Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb99d8c8-cfc1-3493-b64c-9b2058ec5b32.roa
File:                     bb99d8c8-cfc1-3493-b64c-9b2058ec5b32.roa (raw, json)
Hash identifier:          vp5QLfcrHy6MQDfjla5UQeI7p2p4s3fd8oMXclCO9P0=
Subject key identifier:   4C:D3:65:CE:41:B6:C2:A5:73:A9:4D:6B:63:6D:05:27:E5:09:CE:EC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8EF9707FD42940FB19E4B840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb99d8c8-cfc1-3493-b64c-9b2058ec5b32.roa
Signing time:             Sun 19 Apr 2026 13:00:31 +0000
ROA not before:           Sun 19 Apr 2026 13:00:31 +0000
ROA not after:            Sat 18 Jul 2026 13:00:31 +0000
asID:                     396604
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8e:f9:70:7f:d4:29:40:fb:19:e4:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 13:00:31 2026 GMT
            Not After : Jul 18 13:00:31 2026 GMT
        Subject: CN=042fe4dd-e0d4-49a1-a4c1-2cb19a88cc19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4c:a7:a2:88:6b:ff:5a:4d:89:9b:fe:56:a0:
                    05:ea:be:dc:37:23:eb:6e:18:cb:4f:48:5f:94:c5:
                    e5:57:b4:d7:2b:e0:b5:89:aa:e6:52:5e:6a:d4:10:
                    01:7c:bf:17:b3:8e:f7:cd:19:a7:00:93:3d:1f:7b:
                    31:ec:2a:55:a3:37:da:c8:76:64:e3:b2:50:f1:ca:
                    e2:4f:59:af:e6:7f:d0:2d:51:c5:cd:72:37:e6:fa:
                    ca:65:ff:c1:aa:30:ae:53:ee:7d:7d:0e:10:fa:56:
                    f2:68:f8:3a:b4:19:cc:ef:1b:58:0d:9b:37:7b:d5:
                    0e:0d:62:a8:28:af:7c:b1:e5:3b:eb:d6:5a:ba:5f:
                    e0:7d:fa:8b:d9:a0:ff:c7:a1:b8:0a:e5:81:f0:a3:
                    93:1d:25:e7:fd:a0:6b:1c:33:7e:77:b8:f9:78:e0:
                    4a:f0:92:8c:d9:b4:75:d5:39:a1:22:7d:58:98:42:
                    10:0b:f4:b0:70:f8:0f:28:83:34:ce:2f:24:57:2b:
                    d3:cf:63:18:05:b4:09:0b:c4:22:59:28:08:8b:20:
                    f6:2d:c5:97:9c:4d:6d:69:5c:0e:9d:de:08:91:a4:
                    f9:8c:75:46:b8:3d:5e:ca:02:08:e5:88:9e:b0:db:
                    a0:d9:68:02:1f:6e:91:e8:22:3d:f3:c7:00:bb:be:
                    38:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:D3:65:CE:41:B6:C2:A5:73:A9:4D:6B:63:6D:05:27:E5:09:CE:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb99d8c8-cfc1-3493-b64c-9b2058ec5b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:b8:be:db:6f:64:41:6c:a1:d9:04:84:21:f9:46:37:72:45:
         be:02:0c:0a:dc:47:e6:62:9f:e3:f8:b4:0a:a7:c8:3b:97:dd:
         71:05:12:f3:23:fc:24:9b:0b:f2:ac:f9:68:3d:8e:5d:cc:cb:
         8b:48:8c:44:bd:bf:96:4f:14:77:a9:6c:f9:c2:a3:a5:9d:9f:
         37:d3:30:36:5a:3b:0e:11:f1:61:98:54:21:73:eb:19:39:1f:
         62:26:b4:4e:a6:40:68:66:bb:8b:d0:ee:42:50:aa:6b:60:1b:
         6e:ed:ac:a4:ac:31:c2:be:e6:82:cd:c8:f7:6c:9b:de:dc:8f:
         80:84:7e:64:1c:45:5f:ee:e3:94:54:b8:a2:5c:3d:4f:89:ea:
         39:96:80:5a:81:25:a7:84:5a:1f:0b:1e:6c:c8:99:cc:ef:bd:
         8d:55:03:17:f2:cb:73:dc:e7:c1:c8:9a:aa:89:0a:34:3c:6b:
         78:0d:07:cb:f5:fd:68:26:b9:c0:3f:fc:f6:72:2c:09:f4:32:
         26:8b:74:47:6f:31:86:ee:8c:7d:00:7b:cb:c8:6e:d5:73:66:
         91:0d:b9:da:ad:de:18:42:da:9f:50:dd:a1:e4:ef:de:60:8f:
         bf:ae:64:e0:a4:97:7f:b5:b0:79:c9:42:54:53:0f:b3:04:f1:
         22:8d:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:55 2026 by rpki-client