Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ebe3de1-d768-32e6-a30f-905dfac3508b.roa
File:                     1ebe3de1-d768-32e6-a30f-905dfac3508b.roa (raw, json)
Hash identifier:          +L3nJAGc3537HC1bT2g5R5YUON1haP3Li6h9N4fAG58=
Subject key identifier:   D3:C6:6D:5A:D4:BA:5F:21:7C:C0:5A:C2:F4:B8:BA:DB:9E:40:1D:5F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F11A133E606CB499E6D52C310
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ebe3de1-d768-32e6-a30f-905dfac3508b.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     36618
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:33:e6:06:cb:49:9e:6d:52:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=64e8a94a-42e0-4dbb-92a9-341f718afbb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:07:80:80:37:e5:b5:49:6f:ef:27:dc:85:a5:
                    56:73:e1:ae:5b:ba:bd:33:6d:60:b1:f6:b4:a3:be:
                    de:75:f6:ec:d9:8a:c4:17:70:0a:73:b3:dc:b9:c7:
                    ad:ec:5b:f3:29:c7:94:4f:56:ca:72:e4:54:2c:10:
                    70:8f:c6:23:86:ef:70:6c:bf:29:80:14:47:24:0e:
                    25:87:4c:ed:fc:7e:ff:2e:88:51:45:b9:4a:cb:42:
                    10:29:1a:f3:90:7c:c0:85:0a:1b:98:d2:2a:7f:a0:
                    22:92:65:1d:5e:27:dc:2e:67:2f:17:ef:27:02:ed:
                    47:ed:bf:d5:20:ef:13:29:e8:28:ce:76:4f:24:1e:
                    72:21:67:0c:1b:b2:50:1e:dd:61:61:14:bf:0c:b3:
                    94:67:bf:15:88:de:a2:92:e4:6a:f6:2d:bc:64:23:
                    d1:53:a8:c2:dc:92:13:12:cb:ef:46:21:e5:8c:b1:
                    b8:31:b8:d6:f5:5e:12:7e:57:14:e1:99:88:44:8c:
                    d4:c5:b7:69:40:d3:61:40:ff:66:33:f7:09:cc:7d:
                    8e:55:5b:81:9f:48:09:50:35:0d:90:3a:60:e3:1a:
                    49:1c:a0:d3:27:bf:39:97:9a:99:a6:8e:49:33:3e:
                    eb:48:49:f4:7f:6e:36:d5:fc:46:04:e1:9b:b5:ec:
                    c9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C6:6D:5A:D4:BA:5F:21:7C:C0:5A:C2:F4:B8:BA:DB:9E:40:1D:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ebe3de1-d768-32e6-a30f-905dfac3508b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:b8:ad:2e:6f:3e:bc:cd:24:8b:93:25:6f:48:02:a8:59:61:
         19:e7:1d:50:a5:6e:5c:d9:9b:ca:39:32:44:06:8b:7a:ff:b1:
         70:f8:24:ab:3f:ff:e2:55:66:e8:59:86:59:08:18:66:da:4c:
         0d:1c:78:69:7b:db:a1:66:d1:1a:4a:b0:7a:94:14:f8:d4:3d:
         0f:e1:b8:5d:3c:7a:50:3c:f5:6f:0a:08:90:0e:8f:8d:f7:1c:
         04:06:b0:32:cd:35:de:e1:87:cf:45:e8:05:df:17:18:5d:25:
         5d:fd:8f:28:57:83:98:bc:03:5a:2d:96:a9:d0:f9:29:47:b5:
         34:18:88:89:83:7d:b3:ae:b3:8f:08:82:c4:e9:62:8e:22:29:
         da:d9:e3:db:94:5d:74:15:a5:82:99:3d:94:0e:a9:7b:bc:72:
         2d:7b:ab:0f:99:e7:18:4b:9b:60:0d:ff:cb:ee:20:a5:62:4e:
         26:45:29:a6:5c:7f:cd:7c:b0:ec:cb:3c:f4:36:a0:af:d8:19:
         29:17:0a:ca:ce:f9:d4:62:55:12:7d:7c:cd:d5:c2:7e:07:26:
         ae:b4:09:d1:d2:11:18:91:2b:01:e6:a6:a8:c6:d2:79:84:0c:
         bc:70:51:9a:f1:a3:d2:54:de:20:ad:ea:18:1a:47:42:58:2f:
         f1:2d:7f:0c
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8RoTPmBstJnm1SwxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NjRlOGE5NGEtNDJlMC00ZGJiLTkyYTktMzQxZjcxOGFmYmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9geAgDfltUlv7yfchaVWc+GuW7q9M21gsfa0
o77edfbs2YrEF3AKc7Pcucet7FvzKceUT1bKcuRULBBwj8Yjhu9wbL8pgBRHJA4l
h0zt/H7/LohRRblKy0IQKRrzkHzAhQobmNIqf6AikmUdXifcLmcvF+8nAu1H7b/V
IO8TKegoznZPJB5yIWcMG7JQHt1hYRS/DLOUZ78ViN6ikuRq9i28ZCPRU6jC3JIT
EsvvRiHljLG4MbjW9V4SflcU4ZmIRIzUxbdpQNNhQP9mM/cJzH2OVVuBn0gJUDUN
kDpg4xpJHKDTJ785l5qZpo5JMz7rSEn0f2421fxGBOGbtezJQwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNPGbVrUul8hfMBawvS4utueQB1fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWViZTNkZTEtZDc2OC0z
MmU2LWEzMGYtOTA1ZGZhYzM1MDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB4tHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAZuK0ubz68zSSLkyVvSAKoWWEZ5x1QpW5c2ZvKOTJEBot6/7Fw+CSr
P//iVWboWYZZCBhm2kwNHHhpe9uhZtEaSrB6lBT41D0P4bhdPHpQPPVvCgiQDo+N
9xwEBrAyzTXe4YfPRegF3xcYXSVd/Y8oV4OYvANaLZap0PkpR7U0GIiJg32zrrOP
CILE6WKOIina2ePblF10FaWCmT2UDql7vHIte6sPmecYS5tgDf/L7iClYk4mRSmm
XH/NfLDsyzz0NqCv2BkpFwrKzvnUYlUSfXzN1cJ+ByautAnR0hEYkSsB5qaoxtJ5
hAy8cFGa8aPSVN4greoYGkdCWC/xLX8M
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:53:48 2026 by rpki-client