Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c7f896b-6428-3685-8d4c-2433dbf42248.roa
File:                     6c7f896b-6428-3685-8d4c-2433dbf42248.roa (raw, json)
Hash identifier:          r2Si9vgNE6XhyZHqkMpFv5ubSWZkixRCz6SZ+4UTwQg=
Subject key identifier:   34:1A:87:02:38:71:E5:9A:66:6C:48:07:8E:FD:3C:AD:57:D5:5A:BD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06728F74F41DA894F5B108C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c7f896b-6428-3685-8d4c-2433dbf42248.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     40717
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:8f:74:f4:1d:a8:94:f5:b1:08:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=095de8be-4cde-427d-b6d6-b78132e3445f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:fe:1e:6f:26:16:a8:30:ad:62:7f:a6:69:7e:
                    3e:0d:33:c4:a0:38:82:19:c9:f4:71:bd:de:6a:85:
                    31:27:fc:4f:07:72:12:ee:7f:61:c2:2a:96:80:69:
                    64:e2:16:c1:2b:c0:ea:0f:e5:84:26:12:49:3c:00:
                    c7:f8:1e:31:49:84:4e:7c:92:cf:57:f0:fe:d2:2e:
                    92:26:07:e1:00:31:d9:ee:81:a7:db:e7:52:be:f1:
                    7d:f0:81:91:cc:32:84:8f:04:b2:bc:2a:3f:c0:f7:
                    00:fc:9e:92:f6:d6:bb:3e:14:3b:fe:4f:db:6d:2a:
                    6e:66:22:6e:81:c7:71:8a:ef:be:4c:8e:8f:f6:bd:
                    71:8f:e5:9f:8a:50:65:d5:12:35:bf:fa:de:48:f0:
                    9f:00:89:94:6c:67:e7:f6:1e:84:57:ae:54:c6:c2:
                    84:b0:5c:61:6a:ed:d1:62:2a:38:e8:ee:9f:bc:03:
                    03:8e:67:51:9e:eb:f7:4f:8c:eb:25:a8:e1:a8:79:
                    bf:b9:d6:0a:cf:a9:18:c0:b8:8d:e7:4d:28:c7:65:
                    ec:09:83:31:02:ea:a4:a0:84:81:bf:97:e3:05:a3:
                    b8:40:f1:5c:7d:23:00:b5:e7:8a:9c:d5:68:85:0c:
                    35:56:f0:d5:1c:ec:52:7a:df:65:d9:76:d8:1d:bc:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1A:87:02:38:71:E5:9A:66:6C:48:07:8E:FD:3C:AD:57:D5:5A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6c7f896b-6428-3685-8d4c-2433dbf42248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:36:25:d5:67:0d:e6:f5:dd:68:ec:a1:e0:9c:77:b7:40:f2:
         b7:ca:fe:59:36:6a:b8:13:7f:2e:c4:8b:3b:a8:fc:43:37:a1:
         7c:14:11:d4:e7:a1:61:63:96:8a:75:06:fe:d5:79:22:a4:ae:
         45:a1:52:9a:75:52:59:59:44:48:21:ac:f5:cc:3d:d8:41:b9:
         c9:44:56:d5:97:8e:1d:88:74:f3:e4:93:11:2f:af:50:d8:39:
         3e:4d:68:ae:0e:eb:88:39:44:15:1c:1d:a1:5a:e0:3e:7c:33:
         ec:1c:6e:8c:d6:fe:f8:7c:1c:db:6e:ae:65:4a:24:ae:69:1f:
         65:b2:88:17:bd:54:85:44:ab:24:4e:8b:86:ce:08:38:c1:a6:
         1e:94:b7:f3:88:63:85:b1:ac:96:22:40:27:6a:88:2a:d0:c8:
         11:2b:c5:3d:14:e6:7a:46:66:2a:2e:74:22:2f:4e:c2:46:16:
         0f:a9:d9:c3:2b:58:eb:42:7d:20:b7:ef:16:c9:2f:1e:54:59:
         f3:d9:02:a3:35:65:da:9f:f6:0f:40:a6:74:5d:79:9c:9d:ac:
         52:9f:27:b4:be:1b:76:fb:25:8c:02:7e:06:dc:37:62:e4:94:
         d8:1c:ed:0d:7a:71:61:4d:f4:33:93:83:fd:63:34:75:16:eb:
         31:63:43:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:35:40 2026 by rpki-client