Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9d61ed1-3643-3fa9-b572-851e946f68b8.roa
File:                     b9d61ed1-3643-3fa9-b572-851e946f68b8.roa (raw, json)
Hash identifier:          oyUiRZqbpy6oTbHj3VCw4qBTRNWh4WjozjWES+kNaKw=
Subject key identifier:   84:65:3A:88:98:AB:24:D3:D0:33:AA:C6:A1:6E:F6:CD:19:89:6F:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497481F9645B817CB1563B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9d61ed1-3643-3fa9-b572-851e946f68b8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396597
IP address blocks:        192.43.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:81:f9:64:5b:81:7c:b1:56:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2744ad38-1c4f-4e92-b856-1823b11d73c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fd:e9:af:05:55:30:37:c7:98:1e:2f:38:a2:
                    ea:fc:95:16:52:20:38:c9:9e:d5:e4:3b:bd:72:29:
                    cc:09:aa:90:10:56:a6:fd:2a:5c:a5:ba:7b:3b:64:
                    f6:e7:fe:00:72:ac:a1:7e:05:d7:fe:36:4f:db:30:
                    30:a0:d8:e1:7d:2b:2e:b9:33:c4:c9:49:e5:8f:ff:
                    2f:19:15:31:3f:6e:43:e3:a0:9c:c8:23:d6:e7:b7:
                    7d:19:11:62:15:0f:50:9f:81:68:76:13:a5:ac:90:
                    7b:4e:01:03:3f:39:d5:f5:b7:93:f0:f9:82:3e:72:
                    1b:72:07:1f:61:ec:46:e1:fb:ec:de:79:fd:98:e6:
                    18:34:ac:03:13:a8:8c:41:2a:13:9d:05:7e:4e:ce:
                    53:7f:71:77:9a:ab:1b:ab:52:48:ab:f6:49:33:0b:
                    93:6e:b0:7b:5d:c7:6f:15:83:f1:56:91:df:ea:f0:
                    91:b1:1b:39:8c:9b:a8:6e:c1:17:68:de:4a:5e:65:
                    04:3f:14:2b:0e:76:4d:81:64:19:cd:89:e3:4c:3d:
                    37:38:36:64:b5:ca:b5:ad:66:aa:43:98:28:23:2d:
                    12:da:51:e5:3b:bc:86:86:4e:42:a1:01:46:77:8c:
                    46:57:f7:63:7e:0a:71:81:80:8d:7f:0d:fc:67:3b:
                    b7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:65:3A:88:98:AB:24:D3:D0:33:AA:C6:A1:6E:F6:CD:19:89:6F:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b9d61ed1-3643-3fa9-b572-851e946f68b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:16:4c:f2:a5:ca:9f:11:21:58:1d:27:f2:ea:1e:e2:18:0e:
         27:a1:7d:33:63:15:3b:03:53:8e:a2:88:8d:01:70:1c:d2:5e:
         7c:0b:a6:cf:d4:eb:9e:c3:60:46:37:56:e4:e5:16:20:ef:d1:
         61:56:52:33:3d:9d:9e:0e:0d:e5:e8:93:17:56:7c:0c:b9:26:
         16:b3:f9:c1:ea:8c:4f:ca:ca:4c:b9:78:09:64:16:73:ee:1b:
         b8:e7:0f:ba:0c:66:68:20:e0:c0:f7:9b:8a:ea:fc:4b:bb:eb:
         99:0c:7a:b8:cb:ae:e0:b3:f7:2e:fd:32:c7:5e:9e:53:1a:c6:
         56:3a:3b:d0:ce:36:e3:74:c3:cc:7a:68:27:be:c0:2e:af:82:
         5e:96:ce:57:0e:63:d7:01:2d:5b:b7:aa:55:11:d3:fe:0e:05:
         3a:10:30:8a:4d:e3:d8:fb:33:4f:f3:28:66:4a:fb:95:23:d9:
         ce:56:16:a1:8f:7b:ce:65:36:ff:3b:cb:97:b0:99:b3:4a:31:
         48:ce:4b:eb:36:aa:34:cb:2c:bb:fd:53:7e:1a:3e:55:00:55:
         7f:5f:71:56:30:65:06:21:be:fe:2c:51:8b:93:22:8d:c4:ee:
         d9:56:38:ca:6f:c7:af:60:e2:5c:e9:ce:84:9f:94:68:9d:53:
         0f:b5:f4:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIH5ZFuBfLFWO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Mjc0NGFkMzgtMWM0Zi00ZTkyLWI4NTYtMTgyM2IxMWQ3M2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf3prwVVMDfHmB4vOKLq/JUWUiA4yZ7V5Du9
cinMCaqQEFam/Spcpbp7O2T25/4AcqyhfgXX/jZP2zAwoNjhfSsuuTPEyUnlj/8v
GRUxP25D46CcyCPW57d9GRFiFQ9Qn4FodhOlrJB7TgEDPznV9beT8PmCPnIbcgcf
YexG4fvs3nn9mOYYNKwDE6iMQSoTnQV+Ts5Tf3F3mqsbq1JIq/ZJMwuTbrB7Xcdv
FYPxVpHf6vCRsRs5jJuobsEXaN5KXmUEPxQrDnZNgWQZzYnjTD03ODZktcq1rWaq
Q5goIy0S2lHlO7yGhk5CoQFGd4xGV/djfgpxgYCNfw38Zzu3XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRlOoiYqyTT0DOqxqFu9s0ZiW9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjlkNjFlZDEtMzY0My0z
ZmE5LWI1NzItODUxZTk0NmY2OGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCusMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgWTPKlyp8RIVgdJ/LqHuIYDiehfTNjFTsDU46iiI0BcBzSXnwLps/U
657DYEY3VuTlFiDv0WFWUjM9nZ4ODeXokxdWfAy5Jhaz+cHqjE/Kyky5eAlkFnPu
G7jnD7oMZmgg4MD3m4rq/Eu765kMerjLruCz9y79MsdenlMaxlY6O9DONuN0w8x6
aCe+wC6vgl6WzlcOY9cBLVu3qlUR0/4OBToQMIpN49j7M0/zKGZK+5Uj2c5WFqGP
e85lNv87y5ewmbNKMUjOS+s2qjTLLLv9U34aPlUAVX9fcVYwZQYhvv4sUYuTIo3E
7tlWOMpvx69g4lzpzoSflGidUw+19C0=
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:51:34 2026 by rpki-client