Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14d23155-fbf2-3341-9d52-bbc0ae49526d.roa
File:                     14d23155-fbf2-3341-9d52-bbc0ae49526d.roa (raw, json)
Hash identifier:          YxPz0q/U/rfGN54CIe+SSGdQ37CGmTkFVPOe3tPIBlE=
Subject key identifier:   11:EB:E4:12:2B:B4:21:19:A8:97:B1:9D:0A:B5:23:9D:AF:FF:4C:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F093CE0C4455CC00C63038040
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14d23155-fbf2-3341-9d52-bbc0ae49526d.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     36623
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:e0:c4:45:5c:c0:0c:63:03:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=573ec758-1bbb-4431-a7f4-570166651ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:f6:cb:ea:da:0e:df:82:25:2c:a3:c5:eb:
                    c7:3c:74:0d:4a:1d:55:b4:a7:ec:3e:5e:b6:8a:37:
                    ab:95:44:ef:de:aa:ec:53:f1:f3:c0:2b:b3:a2:29:
                    ec:cf:28:ab:bb:47:8c:c5:fa:b0:6d:df:25:3e:d3:
                    fc:0e:54:e5:1b:9e:ea:27:e8:90:70:c6:47:06:b4:
                    12:4d:53:29:b0:14:dc:f2:f4:a6:82:37:81:ff:42:
                    d5:13:61:6a:11:45:6b:6f:d3:c0:ff:b7:e4:3b:8b:
                    74:d9:55:4b:86:e8:92:a7:5a:35:66:5c:73:e5:d8:
                    ba:17:9b:d1:4d:cf:4e:b5:29:03:8f:34:ee:b8:ca:
                    60:db:fa:b8:93:eb:9e:13:cd:6e:b0:e0:66:ef:af:
                    7b:2d:cb:38:80:ec:fb:9a:1b:70:01:6e:e8:8d:2a:
                    d8:0e:62:ff:e7:b3:30:08:f7:63:37:72:2e:7c:b0:
                    58:87:7f:78:e8:16:65:d3:9e:ab:75:96:7d:67:19:
                    5c:04:0c:ac:d0:97:c4:a7:cb:ea:37:8b:08:87:23:
                    2a:da:57:ad:35:de:db:86:b2:43:77:92:e3:8e:bc:
                    39:2f:61:cc:50:a8:af:97:2e:2d:bf:9f:c5:23:40:
                    a7:8d:3e:cd:ac:e0:9e:51:7c:f7:fe:c6:f7:aa:3f:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EB:E4:12:2B:B4:21:19:A8:97:B1:9D:0A:B5:23:9D:AF:FF:4C:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/14d23155-fbf2-3341-9d52-bbc0ae49526d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ec:5a:c1:b6:02:9c:30:57:7d:a5:2e:0a:22:62:92:62:ae:
         e6:c2:a1:d8:aa:68:0e:36:47:e6:0b:af:72:35:f9:13:27:84:
         2f:80:0f:3a:b6:eb:6e:13:73:02:d9:0a:e6:1c:53:0c:a3:65:
         1f:0b:02:3f:3d:c9:68:f5:c8:80:a4:d0:31:8c:31:9e:a8:83:
         d2:2e:aa:8b:09:fc:4f:68:67:d5:2a:3a:4c:92:ce:14:b9:e5:
         82:ba:6b:b3:72:1b:f8:6d:ed:99:14:33:74:a5:24:86:92:f3:
         8b:8f:f7:5e:ad:ea:a7:66:81:17:e4:05:68:5d:6b:1c:f4:cf:
         60:57:85:e5:43:c5:51:88:28:a7:53:ec:3b:a2:ee:76:90:59:
         ba:a4:24:01:65:20:1a:32:3d:6f:fd:66:0d:68:12:67:25:99:
         a6:2d:9d:72:9d:8f:66:d4:3b:d4:58:2c:c4:77:4e:3a:72:05:
         03:5f:6d:df:4c:a0:ca:59:d7:12:6a:c4:4c:5c:f5:84:3e:56:
         c2:91:95:a3:0c:3f:91:7c:17:87:5e:d8:62:04:d8:08:d6:82:
         02:4f:d0:9a:51:38:ef:53:00:04:86:74:9d:69:02:b2:1a:8b:
         84:54:cb:2d:9f:c7:f8:bf:b7:3d:db:4b:f9:1a:e0:80:1e:b5:
         fc:91:e7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:34:01 2026 by rpki-client