Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcd87132-9a17-328e-a9d0-bc9308740e64.roa
File:                     bcd87132-9a17-328e-a9d0-bc9308740e64.roa (raw, json)
Hash identifier:          lVQEJzuAAkVNEuFJlC0/W19bnlO+NJcTk8zXGEAsaxs=
Subject key identifier:   3E:ED:16:94:74:C9:50:79:13:92:C0:35:D2:82:E4:00:5E:A5:66:25
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F498720222C659EACD24C3300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcd87132-9a17-328e-a9d0-bc9308740e64.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36627
IP address blocks:        192.26.92.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:20:22:2c:65:9e:ac:d2:4c:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8cd1b17c-6330-44f0-839e-aa83dff4c6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2d:9d:b2:6b:80:59:fb:33:a0:b6:d3:fc:11:
                    00:b7:d1:09:86:b9:ed:04:26:b9:53:e8:cc:36:f8:
                    03:f1:69:77:77:87:8f:18:49:7c:aa:8e:14:af:b4:
                    4e:be:01:14:d9:7f:03:d5:96:36:29:fc:48:7b:df:
                    54:1b:b9:cf:05:d7:b0:b4:59:89:68:8a:51:2d:2b:
                    8e:76:8f:20:70:d6:22:f0:cf:11:de:9f:70:3f:a3:
                    93:1d:f9:9a:a1:a9:0c:a1:52:25:c9:8c:ea:42:de:
                    77:6d:53:b0:52:e4:2d:cd:3a:43:18:2b:71:19:fd:
                    c9:b3:3b:0f:05:17:34:18:25:91:20:40:5c:cb:0c:
                    b7:b8:eb:3f:65:d0:0f:5b:95:19:c0:5c:10:f4:80:
                    54:14:10:67:72:52:8b:f5:6b:49:d9:86:bc:b5:96:
                    bf:e1:93:b0:d2:ea:19:c2:c5:54:c8:83:d2:13:d3:
                    60:54:b6:e5:14:07:57:fd:96:5d:af:75:cd:d0:83:
                    31:1c:6d:ee:71:51:5d:2d:e0:4e:14:87:d0:fc:c3:
                    07:df:38:6e:ff:19:33:46:32:5d:9e:86:69:d5:fa:
                    fd:3c:74:c0:ea:7f:e7:e8:ee:64:ed:95:64:9d:e6:
                    3f:3a:65:cb:e9:fd:a0:52:fa:cf:5b:84:86:fc:53:
                    77:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:ED:16:94:74:C9:50:79:13:92:C0:35:D2:82:E4:00:5E:A5:66:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bcd87132-9a17-328e-a9d0-bc9308740e64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e5:9d:81:d6:aa:d1:26:aa:57:03:40:49:5b:8f:7d:15:7a:
         bc:12:81:24:72:d7:5d:d3:56:14:f6:c3:a6:dc:e1:ba:a5:58:
         57:6a:82:2f:1d:5f:52:37:67:28:41:83:f9:5e:03:f7:68:aa:
         53:73:c8:ab:be:f9:ee:c0:dd:0b:19:8d:1d:72:42:0f:76:91:
         95:77:51:06:41:a6:7c:a2:ef:81:fe:ed:ac:78:35:50:d8:ae:
         ac:f3:7e:a1:1a:2c:ec:94:cb:30:5e:6a:6c:90:46:40:84:b3:
         6a:ec:08:48:5c:9c:52:ff:4d:d7:b5:7b:29:00:ea:25:9e:b6:
         10:46:b7:25:f2:54:76:e9:0d:c3:05:9c:11:a6:dd:62:2d:e0:
         5d:c3:a8:45:2e:ca:8c:97:a4:09:2c:46:75:30:30:7e:88:cd:
         d7:42:79:bd:32:82:8c:60:49:9a:12:db:fd:c9:e4:e5:6b:8f:
         0f:5e:ef:58:18:5d:78:39:bb:92:c1:a8:9a:20:dd:f9:10:ff:
         66:f2:52:2e:8e:2f:cc:82:45:9a:a6:11:01:3a:b1:d0:3e:fd:
         13:e4:ba:47:55:7b:47:6c:ca:32:00:3c:14:bd:34:ac:22:67:
         07:e7:3c:62:f1:64:75:77:df:cf:60:1b:a3:22:55:06:bc:86:
         7f:f8:9b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:28:26 2026 by rpki-client