Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7070ba07-3184-33fd-8671-32aad157d9df.roa
File:                     7070ba07-3184-33fd-8671-32aad157d9df.roa (raw, json)
Hash identifier:          KjZ1HYPF8mxHILslg8LUhFCnXNhXShN/VqM7rcPz7jw=
Subject key identifier:   D0:EE:C1:81:76:A9:D3:ED:BC:E7:EA:C8:98:6A:3E:F0:14:E6:48:12
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E640FA7547198CF20E7B85500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7070ba07-3184-33fd-8671-32aad157d9df.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     396566
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:a7:54:71:98:cf:20:e7:b8:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=ca99b09a-4270-4677-9bdd-1ae9e2a3e281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c5:05:9d:e6:0f:27:73:a5:77:df:60:90:39:
                    6b:f0:b6:e0:7b:3a:85:e9:49:82:9d:44:2a:12:ef:
                    b6:94:a6:6a:5b:37:19:b8:99:e8:09:ce:a7:bd:b5:
                    d0:0a:20:40:57:29:32:e7:10:2d:c5:91:40:e3:8b:
                    a9:bd:f2:63:a6:75:3b:9c:f5:19:27:f7:92:98:90:
                    71:4b:2e:b8:dc:e7:61:ae:ca:42:af:a1:6d:ff:8e:
                    f0:27:ad:47:93:32:e1:f4:98:e8:e5:8c:2c:f6:5a:
                    32:cd:92:77:de:13:89:b8:03:28:cb:d3:bb:da:b4:
                    12:9d:40:78:ac:98:48:71:70:4e:dd:99:69:50:88:
                    6f:e4:88:bf:fd:9d:0a:d4:90:43:e9:98:77:17:59:
                    a9:a9:22:28:e0:c1:6d:b5:01:89:c1:05:88:a5:d9:
                    47:c5:a6:78:2d:37:4f:ae:d7:54:00:c2:17:32:50:
                    76:6b:10:a2:ee:14:b3:98:de:5d:78:9d:ad:7a:e5:
                    47:77:b8:03:d4:82:4a:66:76:59:72:11:51:da:b7:
                    a0:2a:72:7f:62:39:cf:1d:ad:b8:10:1a:6b:e4:94:
                    01:a9:2e:cf:99:b4:83:35:8a:ef:32:5f:f1:8d:e6:
                    9a:35:29:ac:4b:cf:2d:5a:6b:e4:2d:51:93:6d:c7:
                    a0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EE:C1:81:76:A9:D3:ED:BC:E7:EA:C8:98:6A:3E:F0:14:E6:48:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7070ba07-3184-33fd-8671-32aad157d9df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:e7:25:b0:45:df:5d:4d:56:90:bf:90:d0:54:f2:5c:a1:06:
         84:b8:f0:b8:1f:14:8e:eb:8a:c6:0b:33:60:5a:82:86:6e:75:
         30:0c:f6:20:24:4d:ce:6b:7c:7d:b4:7d:71:be:f4:35:d2:13:
         d6:e1:46:85:53:8f:f0:55:f1:b0:9a:b9:24:4b:2b:20:82:6b:
         4e:15:9a:bd:4f:3b:e3:b6:5b:4a:3f:d6:9c:9d:5b:85:4b:1a:
         1d:53:ef:83:92:35:75:ec:9f:2e:17:af:3c:26:bf:af:16:11:
         41:01:ee:f2:c5:77:c5:d2:07:e0:d8:ea:30:5f:67:5e:de:1c:
         d4:fc:e5:fc:96:83:23:39:00:23:d0:00:1b:40:47:bf:30:fa:
         8a:d8:16:0f:44:b2:cb:c4:a9:f3:66:ed:53:25:19:a2:95:f3:
         d9:e1:43:13:06:3f:80:7d:17:99:2c:0f:9c:88:36:c8:4a:d8:
         cf:a2:76:3e:ba:e1:5a:d3:1d:6d:8d:ea:da:48:27:49:6e:33:
         96:c0:9d:53:35:ba:a2:8f:80:7e:de:f4:69:12:8b:a8:b3:46:
         dd:36:da:07:d0:cc:80:21:9c:73:1e:2f:3b:56:6f:ff:0f:69:
         63:44:27:18:1c:59:65:dc:08:cf:6a:a9:7a:6b:2f:36:ae:1a:
         45:6d:9f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:26:50 2026 by rpki-client