Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b67b3cf-0377-398a-a4e5-5359e520cd99.roa
File:                     1b67b3cf-0377-398a-a4e5-5359e520cd99.roa (raw, json)
Hash identifier:          TtMhsCxzFMXTeiOiQcCiPrsb6XFtlm+/rd8rnXJ0+mo=
Subject key identifier:   D3:0D:39:30:26:C4:05:D9:2C:53:5E:54:0E:3D:0D:3A:F9:82:07:DD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA4991C8F921EDF8159AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b67b3cf-0377-398a-a4e5-5359e520cd99.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     397200
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:49:91:c8:f9:21:ed:f8:15:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=8954f06e-6839-4699-84ff-0d0098e4e0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ef:3a:4f:9d:0a:03:db:71:8b:8b:cf:e0:04:
                    87:3d:2e:aa:65:b9:17:dd:2e:1d:44:29:4a:a1:b5:
                    16:75:ee:b0:48:fb:a8:51:f7:f3:fa:8b:c8:39:63:
                    cf:64:18:21:a8:8a:1f:86:c6:6d:79:d7:3f:1d:3f:
                    07:26:2a:84:3d:35:ae:96:44:07:35:14:46:f7:40:
                    79:a4:1e:e1:f0:d6:9b:38:1e:c2:a9:8a:41:bf:8d:
                    47:e8:e2:e7:9d:30:be:c5:d6:94:c8:79:fa:cd:a9:
                    f3:e4:80:46:54:e7:8d:5e:f5:5c:c3:4b:f4:a8:0a:
                    04:a7:1a:63:9e:a3:41:72:06:f7:97:f6:75:ad:c2:
                    78:ed:d1:cc:0f:54:d0:28:d4:9f:ae:58:46:9b:c2:
                    c0:0e:32:d4:04:98:27:e8:13:d5:62:c3:2b:19:d8:
                    58:91:4a:af:ec:ee:53:09:83:9d:14:27:46:a8:a4:
                    1e:a5:14:44:e2:c2:ed:15:f7:b3:a4:7c:cb:5d:7e:
                    a1:81:a1:b8:c9:58:fd:59:6d:91:29:fd:c9:39:9f:
                    d7:c6:50:f7:66:37:a3:57:31:b5:95:f0:4e:2c:25:
                    f7:0d:55:f6:cc:ef:12:aa:7f:b5:08:e6:c2:7d:00:
                    ea:b6:07:ea:dd:05:5b:f5:2d:52:c5:71:81:db:8a:
                    5b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0D:39:30:26:C4:05:D9:2C:53:5E:54:0E:3D:0D:3A:F9:82:07:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1b67b3cf-0377-398a-a4e5-5359e520cd99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:e7:6f:7c:42:da:34:3b:a5:93:bd:ae:48:53:2e:ae:dc:85:
         7f:3f:ac:c2:9b:9f:5f:98:e7:27:2b:7d:c6:ab:c3:23:d2:a5:
         d2:55:8f:db:9e:ff:c2:9e:3b:f3:be:37:c0:30:d8:64:1a:84:
         eb:59:2a:55:20:df:f1:dc:8e:2b:a5:9c:34:77:4c:69:07:0f:
         3a:0d:05:fa:b7:48:91:99:d2:3a:e4:c0:a1:e6:ca:f1:ec:b5:
         f7:93:dd:b3:a5:78:64:af:7e:0e:e6:03:c4:4a:29:dc:b7:e8:
         30:bd:53:bc:9e:b1:aa:ef:ed:a2:fd:42:0d:c3:29:60:15:2d:
         1e:b6:aa:74:bd:ec:3d:7d:37:b4:40:23:a3:70:19:6f:7d:77:
         8c:99:26:41:42:17:3b:2b:94:da:99:b8:bc:f6:2a:a9:0f:2c:
         fd:29:d9:42:f5:7e:ff:d9:93:f7:61:a9:d2:5c:a9:7d:c4:06:
         31:ab:99:6f:12:f7:1a:eb:0a:b5:6b:11:51:6e:64:0c:56:84:
         39:e8:68:b3:ce:af:4f:07:6d:5f:c2:75:59:74:89:07:a6:98:
         eb:cd:52:b5:f2:cf:6e:6d:f5:ea:50:07:f5:9d:29:8a:d2:0e:
         1f:c0:a4:73:7c:08:4e:d2:52:20:b1:00:21:80:f1:7d:ef:8a:
         28:cd:5d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:50:26 2026 by rpki-client