Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e020516a-ac82-335e-a63a-1690097929c8.roa
File:                     e020516a-ac82-335e-a63a-1690097929c8.roa (raw, json)
Hash identifier:          NvTRal/Jkqz48rUpP/qYN/Tk4pMVxShD6ORIeaEf0yA=
Subject key identifier:   B6:19:E6:3D:53:A1:12:D2:B3:8A:4C:46:7E:1F:E8:8D:2C:43:EB:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F480D506FFC7D7EAC94A43D20
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e020516a-ac82-335e-a63a-1690097929c8.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     396616
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:50:6f:fc:7d:7e:ac:94:a4:3d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=cb8cc3db-affd-4da4-ae42-a8249720d315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8f:05:7e:af:df:8f:0c:f8:cf:ff:ba:b8:1c:
                    71:57:74:53:91:ea:ce:39:5e:56:93:fa:14:a6:0a:
                    e7:69:d1:a7:5c:22:78:82:78:5d:12:9e:1e:12:fb:
                    cf:71:2e:de:9c:2f:c9:0a:38:9f:c0:fe:f0:7b:17:
                    08:41:3f:05:9e:f5:8b:fc:34:71:ac:d6:29:97:18:
                    42:76:90:14:e5:4b:24:ee:b1:87:91:3a:8d:62:3c:
                    c9:2b:ff:ac:1a:28:d9:b3:f6:d2:55:18:61:80:8a:
                    92:64:08:03:31:60:c1:bd:37:df:e4:2c:d5:47:3c:
                    d7:1c:2b:cb:2c:45:70:c6:5d:35:a0:b7:44:14:c4:
                    dc:7a:68:eb:f1:d1:75:f2:0b:c9:c5:ea:12:07:21:
                    de:71:76:73:06:ae:bb:f7:0a:bf:b3:ee:54:08:17:
                    7f:82:14:00:99:84:63:8a:47:d7:16:76:78:2c:f4:
                    a8:55:17:d2:6e:74:05:0d:e7:6e:76:36:9a:72:b4:
                    9e:49:7c:46:29:3a:b9:da:c5:a4:f1:94:51:be:ae:
                    38:23:19:c8:b0:26:e6:b2:d7:f0:75:5f:6e:e6:4d:
                    c9:21:9b:27:bf:c6:ff:14:81:09:3e:bc:02:3c:aa:
                    f3:c7:c5:55:ff:5e:98:4f:23:52:f7:ad:24:2f:ed:
                    cd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:19:E6:3D:53:A1:12:D2:B3:8A:4C:46:7E:1F:E8:8D:2C:43:EB:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e020516a-ac82-335e-a63a-1690097929c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:25:c3:6c:d2:14:ab:96:55:49:16:32:1f:7c:01:2b:6f:4d:
         e6:6a:6c:69:01:d5:fa:a8:a8:b6:fa:74:9a:06:a8:05:84:5d:
         5e:da:e3:3a:9c:d6:e9:f7:58:b5:d0:f9:af:e9:0a:ce:44:97:
         bf:fd:58:69:20:fa:f6:e1:f0:b9:30:81:b6:28:ae:1e:53:44:
         bb:64:8a:6f:38:2b:80:d9:a7:47:1a:25:aa:9d:59:a5:f0:3d:
         0c:64:92:b1:ae:0c:00:07:07:4c:25:ef:3a:43:a0:54:7f:fd:
         b4:f0:2a:41:07:21:b0:53:19:61:28:40:3a:21:e0:6e:c2:63:
         ec:5f:4b:b0:21:3b:b3:c8:ab:61:b3:c6:87:65:d5:7e:10:17:
         d5:73:e5:a0:19:1f:b8:d7:79:cd:00:79:52:85:c1:86:fd:e4:
         51:38:8a:04:8c:05:d5:23:2e:71:46:00:18:06:51:95:6b:9e:
         8f:bb:ee:c2:d5:a4:31:6f:23:cb:de:af:6a:d4:e8:3e:af:b2:
         ee:8c:41:11:94:5b:ae:b9:de:fc:53:a9:75:b2:ca:cc:02:f1:
         82:3b:89:9a:02:75:5f:9b:d2:b5:38:b7:16:bb:c1:07:47:db:
         c5:25:d9:69:c2:d0:18:97:9a:06:5b:d9:45:bd:a5:30:4f:cb:
         26:d4:55:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:59:52 2026 by rpki-client