Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ff55034-28e5-358a-b5f8-6409392af43b.roa
File:                     1ff55034-28e5-358a-b5f8-6409392af43b.roa (raw, json)
Hash identifier:          6r/gm6fuIkG+0pQcVU3d97i14wRqkzIxLFewE9uUEOg=
Subject key identifier:   1A:7A:14:F7:79:1A:56:C1:CA:12:31:8E:4A:11:44:2C:66:1D:85:1B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F11A12D3252BE087DE1315280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ff55034-28e5-358a-b5f8-6409392af43b.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     396561
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:2d:32:52:be:08:7d:e1:31:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=69365f05-d996-41a5-8ca8-f5fcf17e95cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4f:c9:91:48:53:29:78:c3:55:c7:9d:f7:9f:
                    8c:80:01:1c:71:4c:7e:87:9b:ca:8a:95:6e:2a:00:
                    6d:bb:49:5d:c5:cb:e7:e7:49:a9:4b:05:da:cc:cb:
                    10:5b:f9:b8:89:b7:35:5f:e4:5b:7d:0a:27:17:07:
                    7f:51:ba:bd:96:3d:46:a2:dd:6b:ec:a7:07:af:59:
                    07:51:9e:7f:63:83:13:da:04:ed:b4:c5:8e:83:27:
                    1a:62:e5:dc:61:ab:3b:f1:b4:88:7d:5b:de:81:f4:
                    cf:8d:47:c5:3e:c7:80:a8:4c:fa:9b:07:07:a4:02:
                    a2:41:37:e5:4b:8a:27:39:9b:85:df:0b:0c:5c:32:
                    3b:75:08:1d:8b:e1:cc:86:6d:30:7c:27:e6:2e:00:
                    f5:7b:6b:4f:2b:e3:dd:32:35:9c:97:7a:46:c9:90:
                    b7:87:48:30:f1:98:53:d2:d9:a0:7b:a5:bf:48:4c:
                    77:0a:34:fa:fe:56:ba:d5:78:35:37:ac:bc:0e:11:
                    42:00:22:d8:5f:5f:08:57:67:0a:61:44:f0:11:1a:
                    78:93:50:af:11:6b:4c:15:22:88:f3:8c:c5:79:2f:
                    33:35:e0:13:64:0f:a4:5a:ba:9a:f0:c9:45:a0:37:
                    03:8b:24:49:4e:a1:84:ac:11:7b:3f:cb:63:6a:c6:
                    a5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:7A:14:F7:79:1A:56:C1:CA:12:31:8E:4A:11:44:2C:66:1D:85:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ff55034-28e5-358a-b5f8-6409392af43b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:dd:a0:2b:cb:30:ae:41:0b:16:b8:89:35:e1:47:fe:26:c9:
         f7:3e:0f:c5:d7:37:ca:e0:0e:fd:78:9e:de:25:6e:ed:43:14:
         95:ed:27:5e:66:0d:09:26:16:0d:5b:e7:b1:51:b4:e6:a7:9d:
         2e:ae:5a:63:01:da:b4:e1:d5:33:08:9e:87:d4:0f:d1:fd:1f:
         61:4d:46:3a:6c:89:01:d7:81:98:c0:6f:7d:b9:af:aa:60:a0:
         20:5e:ad:16:46:bf:e2:1f:1f:42:26:6b:52:96:6e:d2:f8:7e:
         d7:11:be:63:c5:b5:ed:45:d5:07:64:07:4e:e7:84:27:74:58:
         bb:8d:59:4e:af:6a:3e:ee:6d:6d:83:2f:7d:cf:a6:c2:c0:fc:
         49:cb:bd:fe:33:9a:01:bd:cf:d3:a1:55:9d:c0:59:53:df:9e:
         d0:e8:15:cf:44:df:2b:67:12:20:b3:0c:aa:6e:24:f5:6c:72:
         58:f7:1a:1d:d4:c2:f2:a0:bf:5b:d7:8b:49:96:ba:b1:03:c1:
         d3:d0:b4:f7:8f:cb:62:9e:c7:a7:33:81:af:7a:ce:31:af:be:
         4e:ce:57:e9:69:8a:41:1a:74:4e:ce:be:30:61:69:01:4d:38:
         17:38:c3:53:c0:5b:e9:40:36:6b:72:0f:8f:58:c8:f5:bf:d6:
         0d:ef:eb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:41:33 2026 by rpki-client