Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d606cad-d41e-31e6-8332-2f0a9420c9b5.roa
File:                     0d606cad-d41e-31e6-8332-2f0a9420c9b5.roa (raw, json)
Hash identifier:          TwU9nbmWZU3Dbp363WvNKRl7WGV7Tcwtp9sxxdWS+r8=
Subject key identifier:   34:71:73:C1:A1:4A:02:42:AF:5B:9E:2C:BC:EE:DA:53:98:6B:DA:C6
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B7987CFEB2E9B0791EAD60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d606cad-d41e-31e6-8332-2f0a9420c9b5.roa
Signing time:             Thu 16 Apr 2026 14:09:49 +0000
ROA not before:           Thu 16 Apr 2026 14:09:49 +0000
ROA not after:            Wed 15 Jul 2026 14:09:49 +0000
asID:                     397203
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:98:7c:fe:b2:e9:b0:79:1e:ad:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:49 2026 GMT
            Not After : Jul 15 14:09:49 2026 GMT
        Subject: CN=eabdddde-e304-4118-b8db-fcb550ec38bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0b:0b:05:f4:b6:a6:c0:3d:4a:fc:5c:2a:6f:
                    b1:ec:7d:66:c2:a0:7c:58:3b:f2:a6:39:dd:93:2b:
                    71:e2:2e:bd:69:4d:e6:99:cb:3c:06:1f:e6:a0:34:
                    bf:f5:fe:53:06:cb:23:57:0f:de:20:04:cd:4d:53:
                    1b:3b:3f:ef:df:af:fb:bc:9c:cc:59:d4:66:d8:dd:
                    61:ed:e1:c8:23:23:28:9c:64:18:9f:1a:91:47:ee:
                    6b:65:f2:7b:a1:ac:c4:27:03:86:ec:67:c8:e3:ad:
                    66:56:23:55:cb:5e:49:89:45:a4:69:20:6c:95:9c:
                    ea:2a:a3:60:6d:10:68:9d:62:e6:1e:29:31:cf:ed:
                    5c:9b:07:26:36:42:c2:b8:73:4c:54:eb:90:23:60:
                    99:dc:23:49:0b:85:4c:19:bc:88:6d:04:d2:23:64:
                    8e:13:1e:33:c2:2f:d9:d5:ce:22:b7:65:2b:8c:9a:
                    62:1e:17:84:57:7e:69:8c:03:d0:fd:ec:0f:19:46:
                    ab:93:fa:c5:ac:1d:95:92:a0:07:8c:af:0b:c9:c5:
                    77:8d:ca:34:fb:e6:27:70:f4:2e:b2:a5:e8:19:85:
                    9f:3a:12:55:7e:c3:89:05:1f:26:68:85:fd:96:b3:
                    51:20:03:8c:81:86:ae:ff:ff:a9:90:bb:b5:e8:3a:
                    92:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:71:73:C1:A1:4A:02:42:AF:5B:9E:2C:BC:EE:DA:53:98:6B:DA:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0d606cad-d41e-31e6-8332-2f0a9420c9b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:3c:1f:d5:e8:92:97:68:06:51:5c:ad:2b:c5:22:90:d6:58:
         19:de:28:3c:fe:a6:ea:29:76:c6:36:2f:d5:6c:bb:6b:7e:20:
         7d:7f:67:73:85:37:0e:d3:32:40:da:2f:41:4c:4f:7b:98:5c:
         e6:b2:96:67:6c:e5:9f:99:b1:40:a7:44:2b:db:b8:94:80:66:
         1d:46:8a:19:2c:19:8d:44:77:ae:14:e5:84:80:db:c3:9d:fa:
         42:22:67:80:14:80:d8:b4:49:7b:07:f4:7e:7b:1d:50:e5:e7:
         8f:bc:a9:f4:53:21:a2:26:65:bd:62:a1:1a:ae:31:a3:32:65:
         04:a2:70:fc:d4:8b:63:ef:cd:db:f0:1d:c6:8d:4a:e3:27:b7:
         d8:8b:60:54:4c:42:64:f7:e7:b4:88:e7:5d:09:ec:bd:09:73:
         f0:0e:89:d4:46:b2:10:23:9b:33:16:92:c2:5d:29:ad:0f:18:
         08:f4:8d:5b:94:cb:6b:35:fa:5e:3f:13:08:2e:2b:97:fd:70:
         50:1a:c7:97:00:57:2e:eb:77:32:29:23:e1:6b:d8:9e:ce:11:
         22:f8:fe:4b:d5:e4:ac:23:2d:3b:1f:01:87:e5:cf:13:f4:ab:
         b5:05:ff:20:db:30:69:d3:b6:0d:3a:ff:23:60:de:93:83:36:
         38:0d:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:31 2026 by rpki-client