Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a53dcc-b1d3-34af-a6a7-3ee05af2e7f5.roa
File:                     d6a53dcc-b1d3-34af-a6a7-3ee05af2e7f5.roa (raw, json)
Hash identifier:          IBX/hP1cTPy/V2gwjJ9EarwypK4xf/FxqTSQkY0Z2y8=
Subject key identifier:   BB:B1:4F:FA:94:EF:27:B6:18:3F:17:9A:FD:AF:2A:14:23:E3:14:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E66DA4315E08B8F551D208B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a53dcc-b1d3-34af-a6a7-3ee05af2e7f5.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     396605
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:43:15:e0:8b:8f:55:1d:20:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=4329391e-e418-4723-ac6d-a9ed3671d6bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:27:7f:45:ba:74:d5:a1:e5:e4:ba:84:08:9b:
                    94:c8:30:16:b1:63:a2:ae:96:7a:0d:af:52:d6:fe:
                    de:48:0f:ef:f4:00:e8:97:27:49:f2:44:98:10:a0:
                    ab:bd:b3:db:76:1f:ca:8a:dd:a7:ac:29:1e:48:23:
                    9d:f9:41:83:ab:ee:50:9a:12:81:ea:69:07:ee:24:
                    af:e3:69:63:75:be:c3:91:76:ab:37:29:d9:c5:a5:
                    a0:4f:73:06:d7:63:7b:e6:fd:a8:a2:96:0b:08:28:
                    e1:02:ae:9d:a7:fa:cc:28:ef:61:a5:e3:61:a8:c9:
                    27:52:1a:ed:47:13:d0:f1:2c:e6:1e:f7:7e:f7:b8:
                    08:d6:02:a4:60:8d:e5:63:ca:13:6a:de:3c:5a:8d:
                    7a:1d:c2:ff:ca:4a:2c:c6:f8:60:02:c0:65:97:27:
                    7f:cf:e4:30:e7:c1:a1:7e:2c:8c:79:09:aa:45:6b:
                    92:64:8f:cf:6a:8b:a2:8b:6f:d3:5e:28:76:37:52:
                    6e:7c:9d:77:65:5f:35:67:a6:6e:2a:91:08:b9:b7:
                    bb:ee:f0:aa:51:ae:de:94:2d:6f:96:90:62:e2:13:
                    0b:4c:59:f3:f3:af:c4:52:8d:c7:d3:4b:8d:c2:ce:
                    16:38:21:9f:14:59:5a:cd:7d:b3:7b:fb:92:43:81:
                    49:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B1:4F:FA:94:EF:27:B6:18:3F:17:9A:FD:AF:2A:14:23:E3:14:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d6a53dcc-b1d3-34af-a6a7-3ee05af2e7f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:4a:62:6d:d8:93:9a:42:26:14:ba:65:de:68:2d:53:91:
         d9:01:5d:34:37:ad:2e:58:81:c9:a7:3b:11:8c:c4:97:65:93:
         3a:63:32:db:e5:2f:d2:f1:55:bf:6c:d2:71:c8:02:a7:38:fe:
         a2:fd:ed:23:44:45:24:9f:25:3e:9b:57:2b:63:06:d9:1b:ed:
         53:fc:73:4e:65:1f:06:81:02:f2:e9:e4:dd:48:ca:9f:76:96:
         c5:b1:a6:6e:02:d9:e2:84:b3:8e:d1:ab:8e:ab:8c:b4:ee:cc:
         ff:3f:d2:93:9a:9c:0f:bd:29:85:17:62:90:d4:75:0d:27:f1:
         bb:24:19:ce:54:5e:b0:33:52:1a:ef:86:45:a3:f7:89:6e:ff:
         2c:07:e1:30:8f:5f:92:5d:55:7f:82:09:e2:a5:4d:10:c2:f2:
         01:93:a7:20:25:a7:8c:4a:b9:8f:3b:67:9a:d4:11:f2:b6:2d:
         9d:65:e6:26:f5:39:29:46:c3:a1:9d:4d:4f:75:40:08:a5:9c:
         81:78:28:d8:d7:99:3d:fc:fd:9d:63:05:f6:60:0f:ac:af:a7:
         89:99:c8:fa:95:5d:c2:87:a2:b1:07:e6:b5:17:23:39:d8:69:
         89:e1:f7:f3:11:9f:0b:b7:73:e0:51:2b:d7:06:41:5e:05:6e:
         bb:5c:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:06 2026 by rpki-client