Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e44203ea-708f-36e6-81b2-8fdd19fb85e7.roa
File:                     e44203ea-708f-36e6-81b2-8fdd19fb85e7.roa (raw, json)
Hash identifier:          RD/l84/StnXMoWFTbxCqJ2LmXiR5J7drhbGseuJEEY8=
Subject key identifier:   DE:07:E9:05:72:94:2E:55:61:4E:1E:37:98:A6:37:47:FE:C0:7D:3A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA63A58446B8CB0DA7DC80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e44203ea-708f-36e6-81b2-8fdd19fb85e7.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     396572
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:63:a5:84:46:b8:cb:0d:a7:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=90d31020-4701-49d0-9613-813ec19b3c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0b:d9:4e:14:26:30:a4:cf:64:5c:09:c6:2c:
                    cb:18:9b:d9:15:74:d3:28:a6:7b:0c:e3:2e:a5:3d:
                    8a:a4:bf:12:3b:8f:c8:da:de:d4:1b:43:82:f7:24:
                    82:b0:e7:2d:e7:e9:0c:98:14:6a:c6:ae:81:ef:bd:
                    3e:c4:2f:f3:ee:43:7b:47:9f:b3:a4:a0:3b:cf:0c:
                    fc:d0:77:5b:d7:a5:ea:6b:ec:c7:35:3b:5d:6c:22:
                    bb:cb:f9:8d:98:a9:38:be:2e:e8:ff:38:ab:a0:87:
                    8a:2b:2a:a9:33:90:4f:11:25:0e:4c:49:27:79:d7:
                    21:2a:05:79:2c:ab:41:02:1a:fb:cc:a0:7a:9e:f9:
                    cf:13:d5:13:53:48:4e:cf:21:87:c2:51:c0:e5:fe:
                    69:3d:72:da:61:2e:33:ad:6b:0f:9f:11:a2:07:c8:
                    f5:11:59:ef:25:cd:00:28:c0:cb:6b:54:1a:54:95:
                    90:98:06:2e:8c:2b:ad:3e:a0:52:ee:47:c5:67:9d:
                    3e:02:04:00:26:3e:36:e4:c9:c6:42:af:69:83:ad:
                    53:ec:2c:a1:97:d5:5c:a2:d0:5f:ee:b6:b5:44:1b:
                    52:43:28:c0:b1:4d:d1:17:91:7e:16:52:7f:ab:de:
                    6c:e9:be:2e:96:fb:f2:81:95:28:dc:71:93:fa:06:
                    2c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:07:E9:05:72:94:2E:55:61:4E:1E:37:98:A6:37:47:FE:C0:7D:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e44203ea-708f-36e6-81b2-8fdd19fb85e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5e:e9:d1:f0:f7:48:aa:5c:6d:e6:09:df:66:f4:15:a8:21:
         e1:27:01:e4:2c:59:26:ca:27:b1:45:a3:8d:79:7f:8f:c5:0e:
         fe:52:0c:6d:dc:48:63:bf:8a:d2:6e:d5:1f:46:bf:08:7c:aa:
         47:86:05:a6:53:cf:82:5e:45:1a:26:c2:07:dc:3c:6a:a1:a3:
         93:51:6b:d8:eb:db:69:f8:75:33:0f:22:d1:13:1f:fa:b2:9d:
         d2:5a:eb:a2:62:bc:a0:cf:1c:38:a1:f2:a5:c3:5e:ff:a6:79:
         28:62:db:ea:ac:32:63:ef:0d:63:f8:92:ca:07:0c:10:8f:99:
         cc:3f:dc:57:22:ce:e0:4c:35:b4:8f:6a:91:f7:f2:39:55:46:
         3d:45:42:60:33:2c:ab:7a:52:5b:93:f3:11:20:c3:56:34:9e:
         24:da:3a:48:b2:48:0b:10:ed:16:0e:bd:41:a6:7b:fa:d3:4a:
         f8:a8:db:69:63:4b:2d:d0:95:b2:a7:ee:bb:d8:69:4f:72:35:
         fc:95:1a:64:26:e2:96:e1:ff:c7:1a:e9:5e:d3:c9:87:cf:a4:
         6a:a5:f4:41:e3:ed:47:1b:ca:0d:51:ee:a2:a4:ad:d2:7c:12:
         73:fe:8e:a3:7f:e7:af:f1:23:19:8d:aa:12:f7:15:fd:a5:eb:
         89:f9:48:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:56 2026 by rpki-client