Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c67fc202-2c8b-3df5-8f99-8af76c0f4061.roa
File:                     c67fc202-2c8b-3df5-8f99-8af76c0f4061.roa (raw, json)
Hash identifier:          Q3Pi0UfSS7NkgLBSZK/Bk13e3zun/BklLMx/pRNbOnQ=
Subject key identifier:   69:3E:55:9B:35:2A:50:2D:EF:20:E0:BE:72:62:76:8C:C5:65:53:E8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497424BDCFAAC5B88DF9DB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c67fc202-2c8b-3df5-8f99-8af76c0f4061.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396583
IP address blocks:        192.26.92.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:24:bd:cf:aa:c5:b8:8d:f9:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e6a919c2-cfbd-4f34-8446-2a6312191428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:89:bf:26:e1:52:88:e6:65:31:24:37:63:1a:
                    3a:bd:b3:55:02:ae:3e:12:2d:38:5d:75:f8:fb:97:
                    1e:60:86:e1:ae:a7:38:99:95:07:03:54:54:a0:25:
                    bb:47:bf:d4:57:8c:82:4f:68:4c:9c:32:a2:e5:65:
                    9b:64:fa:ea:f3:92:7f:e5:50:6d:e2:a1:3b:f9:37:
                    e7:e2:a3:13:09:cc:0b:e8:3e:de:2e:56:1f:a3:66:
                    35:32:7f:4d:cf:6a:8f:49:ae:4c:34:a0:0d:28:5d:
                    18:90:fb:a1:65:b0:91:26:d6:ae:03:ac:cb:07:c8:
                    11:87:f7:06:1d:da:d8:5e:a0:a4:22:0a:ae:93:33:
                    3f:1c:8e:40:de:11:ed:5d:6f:ab:ae:bc:7b:e0:1d:
                    c7:bf:f4:af:2d:d4:d5:ad:ca:f6:82:25:86:97:0d:
                    05:2c:ad:6c:86:bd:7f:a7:21:db:4c:c5:98:fc:56:
                    8b:78:35:2c:2e:e8:2c:b3:a2:7f:41:7d:09:ee:2b:
                    f1:eb:bf:03:38:19:e5:a4:90:c8:40:23:95:ab:bb:
                    bb:23:3f:e8:34:25:f9:55:47:cf:95:08:48:6b:a8:
                    de:c6:2d:4d:00:89:59:00:d9:1a:da:b4:82:43:fc:
                    28:f1:01:88:76:f8:00:50:21:1f:5e:cd:6b:a9:f4:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3E:55:9B:35:2A:50:2D:EF:20:E0:BE:72:62:76:8C:C5:65:53:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c67fc202-2c8b-3df5-8f99-8af76c0f4061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:fb:18:60:2c:ee:e4:83:c3:9b:14:84:3c:ff:fd:8b:90:22:
         db:6c:82:ea:a6:9a:1b:6b:39:da:7c:14:ff:63:e3:51:64:1d:
         79:2f:1b:3b:44:99:78:06:6d:42:97:99:df:14:93:96:80:91:
         7a:49:c4:80:50:8e:4d:c9:6b:34:a0:9c:a4:2c:fa:75:98:5a:
         46:90:7c:98:72:ea:df:57:c1:b1:11:3f:f1:d8:c0:0e:00:c2:
         01:f8:65:f9:60:c9:61:71:d0:af:21:c8:83:f6:e1:09:2c:2b:
         94:41:5c:c6:f4:f5:4c:f9:4e:10:f9:dd:93:01:de:ab:22:f0:
         16:b6:bf:10:4f:bd:5a:88:f7:8a:54:84:29:ad:40:ce:1f:0f:
         44:5f:24:1b:ef:d7:f5:ba:22:e9:84:d2:0b:66:b0:14:e7:54:
         c5:4d:ad:c5:9d:45:5b:e1:c5:55:1f:74:21:6f:8c:06:4e:f4:
         45:08:0b:23:6c:b1:ef:96:ba:1a:4a:5b:22:a2:e7:fc:9b:3b:
         43:82:7d:86:ee:fb:58:27:71:77:ea:a7:13:90:db:5d:98:db:
         96:cd:7e:e7:51:a7:d0:99:49:6d:3b:d3:d5:9f:55:e6:0f:e1:
         1b:70:c4:3b:28:e4:cb:07:e2:17:23:0d:f8:2a:83:b0:f8:c9:
         d9:b7:72:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:00:46 2026 by rpki-client