Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab00448f-d348-3eef-a70c-8bbb3c16b93a.roa
File:                     ab00448f-d348-3eef-a70c-8bbb3c16b93a.roa (raw, json)
Hash identifier:          8rczlFEklLfxG9S6elCwfEqJ7xofcZjYnI5b3CP0/YM=
Subject key identifier:   55:EB:1A:7A:9F:26:62:FE:3C:28:DD:16:53:F7:F6:5C:96:38:66:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DCC60580C40FCD51482866D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab00448f-d348-3eef-a70c-8bbb3c16b93a.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     396616
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:58:0c:40:fc:d5:14:82:86:6d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=c9b74388-8d04-4a9a-86db-0c5d9fdec55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:f6:75:c9:b6:a5:80:33:af:61:ab:4d:f1:
                    b5:c6:6e:03:53:45:55:81:37:eb:62:6e:2a:4a:cf:
                    20:9e:d9:9a:c2:a7:53:d3:71:36:f0:81:b2:b0:c7:
                    e3:76:a9:d9:c3:3e:7a:6b:de:7c:f6:55:e7:b4:1e:
                    21:aa:0b:db:02:28:da:96:4c:4c:4c:08:db:b1:7c:
                    ef:ff:25:6f:91:32:3a:8c:89:f6:82:17:06:1b:8c:
                    94:c4:15:c5:de:c9:85:62:8e:49:85:e3:85:cf:9a:
                    4b:01:49:52:df:4c:dd:29:af:3f:5c:6a:95:3c:cd:
                    50:0c:51:20:06:28:31:97:a0:20:be:64:d7:50:b7:
                    5a:a0:27:36:f5:be:34:81:d5:c7:ef:a5:d5:f5:0d:
                    62:61:23:33:4f:1e:5e:c7:4d:18:85:dd:17:0c:49:
                    18:60:be:7f:45:2c:0c:71:89:b0:f6:5d:44:dd:64:
                    79:ca:9f:51:6f:dc:11:95:6c:a1:41:92:b2:a9:44:
                    fa:11:1b:09:1c:e8:60:2e:2b:35:32:d0:7e:6a:84:
                    88:ff:16:d8:da:fd:cb:0c:10:bd:2b:0f:f0:6d:d2:
                    12:0e:df:0b:61:b7:bc:10:a3:8f:03:a6:33:36:c9:
                    49:e3:f8:03:12:18:79:3e:69:ae:90:39:4c:f1:21:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EB:1A:7A:9F:26:62:FE:3C:28:DD:16:53:F7:F6:5C:96:38:66:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ab00448f-d348-3eef-a70c-8bbb3c16b93a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:cf:c5:73:bc:a0:40:9c:d2:02:7c:94:f5:58:85:3f:f3:25:
         56:9e:b9:4b:0b:8e:9a:13:a6:1e:c7:dc:c5:b1:23:9f:01:a7:
         08:a8:d3:fe:f3:e1:0c:1d:a9:ad:6b:aa:03:d9:c9:08:9a:3b:
         2b:c6:97:50:c0:9d:4d:55:7e:4e:ed:0e:3f:ef:25:95:04:f3:
         7b:35:8d:b3:de:fe:2b:84:37:f3:25:0f:22:7f:66:2b:86:a9:
         55:f9:c9:6f:ed:f3:b9:02:9a:5b:3d:e9:77:33:06:68:9b:29:
         87:73:c4:81:df:17:fd:0f:00:89:71:57:04:48:6c:fa:19:1b:
         34:4f:41:e8:3a:b7:65:d3:0c:06:e1:89:e2:de:71:ee:ad:28:
         41:4e:55:f4:3d:83:49:de:e7:0b:93:46:aa:a8:7b:3d:f6:93:
         eb:2b:03:49:fb:9c:58:ed:b8:d5:2b:29:bb:f2:c8:38:78:be:
         05:31:6a:c1:2d:4a:83:23:a9:61:8d:b7:f6:0a:69:05:00:8b:
         fe:77:d4:1f:52:47:67:03:bc:c6:d7:64:a4:1b:7e:44:36:24:
         d8:a8:a2:d6:ba:ab:87:3b:77:d0:13:db:c0:1a:67:e6:99:7a:
         c0:20:95:05:74:d9:ad:83:23:a4:63:b0:30:46:9f:e2:17:68:
         4a:6a:76:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:20 2026 by rpki-client