Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12d5abc7-504c-3ac2-ad6a-9e1a45a51966.roa
File:                     12d5abc7-504c-3ac2-ad6a-9e1a45a51966.roa (raw, json)
Hash identifier:          V3QU64papxcCbwMQG4pKgS00ZYEYzrG/FDmBBkIx/SU=
Subject key identifier:   89:8A:74:49:A4:2F:FA:ED:61:36:77:EA:42:27:7D:41:1E:72:EC:40
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B7A2B04BC48E278B2DE960
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12d5abc7-504c-3ac2-ad6a-9e1a45a51966.roa
Signing time:             Thu 16 Apr 2026 14:09:54 +0000
ROA not before:           Thu 16 Apr 2026 14:09:54 +0000
ROA not after:            Wed 15 Jul 2026 14:09:54 +0000
asID:                     36631
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:a2:b0:4b:c4:8e:27:8b:2d:e9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:54 2026 GMT
            Not After : Jul 15 14:09:54 2026 GMT
        Subject: CN=0c020ebf-8a21-4953-ae75-af0566cdae2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:84:ef:8e:9f:78:14:ac:81:5f:a0:51:b3:
                    50:94:55:d6:6a:4d:e9:7f:a0:4f:49:c6:28:18:3e:
                    d4:00:97:bb:ff:32:77:02:70:dc:d2:c2:89:a7:42:
                    d0:7d:d3:7e:a0:4c:49:63:af:67:a5:85:d4:0a:62:
                    de:34:a9:37:a1:f7:b4:a7:fb:89:51:9d:84:56:fe:
                    5c:cd:b5:a6:61:fb:6b:18:8e:6d:52:81:2e:4a:41:
                    a5:cb:b2:a0:22:eb:16:6c:b8:87:ef:f1:ae:59:3d:
                    bc:00:3c:d1:15:7c:44:fb:8a:8c:fe:c4:8c:0f:bd:
                    d0:61:bf:91:bf:53:74:ad:fb:3d:0c:9b:31:af:91:
                    24:41:cd:78:fa:76:32:3f:b8:2f:15:21:59:63:cf:
                    11:87:1c:c4:a9:ce:95:95:d5:08:fe:3d:f0:0c:e6:
                    09:ee:c6:1a:a4:98:4c:6f:4d:3c:ea:30:41:fd:6b:
                    a5:04:d0:50:fc:d9:c9:cc:bd:7e:bc:f0:14:d4:36:
                    0c:1a:3b:bb:f9:97:ae:f0:a6:58:e6:7e:fd:d8:47:
                    e9:19:95:39:ce:98:3a:87:40:6b:f1:c7:39:a5:4e:
                    08:e2:b8:6c:72:ba:26:fa:3f:b0:d8:39:c8:df:9b:
                    47:db:36:87:2b:0f:cd:c8:2f:9a:8c:85:9c:51:ec:
                    41:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8A:74:49:A4:2F:FA:ED:61:36:77:EA:42:27:7D:41:1E:72:EC:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12d5abc7-504c-3ac2-ad6a-9e1a45a51966.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:a3:fb:5d:e1:52:b2:cb:93:1d:f0:aa:be:0d:4a:89:db:af:
         95:57:31:fb:f2:37:2a:91:ca:19:06:55:47:fb:96:7a:1e:8d:
         30:8e:d0:9c:c7:7d:33:de:9c:f5:75:ca:a5:40:33:a0:4f:4d:
         7c:c9:46:bd:2c:13:81:ce:a6:3f:34:67:31:d3:7b:59:99:e6:
         6f:60:2a:38:a9:91:98:e1:1d:57:3b:c3:cd:ff:80:db:38:71:
         53:c1:28:f8:94:b1:be:5f:97:01:15:44:62:b1:b8:fe:aa:2f:
         70:40:1c:0d:ea:be:a2:40:e7:5b:26:94:79:de:54:20:48:25:
         9e:40:97:2e:b1:d1:5d:0a:e0:9d:3e:16:6d:a8:f1:97:b6:02:
         41:83:d3:8d:6b:48:4f:4b:03:50:3d:b1:17:ee:2c:f2:03:f4:
         e6:63:c4:76:51:12:27:04:3a:15:ae:ab:94:39:21:ac:3b:f3:
         7a:8b:66:ab:72:2a:e3:c7:bd:81:8f:64:40:93:6f:f6:ab:fa:
         45:e1:1a:60:8e:12:09:dc:e1:3d:f6:36:36:99:2a:ad:90:ff:
         b4:83:88:52:c7:f1:77:7e:e0:92:9d:af:19:9a:17:ae:b9:6c:
         63:74:8a:39:c5:11:4c:54:94:cf:48:75:91:19:01:09:e6:c7:
         9c:58:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:30 2026 by rpki-client