Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2452d48-ffc7-34e1-beb7-5d9e6bf1233a.roa
File:                     e2452d48-ffc7-34e1-beb7-5d9e6bf1233a.roa (raw, json)
Hash identifier:          DWJlIFa0lcpI4aJoUuIiNH4KboJ+fJITvnMEx+lqKvc=
Subject key identifier:   BD:3F:CA:2B:E6:8B:CC:13:71:E0:C2:98:99:F2:0B:9B:FC:A9:BB:DA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EED51FC3128FAB2FD23F16620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2452d48-ffc7-34e1-beb7-5d9e6bf1233a.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     211369
IP address blocks:        192.42.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:51:fc:31:28:fa:b2:fd:23:f1:66:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=5a3a9b9a-2d18-48d7-b3ee-1dcee9511dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c4:63:77:8a:b7:dd:1b:db:5e:03:d2:7b:1b:
                    a3:cf:c9:05:68:13:b8:ac:15:62:f6:91:49:77:69:
                    6a:77:45:0f:b5:85:12:e4:8f:5e:36:5a:48:bd:2e:
                    f1:89:19:99:6e:b3:ee:a2:3a:59:00:5b:b9:84:35:
                    1a:29:c4:1b:b9:f7:52:c7:15:fb:de:8c:e2:62:b5:
                    a0:2b:59:0a:1e:e9:e5:fa:19:be:0c:72:aa:37:d0:
                    13:b0:67:14:ef:00:42:41:89:fa:b7:f9:9b:47:f8:
                    6f:ea:5f:f7:9d:e5:60:97:17:27:9c:15:b0:ae:14:
                    6a:8c:f4:f2:b0:f7:33:c2:ec:34:cc:9c:80:f8:da:
                    ca:b9:f4:58:44:31:71:e9:6d:e2:d3:e5:47:0e:59:
                    29:7b:4a:3f:6f:dc:c7:1c:2d:11:8b:d0:d5:46:8b:
                    f7:f1:4e:4b:f5:b6:91:9f:6e:47:ab:1c:50:a5:94:
                    a0:72:f6:11:51:b5:f6:d8:61:f3:2e:c3:ba:bd:d1:
                    77:5e:5e:7e:7e:ee:1c:d2:42:a8:70:57:9a:26:5a:
                    fc:71:6c:44:cc:1d:d9:dc:f8:f9:c0:e2:cf:34:10:
                    88:e2:ed:cb:03:09:75:77:31:bd:57:a5:1c:7f:e5:
                    79:c2:a3:92:e7:2c:96:f4:fc:21:e7:3b:82:bc:b2:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3F:CA:2B:E6:8B:CC:13:71:E0:C2:98:99:F2:0B:9B:FC:A9:BB:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e2452d48-ffc7-34e1-beb7-5d9e6bf1233a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:14:70:5e:af:01:1b:ad:4c:79:57:99:5f:4b:79:39:d2:d6:
         f8:e9:4f:30:73:5d:5f:b7:d2:90:61:5f:b3:1e:d2:b0:24:38:
         83:42:41:bb:14:1e:99:38:94:5d:cf:bb:f6:62:5e:2e:3d:e8:
         cf:ea:19:8d:45:ad:99:06:51:26:5d:c1:e0:91:21:55:d1:c4:
         d9:5a:a6:45:de:55:4e:87:53:95:eb:f2:25:41:8d:37:8f:e6:
         db:3f:ce:43:06:e7:97:1a:e3:ca:f4:c6:e0:e5:3d:f3:d5:7e:
         ec:f5:53:a0:08:e9:af:65:8c:94:c5:e4:67:1b:10:6d:e5:00:
         c4:53:b2:4c:5a:e2:36:24:08:6c:a9:fc:fe:ca:8c:f1:ae:18:
         bf:70:d0:65:81:02:19:f5:26:b2:57:c9:84:62:57:e3:0c:65:
         3d:84:77:c0:0e:b1:a2:84:96:b4:76:fd:3b:a4:bd:0e:29:42:
         2d:9f:ce:50:e9:12:dd:df:6b:f7:3e:fb:e9:f6:ca:a7:08:b4:
         c3:2a:5f:d3:23:87:23:d2:05:08:ac:7a:f9:87:f5:4d:52:87:
         a8:bb:e4:00:48:02:24:2a:ca:6a:11:f5:8b:b2:2a:a6:96:6d:
         4b:55:56:ed:c7:c5:7c:e6:72:d0:6a:27:24:6b:33:a9:f7:83:
         11:63:af:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:40:31 2026 by rpki-client