Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da4655d5-0987-34f6-bfbb-aef350754baa.roa
File:                     da4655d5-0987-34f6-bfbb-aef350754baa.roa (raw, json)
Hash identifier:          827YblK8QNSdiLnMtJdhpc5rUhET5/NP93QpwaebdWQ=
Subject key identifier:   40:D0:10:DF:B4:7D:C1:B7:42:91:DC:53:58:0A:55:EB:17:03:0F:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DC1577697941C848A76B2FE00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da4655d5-0987-34f6-bfbb-aef350754baa.roa
Signing time:             Thu 07 May 2026 14:08:49 +0000
ROA not before:           Thu 07 May 2026 14:08:49 +0000
ROA not after:            Wed 05 Aug 2026 14:08:49 +0000
asID:                     396595
IP address blocks:        192.42.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:57:76:97:94:1c:84:8a:76:b2:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  7 14:08:49 2026 GMT
            Not After : Aug  5 14:08:49 2026 GMT
        Subject: CN=bcef338b-2565-4630-aeda-bc88f9e1fe0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:19:ce:18:22:87:cb:f2:0b:4c:9e:f2:06:38:
                    8a:9c:29:01:19:2a:24:00:15:e9:3d:20:36:6a:a7:
                    20:a6:dd:73:52:d8:e0:92:f9:ee:76:0c:92:58:30:
                    2c:80:48:ca:4e:80:be:bc:26:64:5c:b6:fc:48:dd:
                    a3:cf:70:3b:de:fb:c2:a9:42:e0:94:8d:3a:3b:a0:
                    82:ef:e1:30:36:72:1d:9d:b2:88:1a:a8:12:72:1b:
                    60:43:0f:32:33:c2:a7:d2:4e:d0:e4:a8:b3:78:89:
                    f0:97:10:b7:21:00:47:3c:a4:13:a1:68:c1:07:0a:
                    28:1f:ca:81:a7:b4:c1:66:72:4e:56:5b:82:3b:33:
                    0b:12:c3:95:58:d3:3d:a5:0a:6a:cc:eb:81:aa:db:
                    84:5e:5e:86:8c:3d:d4:a5:b9:9b:c3:41:da:fd:bd:
                    9b:5a:72:c9:b2:2a:8a:f3:08:a0:7f:ac:50:0f:34:
                    8d:f9:e9:1f:af:84:ca:06:4f:b2:15:ad:36:b0:69:
                    5f:8f:4e:26:e3:35:1e:ec:d2:f5:a0:33:77:5c:8b:
                    9e:f0:e2:d0:41:56:d7:b6:8a:fd:5c:b0:cb:45:09:
                    26:72:fa:be:00:4d:38:dc:b4:45:37:f2:93:42:94:
                    51:10:fd:0f:ac:b9:05:32:68:d9:08:33:fb:b8:53:
                    02:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D0:10:DF:B4:7D:C1:B7:42:91:DC:53:58:0A:55:EB:17:03:0F:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da4655d5-0987-34f6-bfbb-aef350754baa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:77:ac:32:d1:fa:f7:53:93:55:8d:43:c8:e6:5e:4d:c9:46:
         67:6b:43:85:eb:8e:d3:fd:de:02:30:e6:2d:f2:c9:2b:64:3f:
         b2:38:c4:91:4a:58:80:b8:5b:0b:65:94:41:e3:7c:2e:a8:12:
         0d:ae:fb:71:74:0a:03:0d:a7:3c:2c:97:c2:03:bf:93:32:5f:
         41:9a:0c:92:30:b1:d4:3f:5f:46:47:73:a6:82:37:94:44:a9:
         d2:17:eb:6a:e0:ff:c5:84:3f:ca:b7:23:60:84:64:81:69:62:
         6e:c2:2e:7a:79:d7:66:75:84:2d:06:16:f9:04:cb:ff:47:ba:
         da:39:8d:92:c9:a7:d0:9f:6a:83:a6:6c:19:f1:96:05:88:65:
         d3:fd:5f:53:a2:08:2e:85:42:de:48:88:af:72:32:bb:24:2c:
         5e:33:ee:f3:ad:a4:7c:77:db:d4:03:02:62:0c:9a:90:57:3b:
         8e:e9:e3:46:94:24:1f:da:16:d5:5e:73:c0:43:8d:aa:84:bc:
         a0:28:3c:e7:f7:13:4a:1b:a3:50:83:bc:5e:1c:74:d5:b1:97:
         99:a8:98:63:da:a2:3e:dd:d3:fd:d5:bd:b3:04:ff:68:9c:b0:
         20:60:fa:c3:1f:47:7d:11:33:eb:b3:1e:7e:c1:98:52:bf:e5:
         38:df:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:08:10 2026 by rpki-client