Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ad167b8-bed0-393b-98e1-327fada5d03e.roa
File:                     1ad167b8-bed0-393b-98e1-327fada5d03e.roa (raw, json)
Hash identifier:          ofnb5j7UQHP/KHiWetoAp6bGQIN8fDHFWQeCgXTXudk=
Subject key identifier:   4A:5A:11:F2:B5:69:A9:33:22:65:2E:3C:3C:7D:47:EB:56:3E:C2:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FF42E2E915EBB9908A0A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ad167b8-bed0-393b-98e1-327fada5d03e.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396617
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:f4:2e:2e:91:5e:bb:99:08:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=de4f2e5f-da77-42cf-bca6-b8d99586c76e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:a9:2e:47:1a:3e:98:d8:b5:c3:6f:cb:ba:
                    04:a9:cf:d2:61:f6:29:0d:bb:01:d0:c0:c7:43:a4:
                    0c:05:c5:74:c2:1d:c3:44:63:4e:56:f1:86:8c:77:
                    64:ca:0a:2a:69:46:2e:83:24:a5:51:27:4d:f9:c9:
                    8f:d0:33:a7:0a:01:5c:47:df:aa:d5:fe:53:56:e4:
                    1f:fd:12:bf:e4:a5:4a:4e:b2:17:88:f6:ff:28:8c:
                    ff:c4:cf:98:4e:f1:d7:b2:14:5f:a0:db:ec:98:17:
                    03:c5:05:d7:9c:71:59:54:aa:f8:92:1d:da:2b:73:
                    41:25:e3:93:70:95:94:e6:59:0c:02:58:d6:dc:d8:
                    0a:d2:58:ef:0a:7a:4c:87:9c:36:33:bc:e7:7c:52:
                    e5:5e:ac:d3:1e:e8:25:a0:cf:0f:2b:d5:1d:09:f7:
                    7d:a4:e1:c6:58:9c:fa:7b:3e:eb:d3:b6:7d:a8:f9:
                    f3:5a:84:1d:5d:cb:8f:07:4c:44:3c:c0:ee:2a:66:
                    7c:9f:1e:b9:cb:23:ce:8a:35:93:f9:83:c7:4b:e6:
                    ff:f8:5c:51:cc:ed:3f:5d:88:8f:f2:20:74:29:9d:
                    60:4e:06:57:f2:4c:09:95:4e:b3:90:1a:98:6c:ca:
                    5d:6a:1d:e6:f3:d8:ef:ad:14:63:68:1e:ab:d9:65:
                    fe:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5A:11:F2:B5:69:A9:33:22:65:2E:3C:3C:7D:47:EB:56:3E:C2:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ad167b8-bed0-393b-98e1-327fada5d03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f6:da:ef:d2:0e:76:1f:b0:63:0d:74:9e:e4:99:66:84:92:
         3a:e4:89:58:e1:86:12:6f:67:31:61:88:79:d2:c5:26:3f:5e:
         e6:4d:f2:b5:37:9f:7d:f4:1a:b3:39:9c:ef:5f:0b:ee:40:9e:
         c0:5a:21:4f:e1:4c:72:28:80:d5:16:e6:4e:83:72:be:f0:c9:
         65:55:56:f0:88:63:4e:61:14:fa:23:c9:5b:22:01:09:41:2c:
         34:7f:bc:24:96:0d:7d:94:66:97:8d:29:1f:04:52:60:56:19:
         7a:9e:ac:a9:18:31:78:ff:32:f7:c7:a7:7a:a1:26:01:03:1c:
         27:7c:96:2c:68:7c:88:d5:b0:c2:81:6b:4c:4c:23:d9:a6:d7:
         5e:ca:8c:80:b0:26:dc:58:e9:4d:7c:91:f9:91:8c:8a:60:11:
         33:69:fb:99:9e:0c:e7:a8:07:1e:c3:97:8c:01:49:4d:a6:b1:
         ca:e7:03:51:6a:4f:31:48:25:75:c4:f4:64:96:e7:90:fd:79:
         57:b5:ff:0a:f0:af:db:f5:aa:f8:2b:73:51:ba:b7:87:96:9b:
         02:28:bf:fb:cd:1e:08:50:a6:3b:d6:a5:47:5f:e3:4d:0c:66:
         19:02:56:d8:07:e0:14:04:53:1f:09:ad:67:7b:c0:5e:42:8d:
         ed:22:83:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:23 2026 by rpki-client