Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/940b7dd9-dd82-34eb-810f-ce16cbbcf663.roa
File:                     940b7dd9-dd82-34eb-810f-ce16cbbcf663.roa (raw, json)
Hash identifier:          1D0VMSlkzHFZyrFi/fxoEVLxwpKwQeaBVwnGjRhyENM=
Subject key identifier:   B7:AA:A6:A2:D4:E3:0A:05:7A:8C:44:72:7A:FA:DC:B8:0C:04:75:BF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E0012E47F82916D34B8C3C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/940b7dd9-dd82-34eb-810f-ce16cbbcf663.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     396542
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:12:e4:7f:82:91:6d:34:b8:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=25c57f8d-e01e-45ed-9c52-e8eddf550bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2e:fd:7b:4f:79:83:d6:b3:ce:15:20:47:32:
                    3b:3e:64:2f:a6:b1:84:8e:e1:9e:24:96:cc:0d:8f:
                    7a:5d:9b:a3:5e:58:58:32:d5:ac:b4:91:24:00:e7:
                    89:af:7c:24:67:88:a0:9a:2c:41:c8:dd:96:22:b8:
                    3a:f1:c3:bb:fd:cf:8a:df:d8:7d:f0:71:15:3f:c8:
                    7c:73:17:bc:86:40:8a:da:04:da:02:64:c3:d4:e6:
                    0f:80:35:56:d9:9d:4f:18:66:f2:f8:83:db:90:89:
                    3a:0f:3e:90:db:b9:04:33:58:d8:d4:9b:93:36:03:
                    50:a0:62:ae:06:3c:56:c6:fb:77:4a:31:0a:3c:b5:
                    87:53:9b:99:51:02:7e:c3:24:5b:90:4d:35:68:1a:
                    3e:49:2a:86:b5:2d:9f:6d:64:de:0f:3b:b9:f1:bf:
                    b7:24:91:a6:33:a5:94:c4:f9:71:30:b3:3f:ad:f3:
                    78:ed:34:c1:c0:cb:04:52:0c:0e:cc:fc:77:03:b5:
                    25:3d:5b:f4:c2:95:28:76:c7:e7:71:74:3d:1f:e8:
                    43:48:ad:52:a0:ba:76:db:1e:0d:8b:4f:19:bf:b3:
                    b4:68:ab:93:a5:43:97:b9:f7:17:72:90:34:8d:7b:
                    66:b6:e5:40:c4:a5:10:e7:bc:bc:d0:ef:fb:11:b2:
                    1d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AA:A6:A2:D4:E3:0A:05:7A:8C:44:72:7A:FA:DC:B8:0C:04:75:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/940b7dd9-dd82-34eb-810f-ce16cbbcf663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:69:15:59:bf:b2:4b:f9:41:5d:c8:20:b4:21:70:d0:6d:02:
         76:2c:31:13:fa:a9:01:ac:78:71:ed:71:8b:bf:98:d9:2a:2e:
         1e:a4:ad:d7:50:f9:32:c4:8f:17:65:62:9a:80:83:e4:51:7a:
         06:90:34:2e:f0:9b:7c:23:76:0f:6e:a2:3c:a2:0a:c4:7c:06:
         5c:e5:f3:49:19:7c:70:93:51:e2:fe:23:21:f0:0a:59:47:3f:
         ce:99:4a:15:7b:a2:cf:8f:f4:87:c0:c3:05:a1:ed:26:64:43:
         50:ae:78:88:28:2a:50:8a:8d:9d:a0:a6:31:a2:60:09:4c:cf:
         14:cf:3c:5c:a1:f4:66:96:46:d0:d0:ee:85:09:7f:90:31:af:
         39:79:77:72:86:0c:ed:9c:5f:44:01:a6:bb:0f:10:77:f8:5a:
         b0:21:f6:f1:d5:5e:e9:eb:0d:0c:7e:db:ff:14:9e:1b:77:ee:
         d0:ab:44:d5:4f:82:81:64:ea:b6:89:5d:d3:67:eb:1b:df:aa:
         6a:26:ef:4f:75:33:37:d7:30:1c:95:5f:00:42:fb:33:f5:c2:
         8a:85:98:29:17:98:2c:5e:13:2c:68:e0:ae:68:99:b5:92:03:
         a7:6e:f0:25:f2:41:41:d1:3e:6b:dc:f6:6f:50:bf:d2:03:31:
         4a:82:60:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:19:15 2026 by rpki-client