Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa
File:                     00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa (raw, json)
Hash identifier:          US3iSiE/PMhg2+07DOZxLUxQQX8+KEf8RMuy6W7vmj8=
Subject key identifier:   9D:FA:D7:77:12:91:1A:45:AA:B8:F6:2A:4F:34:8A:A1:3A:1F:BB:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972DD3A3E767A044C4C8330
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396606
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:dd:3a:3e:76:7a:04:4c:4c:83:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=88872cf9-7a75-4429-beb7-7c49bf55db71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2a:d1:a7:9d:a7:f0:eb:6c:d3:b2:2a:e5:3b:
                    9a:94:67:07:e0:46:4c:04:98:47:7b:33:16:9d:00:
                    89:0d:a0:ef:f1:5a:d0:7f:54:3c:27:b1:ea:ea:f4:
                    f2:2a:47:27:4f:79:9d:30:0f:75:76:64:d3:9b:b3:
                    a5:b6:4c:9e:8e:5d:0a:56:38:38:cf:12:79:b7:9d:
                    2e:eb:b1:24:d4:6e:da:08:34:8c:fc:31:51:95:e0:
                    0d:ac:40:3d:b3:2e:12:db:a6:cb:79:c4:1b:82:4e:
                    b1:5e:82:c0:d5:74:69:35:6d:49:eb:16:e4:fe:79:
                    3e:f2:2a:01:91:7e:75:1b:f2:b0:42:62:ae:b4:9d:
                    a2:5b:bf:84:f3:1d:5f:d0:9b:b1:84:38:2f:36:f8:
                    d9:3a:c4:3a:79:6f:94:82:87:4e:da:ba:3a:b4:54:
                    cf:0e:92:9a:0c:55:ab:ee:bc:08:b1:ed:3c:f3:3e:
                    d3:ff:9f:70:03:a9:ea:d8:9e:8e:04:d1:2e:44:81:
                    8c:99:c8:dc:61:7f:b6:1b:44:22:6a:5f:64:16:ed:
                    bd:0e:94:26:ae:4f:8c:a9:37:63:94:8b:cf:c3:c9:
                    11:5b:1c:22:57:c4:a7:74:24:4b:87:38:86:c2:a6:
                    cd:16:ca:80:58:f3:a7:df:35:13:36:d8:a6:cb:e6:
                    03:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FA:D7:77:12:91:1A:45:AA:B8:F6:2A:4F:34:8A:A1:3A:1F:BB:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/00b053f1-1a4a-3c83-bbc7-bdf3558ff972.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:13:72:04:cb:bf:d0:05:63:ff:36:f2:cb:f9:7b:3e:28:d8:
         2a:1a:0b:08:41:10:fc:ff:39:9e:22:ee:85:bf:7a:91:a4:a7:
         30:5b:a8:e3:12:04:f7:64:e7:10:93:fc:dd:08:eb:cd:4c:01:
         d8:5c:b6:81:60:fc:b7:05:88:c2:ab:d0:86:9f:43:17:ea:52:
         86:9d:73:34:11:81:ad:74:62:2f:89:bd:1c:e5:28:e8:b4:a5:
         30:c8:50:a6:10:10:1e:78:fc:c8:a3:1d:cd:46:93:ce:6b:ac:
         50:a8:7a:db:d4:ac:1a:61:92:df:26:30:6b:fb:a2:06:53:e8:
         fa:05:79:8b:23:99:7d:54:c2:62:88:83:6c:e3:26:dd:7d:b4:
         9f:cc:9c:36:c6:3f:e6:fe:0f:65:df:73:93:22:f0:95:95:6f:
         dd:e9:9d:2b:c1:a2:50:d1:24:45:a4:5f:cb:af:4c:5f:d4:f4:
         3e:29:4e:b4:0a:56:22:1f:63:d1:89:26:c8:93:80:92:c4:fe:
         39:8a:db:47:49:e2:4b:50:f7:34:57:dd:af:df:35:2e:ec:ee:
         b6:db:6b:2d:3e:cd:f7:2a:18:49:40:08:5f:81:93:4f:ce:5a:
         27:9a:cf:c0:29:b9:73:5d:c6:89:b2:58:69:14:bb:59:72:1b:
         3b:a3:08:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:11:30 2026 by rpki-client