Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1823bb79-4bd6-3123-8844-5a74363b10b0.roa
File:                     1823bb79-4bd6-3123-8844-5a74363b10b0.roa (raw, json)
Hash identifier:          ulpE7gIZMPp639ZX4s0Pz7bzbGd7hG/V5KqJGG3f+zc=
Subject key identifier:   C1:21:AE:6C:8A:C2:72:B2:A1:E6:F6:E9:46:8C:0D:EC:ED:19:6D:69
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F17324DA5D6F67BF04F90D900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1823bb79-4bd6-3123-8844-5a74363b10b0.roa
Signing time:             Mon 07 Sep 2026 01:00:11 +0000
ROA not before:           Mon 07 Sep 2026 01:00:11 +0000
ROA not after:            Sun 06 Dec 2026 02:00:11 +0000
asID:                     396605
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:17:32:4d:a5:d6:f6:7b:f0:4f:90:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  7 01:00:11 2026 GMT
            Not After : Dec  6 02:00:11 2026 GMT
        Subject: CN=98383faa-bed2-4066-b6d8-5e2c39a8ed81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:91:2f:97:c9:58:13:ff:de:3d:e7:20:be:ec:
                    22:3c:64:1c:59:25:44:59:f0:ab:56:17:0d:e6:63:
                    66:78:9f:1c:b9:e2:94:30:ee:28:be:7f:14:db:42:
                    cd:cf:f5:9a:e4:85:17:8f:f9:79:57:2b:03:98:ab:
                    b2:ba:7c:73:13:6f:fd:45:71:5f:7b:6e:53:83:41:
                    25:04:bd:10:ae:0f:98:0e:f5:cf:58:3c:16:db:bb:
                    cb:6e:e0:8e:92:d4:d6:6c:6a:82:f2:17:7c:7c:33:
                    8b:8a:cd:16:ce:25:19:ec:01:06:8d:f2:7b:a7:8e:
                    11:32:f1:96:54:36:d8:08:00:ca:16:98:cd:78:f3:
                    3c:ec:bd:e8:ef:09:b8:45:d9:19:ab:44:47:09:21:
                    b7:1c:bb:6a:96:59:59:88:4a:f4:92:db:62:05:6f:
                    98:12:fb:91:87:ec:0b:41:a1:60:f6:77:54:85:b8:
                    59:aa:43:73:12:fb:24:54:1b:78:4e:98:75:2e:09:
                    c4:ae:f8:f3:21:d3:e3:93:99:38:39:4e:93:ec:1d:
                    8d:cc:ad:25:7c:1d:d4:df:02:34:0e:7c:d1:fa:9f:
                    cc:43:ec:f0:97:a2:7b:1b:ba:be:82:e2:4b:61:58:
                    b8:33:51:57:8b:38:f7:54:d7:8a:52:7a:53:4a:87:
                    83:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:21:AE:6C:8A:C2:72:B2:A1:E6:F6:E9:46:8C:0D:EC:ED:19:6D:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1823bb79-4bd6-3123-8844-5a74363b10b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:c9:0d:8d:19:47:5a:71:f7:e5:66:5b:a0:8d:68:0e:6a:77:
         b7:f6:05:9c:8d:a5:3e:bd:98:a6:09:a1:b6:90:a1:ff:5e:26:
         6d:df:7a:cd:0f:71:bb:41:ad:1b:3c:d4:d7:05:e8:9e:37:1b:
         24:b5:7b:6a:0c:60:e0:64:93:79:33:33:a0:f1:3e:1f:f6:05:
         fb:87:6c:69:e3:a8:d6:1c:09:b9:24:4f:75:73:e0:39:db:eb:
         cd:aa:00:9d:55:40:43:e2:e7:42:01:bb:73:e3:88:d8:50:8f:
         8f:5d:0a:22:f0:a9:47:13:84:ad:35:46:81:02:93:29:60:dc:
         71:b3:33:09:4f:2a:b1:ec:f1:2c:6c:2b:0f:a7:20:79:83:76:
         a3:92:34:cb:f6:0d:12:5d:1b:bf:f3:cb:c9:f8:31:07:6e:2f:
         3f:52:af:41:6e:37:e2:b9:85:76:95:9f:bd:05:30:54:4b:2d:
         e7:b7:86:9d:cb:c3:2f:7c:86:5a:ce:51:b3:ad:77:6e:ca:25:
         34:e0:5c:f9:b7:a9:44:75:cd:ee:00:85:fb:f8:3c:c0:96:cb:
         3c:10:35:dd:52:d7:3c:78:ea:8a:c0:31:4d:4f:2a:fa:37:d1:
         f1:cf:6f:98:f6:02:c0:ef:09:b3:78:0a:83:b0:62:42:1b:c5:
         1e:13:9d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:21:58 2026 by rpki-client