Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f26c9a40-3be6-335d-971f-a139f77ad44c.roa
File:                     f26c9a40-3be6-335d-971f-a139f77ad44c.roa (raw, json)
Hash identifier:          /x7Gu8vA3RjlG3aSaadVSVPvYwCUZl6oFyaUWUfgFx4=
Subject key identifier:   6E:F6:61:24:A5:60:A1:B4:E3:5A:71:BC:21:06:E7:A6:86:5E:5C:83
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B4E773B43090DCA5ADAAFB648
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f26c9a40-3be6-335d-971f-a139f77ad44c.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     396827
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:3b:43:09:0d:ca:5a:da:af:b6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=d02fa22d-b964-4ff5-9e34-64f2d5b0ee90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:14:55:aa:8c:b9:36:3b:fb:f5:8a:35:29:
                    c4:2b:c7:23:ca:82:84:f5:fa:e3:e8:47:2c:16:6d:
                    94:70:ec:2e:e1:07:bb:85:ad:51:1b:64:ca:38:fe:
                    64:1b:a6:f7:2d:79:3a:a9:6a:79:a2:9c:50:03:1c:
                    63:5e:4f:fb:fd:a9:d9:b3:24:b7:f2:ca:c7:aa:ca:
                    11:3a:67:d5:22:ed:20:a4:32:7d:2d:1a:74:38:ed:
                    89:ac:34:47:ed:b1:ae:b7:a2:df:5d:60:f4:73:4b:
                    6e:67:db:8a:b4:21:79:72:15:89:c0:06:0e:5b:a8:
                    2f:5c:62:7f:d0:42:d7:22:b2:62:09:af:0b:fb:85:
                    03:db:d3:63:f1:8e:36:68:b5:51:81:66:86:5e:8f:
                    89:4e:32:bb:1e:bb:7c:83:ac:d8:6d:74:ee:c0:92:
                    1f:56:1d:17:28:14:cf:ff:a2:77:d1:4c:74:29:32:
                    dd:47:ba:dc:dc:f0:de:3a:53:f5:ac:51:59:90:e5:
                    e9:5f:8b:24:7a:e0:d7:ce:5a:b8:1b:59:fd:05:55:
                    ad:d8:be:aa:90:a2:3a:55:de:c7:71:2f:ef:8f:77:
                    a3:30:85:a9:58:92:5e:d9:12:69:4f:de:2a:24:fb:
                    a3:6a:44:60:44:c1:cb:d9:45:10:26:e4:45:c9:57:
                    a9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F6:61:24:A5:60:A1:B4:E3:5A:71:BC:21:06:E7:A6:86:5E:5C:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f26c9a40-3be6-335d-971f-a139f77ad44c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:9f:a0:85:0a:21:2f:92:0a:d2:95:a9:54:14:16:01:fd:f5:
         9a:11:1c:6c:16:77:93:e1:ff:d0:3b:dc:66:de:e3:93:a6:fb:
         f1:3d:dc:e4:28:e1:22:5a:6b:b9:68:2e:2a:f6:5c:ae:2d:9d:
         78:28:1f:05:55:5f:51:53:e2:03:50:a1:c3:50:af:ac:27:51:
         93:f3:04:5b:28:2c:41:b8:96:96:97:a6:af:1d:f1:68:1b:41:
         c5:46:7a:2b:15:d7:1d:ef:64:af:b3:e5:a5:e8:eb:fd:0e:be:
         57:2c:78:97:2f:68:75:54:65:ab:92:5f:45:2a:29:4b:44:32:
         60:70:ea:87:03:10:1b:36:8b:33:99:32:24:99:37:35:da:0a:
         57:4b:ef:7a:6a:ee:32:3b:e3:ca:a2:9c:a9:9b:2f:ff:b8:67:
         b5:70:e9:a6:b3:a3:ee:c0:6e:e5:d3:56:47:e5:22:63:d6:cb:
         63:e7:ad:b3:0b:d8:15:86:73:34:62:e0:43:0b:7d:d2:ec:92:
         ad:0f:5f:08:61:0d:d7:ff:69:a4:57:a9:e0:12:fe:eb:15:83:
         72:2c:7d:42:37:14:19:4a:14:02:95:b4:16:77:58:44:1e:3e:
         91:d3:78:7c:88:14:e6:a4:22:0a:22:e0:bd:cd:79:9e:3f:ed:
         f6:25:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:41 2025 by rpki-client