Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42b271b0-3b56-31da-8af2-3953d996abe8.roa
File:                     42b271b0-3b56-31da-8af2-3953d996abe8.roa (raw, json)
Hash identifier:          oDVeQZIEbwjCCShf9b98pQeP7q9SOByWCdI++fBcSlM=
Subject key identifier:   24:23:51:FE:A1:2F:E4:C4:6B:CF:7B:1D:9E:91:32:D1:36:E9:D1:EE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8EF96EF15D49BA24771D8AC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42b271b0-3b56-31da-8af2-3953d996abe8.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     36631
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:6e:f1:5d:49:ba:24:77:1d:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=3168fd7a-aa3e-4c97-b9a4-e6de0ffeda00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cc:a7:34:5d:23:54:f2:fb:3d:fe:83:49:2b:
                    80:a7:29:71:30:3d:03:3c:06:74:8c:d8:7e:ea:21:
                    bd:c0:86:a4:10:3b:21:84:22:86:d5:c3:63:a2:82:
                    27:5a:92:4f:0e:67:14:b4:22:c0:f7:4b:ee:7f:a6:
                    01:30:03:4b:a0:b8:af:fd:b9:3f:49:65:7f:09:cd:
                    8c:cb:8f:4e:b1:9e:42:56:9c:db:37:a5:e2:35:c2:
                    b3:88:1c:1c:4a:82:04:82:e0:cd:59:32:21:cd:ee:
                    ae:3a:a3:f5:2a:1c:f5:33:67:09:e6:8d:b1:d0:bd:
                    da:ca:b6:8a:27:fe:3c:c1:cc:f1:0f:05:c2:92:7d:
                    bb:d1:4b:84:94:1d:75:1e:94:a5:76:23:bd:b8:97:
                    fc:2e:28:97:b8:4e:f6:44:10:d0:25:4d:4a:5a:91:
                    fe:13:8e:4a:9a:a4:6a:2a:aa:78:e8:8f:53:73:4a:
                    18:59:98:e9:d7:98:57:86:aa:ff:e6:0b:81:a8:8f:
                    96:2f:9d:78:0f:91:51:9d:8e:0c:fd:f6:ea:c3:09:
                    45:63:68:51:32:9d:9c:76:38:97:76:3d:84:87:4f:
                    c9:c4:53:94:b8:24:17:d9:62:7f:d2:96:4b:c0:c0:
                    3c:e7:ed:f0:25:8b:0f:a2:2d:8d:5a:c3:a5:ea:cc:
                    45:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:23:51:FE:A1:2F:E4:C4:6B:CF:7B:1D:9E:91:32:D1:36:E9:D1:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42b271b0-3b56-31da-8af2-3953d996abe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:dc:d8:83:6d:e6:f0:77:63:ef:5e:d0:92:5a:52:6a:c8:57:
         96:60:86:c2:e1:ec:fd:24:d9:b9:c1:27:79:8b:73:fc:31:b5:
         8d:b1:67:1e:e3:25:7e:df:7b:8a:69:ca:1e:53:03:81:ca:50:
         07:2c:b0:56:3e:30:92:56:dd:fc:dc:cb:f4:ea:dd:ae:fb:0f:
         66:8a:61:ab:a2:ca:4f:6b:b7:cd:08:a4:47:1c:41:b1:c0:cf:
         e5:bc:bd:a6:55:0e:71:5a:25:14:b0:03:ab:c8:11:cd:2d:ce:
         3b:b3:77:02:ae:a4:ee:88:14:b6:d7:a7:97:4e:6c:5e:62:0d:
         5a:0d:73:99:53:c9:34:ec:49:d7:f2:3e:b0:1f:9c:00:2c:d4:
         99:c6:39:61:92:2e:de:34:ee:55:57:a9:86:68:be:b8:e6:d1:
         ea:4a:79:24:7e:8d:80:06:b0:13:70:6a:e7:12:7d:4d:45:31:
         1e:5a:7d:c1:88:be:65:9c:66:34:bd:01:6d:f3:98:ee:00:c6:
         68:1c:43:e8:f3:69:37:6c:d1:bb:fe:d1:56:6a:ac:ed:22:73:
         5b:e0:82:b1:d8:54:d7:15:d2:ba:ca:d8:15:1d:a9:b9:ff:fe:
         6a:de:44:f6:99:b4:37:e3:87:f3:63:ce:2c:0a:4e:f6:42:49:
         23:fa:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:52:01 2026 by rpki-client