Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70f96d45-45c7-309a-a6a5-92479713fab0.roa
File:                     70f96d45-45c7-309a-a6a5-92479713fab0.roa (raw, json)
Hash identifier:          ofnK254n8G/anUIFdfWr7iYamZwwYA+R6dSwTuS1o88=
Subject key identifier:   E3:F6:12:E5:24:D0:FD:8D:A5:0B:8F:0A:0B:A1:B3:92:74:F7:4D:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E7FFA4EC51752FBDCB575CA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70f96d45-45c7-309a-a6a5-92479713fab0.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     396591
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:4e:c5:17:52:fb:dc:b5:75:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=b4025f05-82c3-4d77-add1-ff8cf5180dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:a6:7a:da:88:30:9f:46:3e:93:d6:43:bc:f4:
                    76:e4:c1:5b:28:0d:be:bc:e2:07:57:2e:54:4c:1c:
                    97:83:a3:03:69:9a:8c:2b:72:0a:09:c7:21:20:30:
                    85:b1:c7:55:93:8b:30:ff:4c:c7:a7:37:2c:a1:ee:
                    1b:4b:a1:26:9d:3b:d2:4e:d4:f1:b3:09:db:42:81:
                    6b:ad:8a:85:fa:d9:76:b5:31:f6:37:cf:8b:af:ee:
                    db:ff:db:08:38:42:59:9f:fb:62:1b:88:7b:5f:e3:
                    1d:5d:e1:90:ec:c0:ea:2f:52:40:ce:46:ce:69:51:
                    93:03:7f:34:d8:24:cd:10:63:fd:44:f9:04:56:59:
                    0e:8c:f6:b9:41:65:5d:85:a3:1d:ae:a4:ad:d1:c0:
                    bb:c6:58:0b:bd:52:94:16:18:55:5e:dd:d8:1f:a4:
                    b5:0b:98:23:47:af:32:90:cf:f5:7c:d3:9d:f6:69:
                    a1:25:38:96:77:1a:59:f4:00:0d:9b:e4:0c:c9:f8:
                    8f:cf:e0:4a:76:ee:d4:f7:46:29:62:b1:88:fe:0e:
                    89:00:31:31:dc:3a:ca:c3:a6:68:b1:e5:14:00:c6:
                    7c:5d:a1:6d:ca:3f:4a:b1:37:76:cc:d2:27:b9:7c:
                    53:69:0d:9a:82:63:98:a6:45:e1:ea:57:75:68:36:
                    8a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F6:12:E5:24:D0:FD:8D:A5:0B:8F:0A:0B:A1:B3:92:74:F7:4D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/70f96d45-45c7-309a-a6a5-92479713fab0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:6e:9b:9e:82:dd:38:12:f4:6b:c0:0a:4d:c1:79:3d:5f:f2:
         b7:c4:e5:2a:75:98:fa:b5:80:36:12:28:20:c1:7d:8b:08:46:
         40:5f:e4:b6:26:c9:bd:5d:34:d0:36:18:3b:ec:db:71:15:54:
         f8:ee:0e:af:1c:9e:98:d6:62:29:6f:3d:46:3b:e9:8e:e9:64:
         6a:24:68:e2:55:55:fb:70:15:f2:27:46:3f:84:c5:ab:81:c3:
         52:0e:a3:fa:c5:a7:89:fa:38:55:f0:2d:a3:bd:9d:a6:62:97:
         40:c2:ee:99:02:99:ef:4c:fc:34:e5:17:3d:e3:49:49:fd:81:
         97:05:82:a8:c2:23:f9:c8:da:bf:50:13:37:0a:66:b8:d5:2f:
         84:cc:bf:f7:5f:0a:8f:ba:f4:f2:ca:48:3e:b1:cc:bd:e6:68:
         cb:8b:8a:79:c0:8d:b2:b0:ea:79:53:96:0c:4b:4c:6a:80:b2:
         4a:61:d6:82:df:1a:60:8d:c1:ef:42:d9:52:fe:c2:bf:e5:ef:
         cf:4d:bd:6d:d4:1f:b6:f9:a3:3a:82:8e:13:c1:aa:81:f5:e3:
         b5:eb:94:73:5b:24:ef:3f:80:c2:82:03:d2:53:18:8d:29:80:
         c2:02:ad:bb:1b:f3:7b:75:42:df:71:12:a8:42:70:6d:e0:86:
         65:e8:05:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:41:13 2026 by rpki-client