Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bddd4158-1196-37e4-b4d0-09b62655c118.roa
File:                     bddd4158-1196-37e4-b4d0-09b62655c118.roa (raw, json)
Hash identifier:          MDR0gG/NeCO7D6noGe3kaAqNn7IGTLCNw+SWkOyjr+8=
Subject key identifier:   1A:AB:0B:66:BF:9A:C9:BB:C3:49:01:40:87:79:A6:A1:25:49:88:AC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F43DD6C6E87970E9A36279C80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bddd4158-1196-37e4-b4d0-09b62655c118.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     396588
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:6c:6e:87:97:0e:9a:36:27:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=2e8d5d2f-3bfe-4b90-b066-b567e7304295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:26:66:9e:d3:69:13:37:7f:a5:86:05:a1:b9:
                    8a:ea:aa:f1:1d:d2:93:d2:b4:1a:19:11:ca:bb:57:
                    6f:f4:70:f9:46:35:6f:bb:a1:8f:b8:01:90:b0:c5:
                    d5:fd:92:6c:d3:55:12:62:1d:f2:88:30:5f:52:1c:
                    67:c7:92:5f:fe:9f:5d:c2:6f:17:9c:82:dd:a5:a4:
                    84:92:f8:4d:02:cd:83:eb:35:1a:7f:51:3a:37:8d:
                    2c:ec:47:38:ed:64:8d:4d:6e:ba:63:8c:8c:3b:dd:
                    b5:4a:af:19:d1:44:05:28:5a:00:49:0f:3e:2f:05:
                    f3:ff:8f:f7:a7:0e:aa:ac:90:ec:a1:03:ec:7d:eb:
                    76:a8:f4:7d:9c:b0:c9:83:d2:c9:16:ca:c4:60:df:
                    32:d0:1c:3a:68:24:06:bc:78:16:59:a3:cc:a0:7b:
                    bb:28:16:a8:5f:05:2e:99:64:c5:1c:84:d7:b6:d5:
                    cc:00:5d:24:42:be:3e:6c:4b:d2:08:b0:5e:f7:ea:
                    64:dd:5a:73:21:ba:75:d7:71:71:61:d9:08:1d:31:
                    99:c3:db:9b:d3:72:97:ac:00:b1:fb:86:3a:4b:74:
                    0a:0e:b1:70:23:9a:75:43:ba:46:2a:8c:fe:7d:4b:
                    90:05:ae:10:bd:d6:58:1a:70:f7:02:b8:7c:74:ec:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:AB:0B:66:BF:9A:C9:BB:C3:49:01:40:87:79:A6:A1:25:49:88:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bddd4158-1196-37e4-b4d0-09b62655c118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:da:0a:d0:02:a1:9b:73:39:b6:d3:0f:84:b7:be:a9:cc:28:
         10:50:96:d6:5b:83:ef:f3:cd:19:a5:49:a6:49:bb:7e:cd:6f:
         18:a6:f0:a8:dc:b2:a4:1c:b9:b3:7b:2b:71:c8:12:8a:a5:91:
         dd:10:04:92:c4:84:f4:63:8a:32:62:9d:11:5f:ca:a1:cc:fb:
         05:b4:27:c9:5d:cb:40:db:f9:2d:ae:24:57:e4:cc:39:55:57:
         82:a9:7c:df:89:65:41:62:c4:d5:16:13:24:1e:c6:17:b0:88:
         cf:d3:e3:1c:13:72:82:6d:a7:09:4f:f7:e0:94:12:31:54:5b:
         d4:8f:56:da:0b:b9:4c:8c:5a:36:80:f0:b5:5e:b7:6e:ff:b0:
         3c:1e:a0:4a:80:22:ca:20:0a:94:79:67:64:24:55:4b:6a:46:
         80:6f:5d:35:32:04:e9:45:af:a0:29:43:e8:34:90:c8:65:ae:
         52:47:fc:be:17:a8:13:52:64:06:cd:9c:02:97:e2:8b:07:25:
         69:dd:47:2c:74:b4:1f:81:76:fe:32:63:2c:70:84:b9:c6:af:
         16:cd:94:3f:53:50:d9:40:71:35:34:b7:bb:b1:99:eb:ca:24:
         4c:ef:83:90:12:bb:3a:e2:0b:28:aa:ee:53:a3:e6:38:7b:d4:
         d3:38:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:30:22 2026 by rpki-client