Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b0e0145-f77b-387f-a4a0-163eae285a5c.roa
File:                     9b0e0145-f77b-387f-a4a0-163eae285a5c.roa (raw, json)
Hash identifier:          fYYtik4EHwf2XSW/ULCvhKgNJB1XSyLhZV2C/IxApps=
Subject key identifier:   55:B2:8F:86:A7:E6:8F:04:67:FD:BA:D5:B4:9C:DE:D9:18:5C:E6:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E8C8A4DE00205845731B89240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b0e0145-f77b-387f-a4a0-163eae285a5c.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     0
IP address blocks:        192.30.46.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:4d:e0:02:05:84:57:31:b8:92:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=9c81367d-dff4-4200-b020-856164e5a931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:31:36:dc:66:b8:c1:cf:91:60:87:47:07:c8:
                    58:d8:98:ef:9e:13:74:bb:0c:23:37:67:37:4b:c4:
                    ba:23:52:ee:ae:27:64:fb:ea:6d:0d:56:e2:12:62:
                    f9:2a:df:f3:1e:74:32:5c:a9:c9:0d:70:1a:11:9d:
                    64:f3:ec:38:33:a5:05:71:f1:91:92:02:86:b0:5a:
                    b1:09:2e:49:de:cb:6d:66:72:57:fb:34:63:45:7b:
                    db:a5:57:57:41:fc:09:53:9b:83:14:b6:84:26:09:
                    ea:82:91:ce:52:74:a7:9a:b4:a2:b4:b4:5b:25:85:
                    74:73:8b:cf:fd:21:5b:15:12:5d:a5:bf:4b:28:b1:
                    42:c7:b8:32:dd:92:8f:1e:f2:3c:a5:95:8a:e8:cc:
                    5f:46:ff:b5:96:18:8e:a1:e3:ed:0a:df:de:e9:b3:
                    1b:f2:93:12:b4:3a:b1:2c:8e:ce:c7:3e:a6:b9:20:
                    c9:e4:92:f3:35:04:ed:27:6f:eb:fc:34:7b:16:d8:
                    53:10:38:c1:bd:30:4e:e1:de:e4:dc:a1:b3:c0:53:
                    b3:ac:e7:98:49:4c:42:fa:21:50:1d:50:b7:d7:4d:
                    ba:8b:9c:35:34:3d:ba:77:60:a6:ca:cf:04:df:c5:
                    08:85:60:b8:fb:e1:23:90:4c:39:e8:d4:f2:9c:1b:
                    b3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B2:8F:86:A7:E6:8F:04:67:FD:BA:D5:B4:9C:DE:D9:18:5C:E6:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9b0e0145-f77b-387f-a4a0-163eae285a5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.46.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f7:6b:1c:68:e8:ec:3b:a6:1a:96:b3:59:91:d3:54:bd:68:
         7b:c7:1d:97:f0:53:f6:43:e2:9d:5e:3c:b0:c0:f9:47:76:52:
         f1:9b:d5:65:dc:b8:e5:3b:b1:70:e5:01:9c:22:6f:e6:d6:fd:
         cf:3a:93:c2:44:1a:25:fd:99:8c:30:4b:d7:d7:c6:0c:84:d1:
         63:ad:7c:ed:25:89:e9:5c:36:c1:f5:7b:b2:38:71:7e:a6:d6:
         ff:54:80:ef:65:46:7c:7b:21:f8:31:34:34:d2:34:99:67:30:
         90:15:8a:08:7e:d6:5b:2f:c6:99:7c:b4:33:41:81:6e:d7:af:
         4a:65:8f:28:76:15:8c:f8:6a:b9:0c:d7:39:1d:ed:bf:f0:2b:
         19:05:2c:93:44:cb:f1:4c:cb:ce:a1:63:a3:ea:41:ce:eb:fe:
         e9:9e:21:52:f3:73:d5:7c:45:9e:13:40:18:0f:fa:e1:cd:bc:
         4b:95:25:f2:77:2a:8f:4e:4a:56:b9:7b:96:1b:82:5c:81:68:
         dd:66:42:ed:f9:30:9d:14:a9:4c:07:99:86:fc:d9:68:61:80:
         c2:a9:f7:bb:a8:d3:06:63:28:27:07:c7:70:f7:15:07:73:59:
         7d:81:7a:e4:cd:30:8a:f1:60:e7:c2:7f:e9:4f:3f:2e:53:9c:
         ac:b4:3f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:22:57 2026 by rpki-client