before:           Sun 12 Jul 2026 21:00:13 +0000
ROA not after:            Sat 10 Oct 2026 21:00:13 +0000
asID:                     397205
IP address blocks:        192.42.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7a:65:03:f4:fb:95:d9:96:5a:a9:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 12 21:00:13 2026 GMT
            Not After : Oct 10 21:00:13 2026 GMT
        Subject: CN=94369762-9689-4fc4-ba00-de69c169e984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:10:64:4c:73:94:b7:3a:35:51:de:0d:bf:9f:
                    54:df:a6:a3:ab:9d:3b:c7:b6:47:8b:67:3c:b3:56:
                    aa:dc:1c:2c:98:82:5d:02:db:bb:9f:69:fc:f9:1e:
                    b5:2c:19:d2:02:ef:18:f1:0c:1e:c5:70:5f:3d:40:
                    dc:f7:a0:e1:6c:c6:c4:6e:e9:05:94:fa:2e:07:84:
                    77:48:f8:71:b6:4b:50:13:2d:6d:74:94:c4:55:87:
                    cd:4e:87:ce:a7:d5:d3:46:49:3f:41:80:35:c2:83:
                    11:7b:5b:b8:89:fe:09:59:3d:80:06:ba:29:11:84:
                    bc:1f:25:eb:39:8b:2b:bd:8f:51:f4:f6:15:bf:6b:
                    2d:14:5b:33:9a:6b:ac:ad:85:d0:95:aa:1a:57:11:
                    9d:40:5c:b2:84:83:95:2e:de:15:3d:56:51:54:95:
                    f4:6d:76:7b:8e:bb:68:63:39:3a:b5:92:6c:74:16:
                    5d:22:aa:d3:07:c7:4f:f7:64:ed:43:84:a7:fd:ab:
                    bf:a5:20:fb:4e:45:16:58:25:1c:77:4a:c2:16:30:
                    f1:38:36:83:d3:5e:ba:42:7e:40:fa:54:0f:f5:f5:
                    d5:ca:22:d4:56:64:b3:f7:3b:54:50:8a:c5:3b:9a:
                    82:77:a1:48:80:38:e3:2a:de:a9:67:99:7c:e1:54:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:59:A8:62:C4:CE:1E:94:14:82:64:4E:A6:3D:3A:5A:CE:AC:3B:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83c34121-8a49-3d09-9a9e-a8987c74512a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:e8:fe:0d:03:a2:5b:59:bc:36:ad:e3:2e:36:51:2a:a5:16:
         f9:be:68:4f:90:92:f4:2a:42:2a:42:b6:c4:8d:0a:94:43:19:
         b0:23:73:1a:58:1c:c9:40:f9:48:54:b7:57:a5:e2:ba:45:47:
         07:94:8a:80:34:2e:19:94:dc:ea:7d:bb:6c:77:ef:56:8c:04:
         92:5a:b4:e5:51:aa:51:32:4d:6c:d0:30:34:77:8b:39:5d:88:
         98:75:b5:4e:be:66:a3:a4:64:76:61:ea:c7:5b:64:b5:0b:41:
         37:c1:2d:81:b8:2d:4a:b7:b4:62:b8:b2:95:f1:70:38:52:14:
         3f:e6:05:bb:47:55:44:bd:d5:6d:52:5c:0a:d9:68:b5:90:59:
         66:06:f4:75:49:23:f0:ed:62:ed:b4:7a:93:36:02:6e:00:29:
         3f:40:f8:ef:35:fe:24:d5:17:d9:96:40:c7:c8:ac:77:75:94:
         3e:54:91:1f:de:11:30:77:ff:9f:b3:18:aa:93:42:1f:de:70:
         8d:17:14:84:21:87:0d:5c:7e:80:99:ff:69:0e:d6:f3:b9:dc:
         bd:b4:df:06:6b:f2:79:7e:f3:6d:b8:52:dc:f6:54:3d:71:1e:
         34:e8:d7:69:b8:70:fd:79:f8:fd:ee:4a:20:90:a0:0a:9a:d9:
         bb:0d:31:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:23:08 2026 by rpki-client