Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8b29237-241d-301a-8d5d-cf80d1f95b4c.roa
File:                     d8b29237-241d-301a-8d5d-cf80d1f95b4c.roa (raw, json)
Hash identifier:          g1fzwHQspzqnIEeJLpip/eQNJ8i+SYk2U5ATLvIcr+E=
Subject key identifier:   9B:CE:BB:C1:E8:BE:F8:8C:50:3E:31:92:DF:7B:ED:3A:98:32:2B:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E6DD4D4864122C91D8B40EF40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8b29237-241d-301a-8d5d-cf80d1f95b4c.roa
Signing time:             Wed 08 Jul 2026 09:00:12 +0000
ROA not before:           Wed 08 Jul 2026 09:00:12 +0000
ROA not after:            Tue 06 Oct 2026 09:00:12 +0000
asID:                     10515
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6d:d4:d4:86:41:22:c9:1d:8b:40:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul  8 09:00:12 2026 GMT
            Not After : Oct  6 09:00:12 2026 GMT
        Subject: CN=5461c231-468b-4a98-abce-6061d04bd336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:95:01:62:89:00:b4:05:ae:c4:1d:00:a9:ae:
                    6f:c1:9f:5a:45:3f:a5:eb:c8:14:92:29:bd:31:4f:
                    fd:35:90:27:79:e6:48:fd:fb:d6:06:bb:4f:4d:31:
                    71:e3:58:86:c9:cb:99:a3:9e:7e:3f:e8:96:27:be:
                    89:88:af:d1:3e:b8:aa:91:54:1a:b7:54:7f:e2:b6:
                    49:6a:71:34:c0:a6:3d:95:f8:81:ef:cf:db:1a:0d:
                    78:91:07:c6:b7:03:ca:bb:da:10:49:4b:14:ec:7e:
                    45:8a:2d:6a:4e:e2:8b:ae:6c:37:a7:40:2d:e7:a6:
                    03:1d:90:1c:a9:0b:11:e2:9a:cc:bd:7d:f5:6d:6a:
                    bb:4b:75:23:f3:76:99:ab:5c:80:76:c2:50:d0:6e:
                    d8:3e:93:88:71:88:13:c3:d1:af:1f:a0:76:17:af:
                    b2:59:15:a1:f0:02:c3:22:ec:2a:b9:dd:af:c0:91:
                    97:e3:0d:71:29:67:07:3e:13:42:22:68:10:f4:40:
                    4e:25:c0:89:0b:a2:1b:d3:6c:d2:3c:0d:51:05:50:
                    e1:8b:e3:42:78:5d:aa:32:e5:27:3a:f3:4c:4d:bc:
                    50:6a:59:36:95:67:f3:51:f2:c0:7d:2d:91:bf:98:
                    cb:ab:14:47:ce:7e:7c:31:39:a5:dc:02:9a:4b:5e:
                    5c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CE:BB:C1:E8:BE:F8:8C:50:3E:31:92:DF:7B:ED:3A:98:32:2B:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d8b29237-241d-301a-8d5d-cf80d1f95b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:89:99:33:a6:14:30:fc:49:81:e7:9e:da:52:b4:81:c3:6b:
         a1:6a:1e:eb:24:22:c1:6c:84:38:0a:c4:a2:a8:12:cd:fd:ef:
         42:6e:3e:48:4a:55:39:92:06:51:6c:90:a3:c6:68:f8:f8:9c:
         1e:b8:97:ff:bb:a5:0d:ce:de:02:25:0f:c9:36:9b:b1:44:03:
         5c:b5:fb:51:39:41:fb:61:2b:28:56:b6:90:7a:b2:56:7e:97:
         aa:16:18:01:df:94:cf:8d:d9:fe:a0:40:6b:02:72:13:4a:f0:
         ab:a6:29:02:5e:c2:74:5f:6b:60:35:e5:67:5f:94:46:bc:01:
         cf:80:4c:d0:65:27:ff:d1:63:d3:2e:fc:de:90:ea:fa:e8:11:
         f6:e8:eb:c8:1c:15:d1:bd:3f:46:56:67:1e:65:ac:36:9d:53:
         3e:c7:ee:3e:25:80:ca:59:26:ae:ab:2a:98:ff:c1:5f:d3:c9:
         09:02:d5:90:2c:b8:13:5f:6a:fa:75:db:28:e3:74:4f:a5:39:
         d2:64:49:fc:7e:80:79:40:fe:51:9a:a2:3f:b7:d4:17:44:06:
         da:39:a7:33:9b:3c:2a:7a:d5:c1:e2:61:97:7e:3d:10:31:b4:
         9d:2f:de:c2:64:a5:0e:0d:62:43:47:d6:02:3c:0d:36:15:9a:
         2c:9a:8e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:36:06 2026 by rpki-client