Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c293b46-3747-3aab-beab-084da7ebf02b.roa
File:                     0c293b46-3747-3aab-beab-084da7ebf02b.roa (raw, json)
Hash identifier:          VKFpNPmRIvalF4FZ+MjvNvKgZ2SbyK4qg4g2OWGr9A4=
Subject key identifier:   52:B3:E9:50:DE:FF:CF:BB:54:C9:8C:77:45:23:37:A5:D7:98:01:9D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F225D1A56D1C2A2029A1C1AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c293b46-3747-3aab-beab-084da7ebf02b.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     10515
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:1a:56:d1:c2:a2:02:9a:1c:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=73872c13-27d2-43dc-a4b7-d61d6ae1bedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d0:17:7f:ec:fc:5e:34:b2:f2:96:90:69:41:
                    a0:bb:4f:0d:62:53:11:93:a2:6d:f7:8d:dd:09:fc:
                    b8:ab:7e:0e:bc:2e:de:4b:c2:91:ce:bc:f1:7c:49:
                    fb:fc:de:43:cb:d6:74:c7:ba:9c:dd:e4:12:69:ee:
                    ae:22:bd:09:e9:e4:86:47:19:6a:da:99:87:4f:8a:
                    15:1f:d5:df:8a:ef:a0:ca:55:2b:c8:a6:a2:3a:14:
                    77:47:24:b6:df:60:24:82:34:82:b7:f4:2a:5c:4c:
                    54:77:2f:23:c4:cc:59:b7:c8:30:1e:09:0e:06:61:
                    e1:a4:f5:06:da:43:12:c9:0d:72:07:91:9a:e8:4f:
                    77:d2:9a:2d:84:aa:c0:96:49:7a:34:2e:9f:2a:3a:
                    96:a9:f0:3b:17:9b:e2:33:0b:16:fa:bb:38:b5:20:
                    30:3c:26:7c:f4:21:dd:30:a9:95:ab:e5:d6:a5:a5:
                    ca:d3:bc:8b:29:d5:0d:7e:c0:08:6e:a7:16:1b:d5:
                    a1:9c:ef:39:21:ab:2c:a3:2e:94:1b:82:6e:4d:43:
                    23:12:e3:38:1a:83:05:3e:1b:b5:f9:c7:68:7b:b8:
                    73:5e:28:29:58:40:60:5f:e0:ec:3b:29:97:0b:f3:
                    22:71:85:41:d1:ff:11:34:5f:62:64:55:73:26:f3:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:B3:E9:50:DE:FF:CF:BB:54:C9:8C:77:45:23:37:A5:D7:98:01:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c293b46-3747-3aab-beab-084da7ebf02b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:5b:f6:2a:e9:03:ed:83:65:13:55:66:55:93:24:f7:c8:76:
         e3:72:40:15:4c:2e:19:34:1f:1d:fd:4c:03:ee:0b:e9:0d:6a:
         a8:e6:8c:9a:f6:6e:5c:5a:34:03:a6:03:12:3b:cc:04:83:0e:
         db:4f:89:4c:1e:e6:98:c3:ff:c7:78:5e:b7:de:c9:5d:98:f3:
         cb:60:51:16:4d:0d:cb:fc:c5:1b:18:b8:f1:18:61:70:5e:9c:
         c5:21:87:ed:2c:9a:92:2f:17:70:5c:14:22:2f:fb:c8:ab:82:
         b4:4f:71:31:67:be:18:b3:79:79:78:63:96:ef:88:30:cf:9a:
         e3:55:00:6c:7d:90:77:33:16:8a:f8:6d:b2:07:d3:62:27:55:
         81:33:fd:9d:b0:03:18:7d:fa:1c:63:eb:d4:f2:96:30:1c:4d:
         84:8e:c8:ee:9e:cd:13:38:54:0a:f9:26:77:7f:d4:72:0f:e8:
         e6:e1:e8:d8:d5:29:4c:88:ed:84:4b:ab:fc:1b:9d:31:49:b4:
         b7:89:59:20:de:c7:2c:4c:3c:e1:3a:47:7e:26:d2:79:21:79:
         c6:a9:91:76:e8:34:0c:cd:24:e2:11:b6:f5:e4:78:07:0f:b7:
         90:87:5d:55:19:f3:59:44:37:ad:6d:05:37:2f:f2:0b:81:c1:
         5a:06:42:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:46:16 2026 by rpki-client