Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4773404-d66c-324d-a1f6-936d262bcb58.roa
File:                     d4773404-d66c-324d-a1f6-936d262bcb58.roa (raw, json)
Hash identifier:          5v+exXNS6ZVqB3cFVaLmvI1qfwXgxJxkY7rKKZ2CPJ0=
Subject key identifier:   BD:85:DB:FD:80:88:31:90:AC:60:08:05:E8:A3:D6:8C:B1:56:0A:D6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FFF9E9DF6746E5C16E380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4773404-d66c-324d-a1f6-936d262bcb58.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396549
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:ff:9e:9d:f6:74:6e:5c:16:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=ab1227d5-4adb-4120-a05a-be7b50960cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:4e:7f:23:fe:9a:aa:77:bc:8c:41:02:9b:
                    34:74:7c:b1:9b:02:8d:3a:4e:19:9b:c1:c4:ef:b4:
                    2a:9b:4a:1b:4b:22:8e:b0:27:4c:a1:5f:da:e4:df:
                    58:3d:6c:e5:a3:b9:d3:15:28:f2:5f:23:b1:93:b9:
                    d4:83:c0:47:db:2c:61:85:15:39:e6:45:d5:41:65:
                    da:50:e8:b4:25:38:bd:26:20:db:8a:f0:59:14:bb:
                    27:31:5e:18:3c:93:9c:7d:86:6f:f9:c5:0c:9a:0f:
                    60:4d:ff:fa:11:44:19:b4:f1:de:08:42:37:7d:20:
                    6c:6a:7f:29:c9:1a:b6:1b:17:75:d6:1c:d3:40:82:
                    d3:95:fe:d9:04:e4:17:8e:e4:d7:62:b2:91:df:31:
                    b3:4c:d1:c7:8f:f4:2d:1e:fc:20:ff:54:9d:73:ce:
                    75:e1:14:b5:21:8d:f2:0a:12:93:b0:e3:4b:0f:d6:
                    c5:f4:4d:74:09:d2:58:d4:93:ff:7d:e1:52:fd:f2:
                    fc:74:76:52:2f:1b:cd:4b:4d:5e:67:e4:78:26:ca:
                    2f:79:31:78:57:a2:ea:37:d4:7a:f1:ca:5f:bb:dc:
                    3c:c5:03:d6:57:e4:d8:77:d0:08:30:61:de:66:d5:
                    87:36:5b:dc:56:db:62:d4:02:99:24:64:e5:e9:43:
                    7d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:85:DB:FD:80:88:31:90:AC:60:08:05:E8:A3:D6:8C:B1:56:0A:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d4773404-d66c-324d-a1f6-936d262bcb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:cd:ed:c5:2b:9c:53:e8:51:89:d2:88:21:73:0b:27:e7:0a:
         ae:e0:6d:41:9d:57:8c:97:76:85:43:5d:c6:5d:b8:33:91:98:
         1a:55:97:50:31:3c:59:a6:3b:52:db:00:60:78:97:04:b8:33:
         85:00:7c:d5:7a:51:df:a0:59:ae:95:3f:c3:ca:a7:ca:3b:f9:
         04:c1:78:2d:8d:b8:df:fb:14:ee:6d:77:97:cc:1f:5e:06:54:
         c4:43:33:d7:25:0c:9d:9c:09:7c:9e:f3:de:00:88:83:68:d5:
         b1:6f:f3:34:6c:e9:0d:70:b3:73:be:80:a3:38:ad:e7:cf:da:
         10:44:08:26:50:ff:72:ef:c2:1e:4e:fe:7f:87:b9:76:30:02:
         3d:9a:ec:f7:88:21:cb:08:57:c6:18:49:66:49:b0:e4:5e:1a:
         ab:2d:81:3c:b5:3b:e4:9b:1b:59:2e:1b:54:3e:20:e3:63:3a:
         a7:94:16:42:2b:51:d9:31:4f:2c:e0:61:bb:82:16:7d:69:2d:
         ed:5f:ea:59:91:77:5d:68:b9:5f:93:53:30:a2:05:21:88:bb:
         87:55:ce:2e:a3:0a:a8:9d:0c:b8:e1:81:38:d2:53:aa:88:12:
         12:91:f2:b4:4e:81:e3:d4:26:d4:06:c1:9b:dc:3c:f2:9d:53:
         f8:0a:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:38:51 2026 by rpki-client