Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2380dbd-4c17-3592-aca7-854476b73944.roa
File:                     d2380dbd-4c17-3592-aca7-854476b73944.roa (raw, json)
Hash identifier:          ps+6FbH0J6guktq3ATjfpMr3/2e2OAaSCjQWAuoFue4=
Subject key identifier:   7C:D4:FB:B8:0F:D8:8D:E4:DF:CE:FB:07:4E:C6:F0:D4:7C:54:54:0C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B7F526F499A18A4EA90606590
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2380dbd-4c17-3592-aca7-854476b73944.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     396702
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:6f:49:9a:18:a4:ea:90:60:65:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=9ed1758e-19da-446d-93fc-6c09935da861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:73:b9:9d:a6:89:13:08:56:34:06:86:3f:27:
                    7e:ee:b9:2e:53:8b:39:1f:e4:cc:e3:73:cf:14:19:
                    eb:b0:fa:e6:1f:a5:db:74:a1:b8:d2:05:75:f0:e0:
                    c5:2f:92:8a:54:ed:de:25:4e:6a:c9:9c:12:56:3f:
                    f7:22:3d:60:7c:61:85:c1:72:2b:00:2d:d4:07:f6:
                    75:28:b1:b4:db:15:89:ec:26:3a:be:f6:cc:da:d2:
                    b0:93:5d:d2:cf:01:f1:78:3b:5e:dc:c5:cf:6a:9f:
                    e1:5a:5c:5e:61:f7:d0:ae:ce:65:d6:76:c3:c7:e6:
                    0f:99:7e:ce:d3:0e:3f:4c:2d:fd:15:b3:31:7c:86:
                    aa:b0:40:8a:bf:b3:d3:7b:4d:49:e0:2f:36:15:16:
                    de:b9:94:4e:1a:42:1e:e4:4e:b3:88:87:f9:fc:c7:
                    86:1b:41:1b:ce:0b:ee:9c:d0:6a:f1:47:8e:91:c4:
                    99:0d:4c:95:f7:2e:84:76:bf:eb:37:1f:e6:51:d8:
                    89:57:df:85:fb:16:a9:c0:f9:bd:bc:bb:ba:fa:e0:
                    c1:77:02:61:23:4e:8a:43:41:e6:33:b7:4a:c4:7b:
                    01:32:5a:03:26:af:04:92:14:64:c7:08:55:1b:be:
                    77:4f:8d:76:e4:ee:99:d2:89:91:ed:f7:4e:a9:b4:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D4:FB:B8:0F:D8:8D:E4:DF:CE:FB:07:4E:C6:F0:D4:7C:54:54:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d2380dbd-4c17-3592-aca7-854476b73944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:26:4b:7d:db:65:a3:6e:f2:0c:9f:a2:6f:a9:ae:17:d7:f2:
         d3:7a:78:bc:0d:dc:4a:84:e1:c4:9e:19:49:17:c4:01:90:86:
         72:47:9a:13:07:c0:ab:6e:bc:92:fa:68:63:ca:d8:ad:21:d3:
         32:a3:75:dd:09:07:c8:8f:e5:7c:91:d0:01:2c:b4:1b:ef:47:
         65:b2:01:58:55:fa:d0:de:94:30:5f:92:33:8a:e2:15:94:c1:
         a8:f9:52:1f:cb:76:ab:80:85:d4:3d:1d:df:8a:dc:2a:e1:2d:
         14:89:ce:81:28:91:5d:49:30:3a:24:40:4d:3d:2c:fd:26:49:
         7a:29:f9:73:b0:c6:02:db:e2:6f:3d:83:fe:7c:fa:ed:cf:00:
         c0:a2:62:fe:2a:bb:a0:6e:af:d0:76:c8:bf:1d:22:12:0b:84:
         55:b5:6a:2b:6e:a7:9b:e3:21:ad:e6:89:49:91:43:23:c2:11:
         61:b8:a0:63:9d:c5:05:62:d7:68:2b:d8:4c:a7:ee:91:37:29:
         9d:98:67:db:ec:8c:64:0e:2e:71:df:83:ae:5d:b5:9c:9f:8f:
         45:82:db:f3:67:6b:51:a3:b1:28:45:ab:aa:79:6a:1f:63:a2:
         bb:f7:69:c1:f1:2a:38:82:36:0d:fe:21:82:01:ae:a9:59:17:
         b8:1d:de:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:46:49 2025 by rpki-client