Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0315d73f-2603-3355-a266-596272eeda90.roa
File:                     0315d73f-2603-3355-a266-596272eeda90.roa (raw, json)
Hash identifier:          1nMtY52rSe6ea7pcu4Ai+PtjJWnRDbAKnVirYA+faF4=
Subject key identifier:   9D:81:D9:76:07:E1:DF:BE:FF:B5:AB:FA:3C:7C:BB:FA:05:87:91:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4972F143A74A149699DDF300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0315d73f-2603-3355-a266-596272eeda90.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20431
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:f1:43:a7:4a:14:96:99:dd:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=438cf44e-9b8f-40e4-a842-f213a7f41b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ff:d3:5c:82:42:bf:56:3d:5d:7a:1a:0f:fa:
                    0b:86:b1:21:a4:9e:53:0e:3f:42:6d:5f:5c:9e:33:
                    ff:61:95:c5:1d:ca:df:f2:4f:67:7c:48:1f:20:4a:
                    40:da:e4:3c:e8:aa:95:85:ef:41:74:e1:15:c0:9a:
                    1a:1c:62:31:cb:10:ec:0d:5a:21:5c:df:a4:7d:b5:
                    73:7f:ed:05:c1:e5:44:96:b7:68:bb:22:4b:9e:d3:
                    24:b8:96:cf:49:d0:fa:65:53:a5:38:b6:7a:88:f7:
                    57:e0:9b:07:e0:5d:cb:34:4d:aa:74:29:fc:a3:33:
                    6e:71:a3:b8:9f:b1:6f:4d:a4:c1:5a:ba:09:19:96:
                    79:11:5a:3f:ad:d3:c5:b5:e6:82:06:99:89:65:d1:
                    d6:0c:9c:83:f6:e9:6d:fc:66:ec:31:c5:39:b7:c0:
                    5d:bf:cd:74:d2:25:69:91:ce:51:4a:cd:ef:4d:02:
                    82:5f:66:57:a9:6b:11:3c:21:26:7f:57:2d:80:c3:
                    c8:9a:1e:71:01:ba:23:5c:a7:30:0d:4a:34:b0:d0:
                    1c:a8:98:84:f5:bf:ef:44:e7:fe:d4:23:8f:26:ed:
                    6c:ef:89:5c:0d:68:9d:cd:92:fa:a2:49:3f:36:1b:
                    34:09:8c:75:f1:ca:4e:f1:ed:d6:57:d2:84:21:8d:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:81:D9:76:07:E1:DF:BE:FF:B5:AB:FA:3C:7C:BB:FA:05:87:91:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0315d73f-2603-3355-a266-596272eeda90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:75:76:72:aa:72:f9:d6:e7:e2:7d:fd:8c:3e:be:d2:1e:cd:
         47:4c:3d:6c:d3:17:8e:97:17:eb:3b:d5:c7:78:4b:c9:be:33:
         7b:f5:6e:63:3e:c2:23:ba:51:ed:95:13:09:56:e5:c3:2e:e9:
         0d:cc:2e:14:fe:70:e6:c1:12:38:a5:12:f2:c8:f4:c1:60:13:
         ee:96:bd:8a:c7:91:44:c0:22:12:7c:f3:73:e2:b7:b0:ca:b4:
         e4:f9:9e:f4:f6:9a:35:e0:18:03:a8:c1:24:85:9b:63:e5:8b:
         89:f7:08:5c:00:ae:1b:d6:ce:2a:85:be:82:b8:85:01:72:40:
         be:f5:9c:31:f6:1a:87:6d:39:a7:50:89:8d:af:46:7e:14:be:
         43:45:ba:a5:96:aa:bf:cc:45:0c:71:39:84:d0:88:5e:7c:aa:
         84:76:54:bb:13:22:5e:bd:92:e1:be:08:07:09:6f:f5:29:e9:
         ee:e5:78:f3:9e:b6:05:a2:ce:c6:72:82:b6:24:9d:62:96:97:
         89:cb:a2:34:68:24:d4:3c:5e:30:14:5d:00:aa:9d:f9:24:b1:
         a6:70:90:fb:82:0f:e1:73:a4:1e:5f:1c:d0:00:60:c4:65:bb:
         fd:dc:01:08:db:48:bc:e8:f3:1e:06:aa:f1:51:62:95:79:31:
         80:e4:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:29:54 2026 by rpki-client