Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c127d01c-a50a-3e96-b3c6-df871adeefaa.roa
File:                     c127d01c-a50a-3e96-b3c6-df871adeefaa.roa (raw, json)
Hash identifier:          VnyT7cMWFF1WXKAzw7uYeu70BfwbE2PZz3WHYEXlIlU=
Subject key identifier:   7C:FD:E9:D1:3B:17:87:43:62:DD:53:DB:34:6B:13:A3:BE:95:C6:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D3E000EF90E991E70C4118880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c127d01c-a50a-3e96-b3c6-df871adeefaa.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     25485
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3e:00:0e:f9:0e:99:1e:70:c4:11:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=5e52dd9a-a3b4-407b-ba68-ef8f8c5d6441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:eb:3a:ab:30:8f:cb:5d:6b:60:15:13:7d:01:
                    6a:30:47:45:22:ac:20:13:33:9f:bb:1d:26:3c:68:
                    38:f1:d3:05:c2:4b:52:7d:b3:cd:dd:48:01:56:39:
                    cf:69:89:01:a2:2c:ba:de:73:03:36:f9:a0:28:a7:
                    25:5c:15:6a:01:9e:5f:62:22:30:e6:d1:b6:b1:9f:
                    af:9e:64:7d:fc:37:c5:50:ae:28:b5:57:6b:fd:01:
                    32:d0:47:d1:ad:7d:d3:17:63:69:90:a7:95:00:ec:
                    32:f3:13:e7:af:0d:5b:bf:4c:69:96:e8:02:db:07:
                    01:45:ba:44:8f:72:8c:84:79:a6:2e:3b:5b:a3:c7:
                    82:42:53:ba:5d:b9:76:ae:6c:86:31:98:d1:69:d0:
                    ed:c5:17:c0:45:10:2e:56:48:21:a1:7b:80:3a:dd:
                    34:3d:68:b1:85:ee:e2:51:a4:e1:98:f3:e9:c0:7c:
                    36:ad:4e:48:d7:a9:9c:43:bc:1b:be:8e:ad:85:02:
                    61:8c:58:51:c4:ff:51:7c:bf:02:6e:c7:22:6c:ff:
                    83:93:50:63:f2:bd:c9:05:bd:6a:1e:d9:66:86:e2:
                    21:46:4c:dd:70:ae:84:0d:50:df:de:86:c9:9a:f3:
                    09:cc:0c:41:9d:ff:89:f6:d2:23:83:44:a9:d8:32:
                    39:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FD:E9:D1:3B:17:87:43:62:DD:53:DB:34:6B:13:A3:BE:95:C6:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c127d01c-a50a-3e96-b3c6-df871adeefaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:59:60:db:dd:86:b7:94:e7:bd:e1:ce:b7:8c:23:d1:86:a3:
         10:65:46:08:97:6f:63:04:f1:52:5c:06:57:7f:04:a4:5c:6c:
         03:67:a9:11:e2:b6:63:cc:29:5d:50:f1:2d:aa:27:32:9c:ea:
         ef:8a:89:fe:2e:4f:40:76:93:8c:2c:d7:75:da:28:20:5d:93:
         7a:07:c3:46:4e:44:9e:68:78:42:ae:e6:9a:19:a6:11:7f:9d:
         48:8e:a8:cf:ee:b1:f5:40:d2:9d:a4:08:89:b6:7b:6c:10:a4:
         84:c3:90:3b:41:5c:6e:2f:7d:a3:2f:3e:37:4c:51:bc:b6:1e:
         35:c2:a6:fc:7b:3a:bb:d8:f2:a9:5d:06:83:90:6b:c0:a5:a5:
         b9:b1:54:75:23:4f:51:68:c6:c7:a0:2c:ca:46:ff:f8:45:de:
         d1:e4:d6:fa:54:eb:86:7b:8e:73:23:8d:4a:21:ec:92:a4:16:
         9f:4f:8e:ca:d2:c1:6f:13:9a:da:67:8a:32:69:d5:79:6c:91:
         b0:9d:4c:19:e9:29:96:70:ad:d2:12:74:0f:cd:86:5a:b8:fc:
         15:78:6b:ad:26:7d:46:53:7a:c4:d5:ff:fc:ea:75:d3:1e:f9:
         4a:75:1c:24:b9:12:ac:c7:4b:63:1e:c7:ca:bc:d8:3e:5d:2d:
         8c:81:d3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:23:14 2026 by rpki-client