Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db6dca08-d239-35b4-8648-08ef97435011.roa
File:                     db6dca08-d239-35b4-8648-08ef97435011.roa (raw, json)
Hash identifier:          pB56/n84OAPi1lG37jwStOFAVrf9Z3ru/C9ouMKxd60=
Subject key identifier:   3F:4D:90:3B:A6:D8:B0:AD:46:AF:10:42:4D:AD:EE:41:36:14:55:44
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DCC606ECD235864EE8755E640
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db6dca08-d239-35b4-8648-08ef97435011.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     20172
IP address blocks:        192.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:6e:cd:23:58:64:ee:87:55:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=8ece0616-02df-471b-a287-5e037ce5498b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:fd:88:a5:93:e5:7b:51:63:c8:6d:8b:43:
                    59:ce:da:5a:84:c5:75:55:5f:a1:25:92:5b:45:54:
                    d9:f5:65:ab:ff:1f:cc:c0:51:59:68:ed:23:81:1b:
                    99:63:d5:25:36:cb:38:61:e2:a1:2f:7a:bc:d0:dd:
                    da:b7:f9:b3:93:12:f2:6c:de:6f:b2:2b:cd:a1:70:
                    3c:75:db:91:a9:d4:14:53:07:35:7e:02:bd:63:5d:
                    00:5b:2e:b8:51:a2:bb:9f:a2:7a:35:4e:a6:ba:a2:
                    b0:fa:73:2a:b5:33:12:9e:1f:b9:56:1c:f3:e2:b2:
                    eb:9f:eb:9c:2f:e2:b8:5b:7a:01:d9:10:b5:91:80:
                    9d:51:f4:08:e4:f3:74:50:9f:37:08:0e:82:b8:de:
                    3a:e4:bc:03:b5:1a:17:dc:5d:d3:96:b5:6a:dc:89:
                    bf:3a:44:7b:38:39:c0:05:1f:05:e0:8e:7e:6f:92:
                    a5:2f:14:f0:90:58:29:38:d8:7e:e5:45:af:88:99:
                    86:a3:94:8b:22:50:81:35:27:0a:04:64:cd:e8:2f:
                    ce:31:0c:ef:c9:fa:b7:57:d6:8e:11:12:39:fd:f7:
                    18:9c:2b:1a:31:45:65:2c:f4:f9:d4:fe:e4:ce:13:
                    91:f2:3e:cf:45:ce:4c:d5:45:5d:01:c9:e2:55:95:
                    49:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4D:90:3B:A6:D8:B0:AD:46:AF:10:42:4D:AD:EE:41:36:14:55:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db6dca08-d239-35b4-8648-08ef97435011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8c:2d:ba:08:7c:db:62:6f:b6:cb:19:a2:ca:48:a6:51:0d:
         db:c5:7e:70:ea:08:53:76:23:06:e1:9f:fb:9d:e1:3f:c0:ae:
         05:a9:2c:01:89:29:bb:38:4c:51:f5:c6:b3:17:ce:b1:b0:ef:
         3b:e5:69:4a:ef:3b:75:7c:54:18:f4:c9:19:45:b5:1f:51:05:
         0f:a5:d8:c1:95:58:da:66:2b:8a:e2:95:1c:a6:ec:ab:e3:b1:
         ed:12:24:18:f5:ce:52:6f:ff:0c:46:ca:a0:ee:f8:9e:02:92:
         16:84:a6:9c:56:66:53:fe:32:dd:6a:6f:f5:67:22:d2:5b:e6:
         45:3a:c7:b2:07:c2:a6:be:d9:f5:7e:e9:e4:68:cb:7b:13:52:
         c4:8e:7c:5c:b1:46:a5:a4:95:fa:a2:e9:dc:7f:7a:6b:47:72:
         54:8f:64:d1:35:a3:21:a3:33:27:17:48:58:86:2a:51:4d:93:
         22:17:8e:16:2a:7d:bc:a6:34:ce:67:b0:83:8a:fe:3f:19:2a:
         18:1b:7b:57:b2:6f:55:f7:fa:fc:88:a7:6d:83:06:29:f1:33:
         03:d4:6f:74:f3:3d:3a:22:95:48:0f:79:f8:6f:60:21:1e:bf:
         64:4e:c5:b7:44:34:00:50:f1:8f:bc:6d:a6:d9:63:34:fc:10:
         8d:b2:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:36:30 2026 by rpki-client