Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd2e0cf0-0438-3fd2-88a0-fc2e2715cc43.roa
File:                     dd2e0cf0-0438-3fd2-88a0-fc2e2715cc43.roa (raw, json)
Hash identifier:          UCw5HL6eS9y46jKg1zJNVslVIRby4eqe46TMecYtUP8=
Subject key identifier:   42:5C:8A:A1:BE:10:92:92:CB:8E:E5:97:92:DF:F6:B2:C2:19:38:5A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D8D8FEA82F765C3E858B29800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd2e0cf0-0438-3fd2-88a0-fc2e2715cc43.roa
Signing time:             Sun 19 Apr 2026 01:00:23 +0000
ROA not before:           Sun 19 Apr 2026 01:00:23 +0000
ROA not after:            Sat 18 Jul 2026 01:00:23 +0000
asID:                     396550
IP address blocks:        192.54.112.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8d:8f:ea:82:f7:65:c3:e8:58:b2:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 19 01:00:23 2026 GMT
            Not After : Jul 18 01:00:23 2026 GMT
        Subject: CN=c8d2297e-00d5-4e99-b173-bb8108c76504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:51:6a:fb:f6:c4:c7:5e:7d:f0:8b:8b:da:
                    63:2a:64:c5:43:59:e4:a7:1f:68:4b:27:0e:92:0a:
                    38:d8:72:03:c6:ee:0e:59:19:b5:e7:8b:6e:ca:95:
                    8b:49:ba:16:a6:2b:b3:1e:82:d3:c9:3e:a5:46:e6:
                    84:8d:fd:ed:8e:e5:18:20:b0:2b:9c:45:54:d8:8e:
                    e0:94:5e:4d:b7:b9:8f:7b:26:21:74:79:ea:cb:bc:
                    fb:fd:bf:c0:62:e9:7e:86:c7:ad:33:eb:b5:4e:54:
                    ff:44:7e:17:d1:a2:5c:36:ea:f1:86:7d:d0:61:1e:
                    d3:a0:85:f8:32:c1:2b:0f:bb:c2:93:71:f5:f4:91:
                    17:08:4a:6d:18:5c:38:59:1a:57:0a:6f:a6:32:25:
                    bf:87:d6:85:d1:d0:2e:e4:a8:50:b1:cf:e4:08:dc:
                    76:07:8c:ff:16:f2:a5:a1:dc:1b:b0:ee:92:ff:51:
                    80:00:a9:a8:97:e0:92:74:95:ee:92:03:ae:46:85:
                    c9:27:f1:92:dd:29:33:c8:10:1d:e8:1c:d2:c1:81:
                    68:38:4d:24:9e:ad:07:5e:16:14:86:59:b0:c4:93:
                    36:b2:75:00:3f:87:18:93:54:9f:a3:e0:59:f5:4b:
                    d3:1a:69:dd:ff:c0:8d:fb:30:e4:34:02:38:c6:cc:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5C:8A:A1:BE:10:92:92:CB:8E:E5:97:92:DF:F6:B2:C2:19:38:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd2e0cf0-0438-3fd2-88a0-fc2e2715cc43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.54.112.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:d0:a2:3b:04:e7:9f:c2:05:a2:79:70:32:03:73:5a:cd:c8:
         f6:08:3a:c7:f0:72:de:86:3e:15:6f:86:fa:14:d6:58:8b:b2:
         a5:28:ae:7e:71:59:4d:63:d0:47:ed:fb:00:51:7a:55:d6:e5:
         ab:9c:f0:2b:14:86:aa:c0:29:93:0b:d2:2e:0c:09:d1:da:02:
         69:ec:9d:02:8a:1c:82:95:4a:0e:2c:a1:ea:11:00:9b:a0:1c:
         cb:d4:74:d9:42:88:08:e0:56:6e:7c:8f:77:fc:95:da:01:da:
         c3:cd:20:22:b1:d6:9f:6a:46:87:d3:0b:76:a4:cd:39:00:de:
         d3:73:8e:8c:b3:f2:7a:07:f3:89:19:de:b5:10:e0:ff:04:7e:
         dd:23:70:88:f6:ec:08:5a:3b:5b:85:09:80:24:cc:e6:17:87:
         6a:bd:f7:98:1b:0b:b0:62:32:59:77:da:0e:dd:39:75:7e:c6:
         07:7f:f2:34:01:57:d1:09:4b:19:10:01:b4:6f:91:10:fe:04:
         52:bf:d6:15:9d:3e:da:b7:3d:b2:20:3c:a8:ce:a6:2c:6e:f5:
         82:5b:22:f9:6f:97:3a:fc:b8:74:2f:8a:a4:3e:5a:5b:1e:f8:
         0f:56:7e:70:1e:8a:3d:46:55:cb:b5:48:a2:27:dd:fb:59:12:
         f3:dd:fc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:23 2026 by rpki-client