Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/993480ce-5ab6-36a2-a184-46816ac1d951.roa
File:                     993480ce-5ab6-36a2-a184-46816ac1d951.roa (raw, json)
Hash identifier:          uPVFAYSYDzvr4j1bNUsbYXNuSTxGENp+4fLQmE6UhMs=
Subject key identifier:   EE:D4:DA:58:F9:B6:E0:99:CD:B3:D9:0F:A7:D6:D0:A0:EF:58:1F:A6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F49D0A6B61838B4C75A00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/993480ce-5ab6-36a2-a184-46816ac1d951.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396591
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:49:d0:a6:b6:18:38:b4:c7:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=69f145b4-ed33-41b1-a8cf-87796d23b30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:a7:e9:22:29:51:65:e5:72:3a:78:cf:e7:
                    c2:f3:25:ce:53:e1:3e:72:f7:e4:57:0f:3d:5b:16:
                    72:1d:fa:4f:4b:51:2e:b7:85:5f:69:7f:b1:85:8e:
                    c0:f3:c1:8e:55:d5:81:d9:67:57:e6:b4:b3:3c:0b:
                    59:85:83:d0:c0:8d:0d:43:2b:6c:eb:d9:ca:c7:e1:
                    0e:6d:a6:72:f5:d7:f0:fc:e4:8f:57:1e:04:bd:32:
                    5a:8d:0e:6b:60:7b:bc:51:9c:c9:b6:e0:7b:b4:fd:
                    5a:5d:7a:cd:f4:34:03:f8:cb:44:2d:2c:df:9c:10:
                    73:43:be:b8:ce:f2:8f:23:b2:f3:22:da:72:0b:1a:
                    d6:63:99:5a:e2:7f:4d:87:f2:28:e8:b8:0e:14:46:
                    c6:33:5d:54:d9:58:a8:9e:c5:b9:d6:11:70:17:e2:
                    b7:a4:9b:ad:0d:20:a0:93:df:1c:f2:0d:b4:78:6e:
                    cf:14:f9:d3:99:0b:df:bf:a4:35:37:3c:1e:4b:a3:
                    d7:01:64:0c:d9:85:30:59:b6:ce:3e:73:d8:6b:39:
                    51:fb:7b:86:6f:a7:34:2b:f4:b4:50:bf:5e:2d:f9:
                    87:95:40:28:2f:c5:84:de:46:cf:0d:db:19:c7:3a:
                    63:13:aa:08:21:4b:1b:92:fd:51:58:7a:73:47:fc:
                    4e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D4:DA:58:F9:B6:E0:99:CD:B3:D9:0F:A7:D6:D0:A0:EF:58:1F:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/993480ce-5ab6-36a2-a184-46816ac1d951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:1b:38:14:1a:96:3d:97:cd:ee:8f:4f:fb:8f:48:64:35:5e:
         3f:2a:58:ce:00:67:27:f2:b4:37:8d:59:11:bb:18:5c:20:3b:
         b7:56:89:b6:25:45:06:e2:d6:87:20:77:2d:6b:a2:64:9f:1d:
         52:b2:08:80:62:4b:22:c5:61:32:0b:f8:54:70:2f:24:35:74:
         95:57:5a:99:56:85:5d:09:e1:6e:e3:cf:76:ec:0a:58:f9:79:
         a3:5b:3b:cc:2c:af:18:fe:90:92:95:af:36:af:93:bf:0c:d1:
         48:b6:26:8f:80:84:a3:dc:4b:81:8c:4a:fe:77:04:23:1e:54:
         52:72:39:3f:7f:be:22:e2:24:75:42:a3:ad:56:83:58:63:29:
         15:14:9c:52:7a:69:96:4c:ae:29:f3:7d:21:a0:31:36:ad:66:
         dd:47:b8:36:1d:af:cc:43:23:d8:9f:17:6a:17:6b:90:df:a4:
         7d:4d:25:9a:af:0d:26:29:cf:5d:51:58:46:14:dc:67:d7:b7:
         49:cb:18:3e:9a:f1:b7:cc:3f:91:2b:c0:b8:a4:c9:ed:df:48:
         06:7a:ff:4b:61:0c:cd:96:d6:d0:b7:d1:38:46:64:4b:a9:3d:
         3a:54:0a:4e:67:86:56:d7:f7:73:4a:33:ce:b3:21:71:2a:85:
         3c:b2:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 14:47:07 2026 by rpki-client