Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98c5b6a-69a4-30b0-b392-a4279489a223.roa
File:                     a98c5b6a-69a4-30b0-b392-a4279489a223.roa (raw, json)
Hash identifier:          C9oTE65GOQgkOsmc23eypCvErGwoLUCV7wICSCmrdBc=
Subject key identifier:   1D:B5:7D:EE:56:EA:B4:EB:14:EC:DF:37:3C:DF:32:F9:5C:8B:8A:98
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F2D87C22FC3EB7FA63B5CD4A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98c5b6a-69a4-30b0-b392-a4279489a223.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     397210
IP address blocks:        192.81.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:c2:2f:c3:eb:7f:a6:3b:5c:d4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=745f51a8-15f2-45dc-899a-a735ccdcc81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b5:02:07:ed:41:54:a0:1d:72:23:0d:a4:b3:
                    15:13:16:b2:eb:72:d3:c8:9a:c1:b8:fa:79:df:21:
                    84:2c:e7:cc:52:30:7f:b8:fc:8f:98:83:7b:46:38:
                    41:4b:d0:df:1f:c6:f1:f5:ed:a3:6d:07:37:40:8a:
                    60:76:a0:cb:ab:0f:84:ab:d3:2f:48:8b:19:a5:5a:
                    f1:cb:3a:52:98:d8:80:32:b3:f7:fc:d7:96:03:18:
                    8e:39:1b:ba:d9:5c:0f:0b:e9:dd:4b:7f:77:9f:c3:
                    0c:d6:45:29:1e:9e:a7:bb:dc:da:9e:67:69:b9:6f:
                    de:38:13:60:14:66:56:55:ef:5d:9e:fc:9a:72:c4:
                    bd:f2:58:73:cb:35:7d:1a:58:7e:52:cb:1c:c7:90:
                    b0:92:22:a1:a3:29:a9:ff:3f:fc:73:77:80:7e:0a:
                    d6:3d:58:89:a4:5d:70:70:77:62:65:72:1a:3c:72:
                    ab:ce:2a:f2:c1:e6:b5:8b:29:ec:e9:17:27:e2:87:
                    1f:e7:49:31:63:be:a7:83:c7:d2:2f:9b:72:ce:35:
                    38:34:76:76:33:6c:39:7e:ae:b1:9f:c3:3b:1a:97:
                    78:6f:6b:51:88:33:ef:f7:0c:44:fe:71:b1:a6:63:
                    40:9e:bd:32:15:d6:45:47:71:75:92:ef:14:46:21:
                    e4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B5:7D:EE:56:EA:B4:EB:14:EC:DF:37:3C:DF:32:F9:5C:8B:8A:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a98c5b6a-69a4-30b0-b392-a4279489a223.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:82:af:67:b4:11:91:e1:93:37:18:23:51:aa:05:78:7c:6e:
         4b:34:f4:69:18:91:ef:be:e1:3e:6d:c4:c3:74:cd:02:c4:4d:
         b6:78:37:b5:f3:13:fb:94:d5:fa:24:35:3a:92:4b:ac:73:ba:
         3f:4d:bf:77:a0:e7:2f:08:9b:29:2e:8a:11:ea:d0:9c:f5:23:
         cb:b0:77:d2:c9:09:27:73:10:74:7e:b4:5e:97:66:f6:05:06:
         dd:ee:ae:66:7d:d4:2a:11:9d:11:bf:16:6e:a6:89:07:7c:a4:
         c4:3d:2a:5b:64:a0:76:fa:56:a8:ef:e9:ea:f1:20:c6:b6:e5:
         dd:6a:c3:33:ef:5c:f9:80:57:c2:c1:24:85:3e:83:ae:0b:6b:
         c1:6c:61:0b:7d:79:72:d8:1e:a9:3f:27:dd:6f:0c:e3:8a:5c:
         36:80:50:d7:5c:8f:cf:5b:a9:61:30:07:5f:ef:0a:d1:ba:ae:
         a7:ed:c2:f1:c2:f6:4a:79:73:3c:10:bf:2b:dc:21:90:37:d9:
         03:52:52:99:ce:18:6a:c4:dc:05:cc:9b:d7:d1:52:04:94:9a:
         94:59:75:09:a1:6f:68:22:65:51:89:4b:aa:44:24:6f:de:b2:
         48:74:be:33:ec:02:10:b7:8b:85:8d:7f:06:a3:08:80:fb:e8:
         ee:90:6b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:34:57 2026 by rpki-client