Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6955d9b5-9810-3f6e-a5cc-4cff5a0a3f5f.roa
File:                     6955d9b5-9810-3f6e-a5cc-4cff5a0a3f5f.roa (raw, json)
Hash identifier:          Jz3L4r6LVvCKFTq4nGZD5lR+RwVNONb3FDn8hrZAi1Y=
Subject key identifier:   E7:7B:38:09:7B:DD:07:D1:BC:7A:D0:09:A2:2C:85:15:C8:F5:28:27
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA95997D0966D9B3ACD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6955d9b5-9810-3f6e-a5cc-4cff5a0a3f5f.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396606
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a9:59:97:d0:96:6d:9b:3a:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=ed128fa4-cd5b-4609-9fd1-8b0ad5871a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:ae:da:7b:63:38:cf:b2:e7:8a:14:c9:66:
                    09:a1:c4:75:11:55:16:4c:40:57:30:07:20:36:22:
                    39:6d:a1:fd:c2:82:ed:3d:fc:f1:0a:23:52:66:d7:
                    1e:f0:37:df:17:59:fa:f5:c8:d2:9f:74:79:26:f6:
                    b0:05:52:bd:a0:34:58:93:3e:6e:55:79:2e:8f:75:
                    20:86:58:87:3a:46:b4:fd:d7:6d:65:6e:44:2d:47:
                    c4:f4:4b:34:f1:2f:f7:93:c4:26:85:f0:73:91:98:
                    64:8f:9a:72:1f:87:b8:8b:a7:51:fa:eb:fa:be:dd:
                    34:17:b0:0a:48:88:44:c1:33:23:16:dd:1d:5b:0f:
                    a8:56:63:e6:43:2b:cd:1e:1a:df:f7:40:52:82:2c:
                    d1:8d:be:a3:92:40:33:32:3b:05:54:cc:61:ee:93:
                    be:ac:55:1f:2e:ad:a4:07:bc:91:3f:b1:9a:94:ed:
                    6e:1a:e4:33:5b:80:4f:83:94:20:b5:8a:db:83:58:
                    76:4a:0a:b3:7b:69:43:c4:14:e4:b9:f5:eb:c9:14:
                    1b:b8:c2:cc:84:07:1b:8d:30:6c:84:dc:d4:db:81:
                    60:13:76:76:e7:1e:59:dd:56:e4:f5:fb:e5:57:b4:
                    ad:00:d3:3d:c5:61:48:a7:9f:94:60:53:2c:56:47:
                    6f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7B:38:09:7B:DD:07:D1:BC:7A:D0:09:A2:2C:85:15:C8:F5:28:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6955d9b5-9810-3f6e-a5cc-4cff5a0a3f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:bc:de:23:42:b1:5d:6e:d4:c9:77:cb:48:57:92:83:0e:a3:
         35:9d:7b:3e:fc:14:df:4f:f8:cd:64:74:66:2a:f1:78:98:4a:
         63:27:bc:9b:a0:6a:94:a7:80:fe:6e:82:09:21:81:a5:ad:a3:
         e3:59:71:3b:c7:ce:9f:ca:35:78:b9:4d:95:4f:bb:8b:1d:46:
         55:d6:a6:63:4b:91:5c:54:e9:d2:10:07:7b:0d:27:4e:27:04:
         1d:c3:9d:08:02:78:25:55:97:92:23:ee:9a:88:1e:0c:c3:0b:
         65:0c:d5:4c:25:23:8a:3c:5e:27:c8:d2:ac:22:44:5a:52:55:
         a3:0b:69:ad:74:98:51:a5:d7:bf:88:0f:5b:23:77:f4:e3:22:
         34:35:96:8a:7b:db:97:eb:f5:38:75:2d:5f:37:5d:78:23:8d:
         0b:9b:07:e6:a5:50:9e:9e:09:f5:b4:15:2e:aa:e8:1c:8a:60:
         3f:6b:87:25:0c:47:34:1c:6c:91:9d:7b:7e:9f:91:d9:47:4c:
         98:da:2f:96:b7:d4:eb:fc:cd:41:7f:7d:87:a5:2f:04:43:67:
         76:9f:f2:22:db:56:7b:80:41:ba:a5:1c:c3:a8:24:d2:10:4a:
         f8:29:e8:d6:27:84:15:c3:ea:7c:61:31:7b:a2:a3:1b:47:ff:
         d6:4b:cc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:53:50 2026 by rpki-client