Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8b7798f-fd60-39b0-9ee5-05990023c7da.roa
File:                     f8b7798f-fd60-39b0-9ee5-05990023c7da.roa (raw, json)
Hash identifier:          uSD9orNUeZmqa+/wFIu5H1mHIWbJmaJ3vpgqPWaMkPQ=
Subject key identifier:   81:A8:9E:BE:3B:52:5C:94:9E:52:06:6D:D6:90:97:2E:D6:0E:01:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E94EA640343856F1454F96C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8b7798f-fd60-39b0-9ee5-05990023c7da.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     397196
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:64:03:43:85:6f:14:54:f9:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=43a815ee-e917-448e-b11e-0b6199faa9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:87:4e:07:68:aa:4f:c6:fa:55:ba:36:9b:8e:
                    44:69:b3:73:e7:3c:59:35:ae:23:b4:8b:51:9f:f7:
                    9e:22:c3:51:1e:3e:15:90:85:e4:dd:b5:0a:06:ed:
                    83:34:d5:c1:ea:7a:37:a4:be:ca:83:8f:92:9b:b5:
                    5c:36:2d:6c:b8:91:c5:da:35:8f:d2:d7:b1:64:8e:
                    a1:f5:64:fd:0f:ee:a5:56:bf:ad:9a:12:7c:8c:af:
                    c2:96:97:ba:92:cb:ee:ba:9c:1b:01:ea:53:78:aa:
                    80:59:e2:b5:e2:5f:9b:e8:2e:f5:fd:1f:8e:1f:f0:
                    2e:8e:55:99:76:fa:dd:22:6f:1d:24:46:54:3b:09:
                    a8:7e:42:23:00:4a:b8:ca:25:4b:63:2a:e4:7a:0c:
                    37:c4:97:d0:50:81:99:5d:1e:1d:40:46:6a:08:70:
                    a7:8b:51:4c:f2:03:3a:3e:6a:0c:76:f6:4d:27:4f:
                    5e:d5:e7:33:40:f4:b1:43:52:58:20:ef:02:3b:3a:
                    7a:c5:0f:6f:0c:c7:6b:c8:c4:a9:23:cb:07:06:80:
                    4c:97:35:fe:ce:1e:e4:ab:3a:ed:7e:59:3b:9f:bd:
                    aa:aa:1e:c7:ec:b8:60:4f:a8:c1:82:9f:67:23:6d:
                    46:b2:f7:a0:e9:d7:13:86:65:f7:ed:2d:c9:d2:b9:
                    1f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A8:9E:BE:3B:52:5C:94:9E:52:06:6D:D6:90:97:2E:D6:0E:01:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f8b7798f-fd60-39b0-9ee5-05990023c7da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:5c:28:27:a4:20:9e:b2:13:9f:96:ad:73:a7:d3:bd:16:10:
         3d:cf:6e:d9:fc:1f:75:5a:66:c3:c1:ac:49:7c:18:d5:cb:3b:
         49:d4:c8:35:8f:92:4f:d0:27:87:68:22:81:8c:b8:d0:20:f2:
         72:76:b6:53:7c:f7:28:9a:1f:c4:dd:77:58:24:18:d6:a8:fc:
         7a:2d:13:70:e0:6d:e5:57:7b:32:d6:9e:99:92:29:5c:c2:72:
         38:11:a3:ac:59:23:a3:bc:d1:c4:ea:03:b8:bb:21:28:ab:8c:
         a2:29:b3:d4:71:0e:39:8b:6a:f6:2c:5b:f2:e6:ef:dd:7c:49:
         2e:81:36:e3:f9:5c:1e:d0:70:96:11:10:cd:5c:8d:bb:75:40:
         24:fc:00:87:f2:14:95:3e:63:04:41:f9:0f:93:3e:ec:33:e9:
         d2:87:bd:df:2f:98:e1:03:ac:57:51:3b:f0:ec:d9:3c:b0:f5:
         d6:09:7a:06:2c:76:09:f7:d5:37:0d:cf:d3:c8:20:d9:21:55:
         fe:1e:78:b2:ab:f6:ba:7c:18:aa:92:70:51:df:36:63:03:3d:
         09:1b:da:69:db:90:72:3a:45:89:52:53:d9:21:26:60:89:ed:
         c8:3d:32:aa:47:d8:a3:91:b9:b5:0d:4d:f4:0a:56:bc:a9:31:
         f7:67:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:06 2026 by rpki-client