Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9c0c13e-2986-3350-a53e-52477df5a184.roa
File:                     a9c0c13e-2986-3350-a53e-52477df5a184.roa (raw, json)
Hash identifier:          /AbjFjZe7zdkbvKk8UdWcx9b5y+/3QAxq0oNuPYmJ+Q=
Subject key identifier:   02:53:B2:2B:F5:89:B2:A1:67:BD:44:58:41:24:1A:DE:95:12:83:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7BCA21A2AC22CA42FD19C940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9c0c13e-2986-3350-a53e-52477df5a184.roa
Signing time:             Mon 13 Jul 2026 09:00:12 +0000
ROA not before:           Mon 13 Jul 2026 09:00:12 +0000
ROA not after:            Sun 11 Oct 2026 09:00:12 +0000
asID:                     36625
IP address blocks:        192.54.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7b:ca:21:a2:ac:22:ca:42:fd:19:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 13 09:00:12 2026 GMT
            Not After : Oct 11 09:00:12 2026 GMT
        Subject: CN=2e5cc8c4-e521-4c68-8e22-4bd362e71c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:02:25:fd:90:46:98:05:30:70:f1:e4:93:
                    fe:87:ec:93:c6:cf:54:ce:71:7e:f8:2b:0b:2f:f7:
                    fe:f9:a3:5f:34:66:ec:1d:09:9b:27:3e:9d:60:63:
                    6e:67:79:f9:8e:c4:c4:58:2a:59:46:3f:4d:7f:01:
                    1f:73:ed:8a:56:27:06:d2:be:e6:59:56:25:4c:30:
                    64:2c:af:09:95:3c:4e:1b:36:05:f6:59:b3:30:c4:
                    6b:d4:3b:2a:ec:65:81:fd:2c:1f:70:ac:ba:8c:69:
                    d7:f2:4d:40:5b:15:d6:ec:c0:ee:e3:e0:98:bf:c5:
                    9d:67:6b:85:13:4c:85:2c:9a:c5:fc:23:a0:da:c6:
                    0a:f5:b6:cb:44:9b:b4:aa:af:6b:b1:c4:e5:af:bc:
                    49:d7:a6:33:e0:eb:38:63:d3:1e:04:00:07:6b:d0:
                    25:4b:a3:c7:e5:c2:cb:95:69:72:e9:5b:c6:c8:b9:
                    03:ae:55:63:ee:49:6f:63:70:55:f2:0c:98:1c:a9:
                    94:8b:ba:cd:32:d8:9e:24:5e:9a:9d:9f:81:f8:81:
                    7d:b6:21:ee:6c:80:be:cf:91:ae:ee:03:33:6b:3f:
                    2e:a2:9a:de:98:d5:22:1a:ca:e4:1a:6f:27:b2:e6:
                    0a:ae:c4:2a:e9:a4:c6:8b:75:77:ea:7b:5f:6d:fc:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:53:B2:2B:F5:89:B2:A1:67:BD:44:58:41:24:1A:DE:95:12:83:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9c0c13e-2986-3350-a53e-52477df5a184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:a5:11:ef:01:74:8e:33:f1:ee:0b:d8:52:a2:cb:78:01:fd:
         7f:14:da:a0:5f:83:85:3c:48:d3:43:66:e8:6c:60:34:04:d9:
         2d:46:13:39:1c:93:0b:d7:78:07:e3:68:10:39:61:dd:7b:5a:
         b6:8d:63:28:1b:03:6b:d6:cc:36:f8:be:e8:e7:74:0e:c1:b4:
         77:8d:8a:ed:23:61:8d:2e:b8:b1:6f:32:eb:37:7a:57:92:59:
         54:1a:7a:0a:54:0a:8f:47:01:ea:1b:db:14:04:4d:b9:50:0a:
         c9:e8:21:62:fd:85:1b:5f:2e:3e:fe:55:20:93:4d:10:b4:95:
         2d:2c:10:e8:8e:db:38:49:06:50:a1:1d:77:e2:7f:d3:5d:96:
         2f:4e:0b:c9:55:b3:54:05:ec:0c:20:3e:10:f2:a0:0b:f1:af:
         c1:20:9b:74:c0:fd:c0:c5:c9:a3:c9:ff:f8:70:42:e1:e7:aa:
         10:fd:c6:6f:1e:0b:24:0c:92:fe:d8:e9:ea:77:f6:28:dd:40:
         3a:7e:63:11:b2:fe:8f:c3:e5:7d:2d:a8:eb:5f:46:b2:84:1d:
         6b:b7:25:62:43:43:42:e9:63:41:da:8e:96:0d:8f:d1:d7:d6:
         cb:66:15:12:57:5f:72:49:63:35:0e:60:13:31:e9:91:e0:8e:
         05:a4:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:35:37 2026 by rpki-client