Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cd586f0-dd98-3c8a-83a4-26269cb329d8.roa
File:                     0cd586f0-dd98-3c8a-83a4-26269cb329d8.roa (raw, json)
Hash identifier:          6ctxDj/Q4R2uBjOvwVpqUmfI+xi4h5oVMAtJbx0I3bk=
Subject key identifier:   54:77:BF:0E:6B:AD:8F:94:C7:9D:60:7E:35:5E:6C:53:B9:49:CE:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE41B1795657AB7738A19BA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cd586f0-dd98-3c8a-83a4-26269cb329d8.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     396615
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:17:95:65:7a:b7:73:8a:19:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=70a3f2cb-00e0-474d-97da-fc47c9a1b93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:54:13:ee:03:68:22:5d:01:76:50:ee:4e:
                    41:25:4e:4f:89:16:50:5f:45:20:39:c7:06:e6:39:
                    ee:18:94:5c:f8:fc:cf:79:ec:46:2e:d0:8d:bd:72:
                    3c:80:e6:45:8a:33:68:1f:26:12:89:b7:8b:98:ff:
                    65:f4:f2:80:e2:3c:13:d9:09:b3:4d:ce:c8:b6:b0:
                    11:04:b5:3a:28:63:6b:67:95:e2:73:7a:a7:87:f3:
                    0e:de:9b:9b:f8:a3:a4:ac:b5:25:73:73:c6:c9:c9:
                    7b:23:38:e7:c4:15:55:05:83:21:e5:e1:c8:66:c0:
                    56:1c:5f:8c:6d:91:94:ac:1c:19:8e:bf:58:d7:e0:
                    03:93:95:14:ab:6b:f3:0d:ca:db:f8:95:2b:8c:7f:
                    c0:c0:68:20:94:79:b6:4c:11:19:6e:7d:26:73:72:
                    df:1d:05:62:51:cc:02:fc:35:17:55:42:e4:ad:94:
                    d5:64:1a:eb:26:5f:0b:0c:63:d6:aa:9b:6f:dd:b3:
                    1a:17:84:dc:f4:18:d5:47:1a:9f:00:44:13:a4:37:
                    94:f7:ec:00:35:97:b5:8a:90:d8:7b:d2:7a:51:db:
                    25:90:38:d2:5d:07:16:a5:cf:96:36:f6:06:51:45:
                    f8:6a:e3:1d:de:84:a7:c0:98:9a:a8:a8:9c:52:51:
                    6f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:77:BF:0E:6B:AD:8F:94:C7:9D:60:7E:35:5E:6C:53:B9:49:CE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0cd586f0-dd98-3c8a-83a4-26269cb329d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:fa:ef:aa:c3:74:71:38:52:a1:5d:ed:df:7f:26:6f:f1:7a:
         18:ff:cf:fc:b3:9f:8c:32:5a:21:ba:f6:5e:1e:43:f6:b7:51:
         d6:75:66:8c:2d:52:94:46:c7:0f:b8:74:c5:73:d8:b2:1a:d6:
         bc:bc:b3:4e:8a:c0:7f:07:2d:71:57:a9:69:45:2f:e4:0e:5f:
         66:d9:b2:bd:39:95:58:b6:3d:c8:08:74:d7:3d:bc:59:58:1d:
         2e:6c:c8:49:f8:45:26:a8:7c:ae:8e:11:8c:a0:94:97:ff:5b:
         e0:6f:21:4a:be:23:69:71:c3:1d:ae:f4:e2:68:7c:88:bc:1e:
         91:ea:27:fc:54:12:b1:0c:28:06:48:be:96:8c:35:fc:4b:ee:
         d1:0a:3b:4d:4f:94:b9:06:f9:ed:38:89:42:aa:1d:44:52:d1:
         b2:db:30:9c:84:64:31:37:b0:57:81:78:7b:92:90:f2:d2:df:
         82:01:38:ee:b0:b7:b7:a0:17:30:e6:21:63:1f:f0:0e:99:96:
         1d:44:5f:1e:fa:08:dc:c2:3a:4c:d5:a7:27:da:76:4d:04:3e:
         cd:17:0b:1f:40:f2:0c:a4:1f:85:3e:b6:be:a0:53:a0:f7:c8:
         09:e6:e1:f1:60:80:33:48:d4:bf:76:d5:9b:0f:a3:60:83:26:
         bb:c0:10:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:43:05 2026 by rpki-client