Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b4e509-3817-3ae3-bd43-c133943fcdae.roa
File:                     63b4e509-3817-3ae3-bd43-c133943fcdae.roa (raw, json)
Hash identifier:          6aYBo4nZ9jxLc+Oyx3ukz40a5mIQX9Klr7MBfl786zI=
Subject key identifier:   A2:7A:34:1C:3F:79:CC:05:30:95:75:6F:64:40:2A:CF:F8:D3:BD:80
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49869282722E031B8B188A80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b4e509-3817-3ae3-bd43-c133943fcdae.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36622
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:92:82:72:2e:03:1b:8b:18:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ffc5a3d7-ee06-468e-ac61-2ba75b7fa08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c4:e3:80:aa:a7:60:ec:f7:90:03:13:71:6e:
                    b2:fe:86:e9:6f:39:65:c5:69:24:88:b8:dc:06:79:
                    c1:1a:1d:01:b7:3d:00:41:a0:57:b0:12:16:c0:83:
                    b9:b9:5a:85:cd:d4:5f:e6:ed:c8:91:24:76:e3:cb:
                    18:95:8a:f1:82:0c:2d:01:81:94:9f:71:f1:5e:60:
                    3b:b5:ab:f9:c6:f8:32:5c:08:4f:57:8b:39:3c:21:
                    e0:21:a1:2a:31:10:be:77:d1:90:7c:79:ae:26:bc:
                    7d:44:f4:ac:c3:c3:17:20:b7:aa:75:de:1f:25:6c:
                    12:f9:44:9c:37:05:93:d6:7a:71:43:48:ae:36:44:
                    3f:28:4a:9b:32:13:5e:50:90:be:df:50:ec:5d:15:
                    8c:f7:a2:57:6b:58:31:fd:d9:1e:d7:b2:20:bd:92:
                    99:67:22:e6:1e:21:1c:23:e2:e1:80:1f:fc:ed:9e:
                    cd:ce:57:a0:cf:76:56:40:d2:65:8c:9d:1b:42:f7:
                    f6:56:36:52:b3:7d:e4:dd:c8:8e:63:cf:13:c2:35:
                    01:4c:d6:b0:1f:a8:7f:60:06:99:09:f1:8d:60:d7:
                    68:f7:5b:3c:92:52:0e:03:d7:62:f7:01:03:7d:4e:
                    f4:f3:e7:a6:14:9c:ea:d4:42:82:5f:05:fa:87:6f:
                    0a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7A:34:1C:3F:79:CC:05:30:95:75:6F:64:40:2A:CF:F8:D3:BD:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/63b4e509-3817-3ae3-bd43-c133943fcdae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e5:55:76:29:82:d4:5b:b5:5d:a9:a1:44:2d:ff:4c:5d:16:
         a3:d6:05:6c:cb:22:4b:7e:8d:21:04:1f:7f:f1:66:7a:00:91:
         84:01:c5:3f:a6:92:c9:40:6a:09:90:38:9c:42:7a:9a:1e:29:
         4f:12:0e:1e:0c:67:2f:e9:f0:f7:8a:c2:9c:96:29:bf:25:17:
         99:9a:3c:c3:2f:6b:19:79:28:a5:a9:d5:c6:e5:e1:af:22:85:
         19:23:75:42:28:ab:d6:f4:59:44:62:2f:4a:4c:0c:ed:2b:b1:
         5c:ff:82:da:91:59:46:42:64:02:fe:cc:3d:00:e9:c7:3d:96:
         53:f2:6e:2a:b1:26:f5:67:ff:38:c9:fb:4a:25:f5:66:0c:14:
         57:e1:4d:7f:fd:a6:2b:93:ed:c1:bd:b9:da:7c:1d:39:b2:cd:
         3d:71:5d:60:b3:73:77:80:58:89:4f:6d:87:23:78:4c:ad:3b:
         0a:3c:8a:07:e9:9d:96:b7:db:04:d0:34:83:ca:5b:c6:2c:dc:
         37:4d:51:bc:6e:2f:83:b0:d9:a2:38:10:94:5a:47:08:56:fa:
         4c:d9:85:e1:31:33:74:8a:51:22:14:13:2e:77:9e:6e:42:f1:
         f1:ed:67:b7:b2:f5:3a:db:94:b6:b8:28:26:35:5c:bc:5a:e5:
         ca:be:09:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:23:08 2026 by rpki-client