Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ac3232-d363-39a6-b685-525db42b7d98.roa
File:                     18ac3232-d363-39a6-b685-525db42b7d98.roa (raw, json)
Hash identifier:          CT2xrRXLlEraVbUWANgdZwKXvCcCBNuqdqxcvyBOC1Q=
Subject key identifier:   4E:4B:6B:BE:47:C7:39:59:CF:D3:2E:53:AF:29:E5:21:A6:86:F3:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CADAC28965F451854E52C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ac3232-d363-39a6-b685-525db42b7d98.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396616
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:da:c2:89:65:f4:51:85:4e:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=a1766f76-f70a-4c67-97d0-680398c10537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:88:08:93:7e:24:72:b1:b5:7b:73:f6:35:81:
                    fb:7d:22:c6:6e:69:2b:c0:5a:75:aa:1b:ea:a5:0f:
                    ad:d4:17:67:71:d9:10:b8:84:28:2f:28:3d:b8:45:
                    9a:4a:ad:d2:68:bd:e6:c1:81:d7:66:8f:40:8f:6f:
                    94:31:26:76:3e:bb:58:f3:e5:ff:a5:77:09:7d:3e:
                    2d:7f:39:74:f4:8a:6e:e9:c8:89:99:9a:e0:d9:7b:
                    60:fd:2f:74:7e:27:f2:89:7f:35:47:1d:f0:3f:ff:
                    d0:08:84:84:ff:1c:bc:2a:c3:75:db:4d:22:f4:78:
                    13:19:b5:f3:43:ce:14:0d:12:fc:b4:f7:48:57:0e:
                    17:3c:e3:69:2d:4b:02:07:02:b7:ff:e7:0a:53:20:
                    6f:79:a9:57:cc:0b:2c:c9:07:82:38:46:12:10:c5:
                    15:3e:ce:5a:3d:f0:8b:ac:34:06:e3:9c:b8:24:39:
                    eb:75:8a:b2:7f:dd:77:a0:87:f6:89:29:4d:21:66:
                    b3:c8:54:c3:cf:27:24:21:44:6f:17:0e:b2:19:9d:
                    9e:51:7d:6f:d0:e8:89:b2:cb:68:1c:d5:1d:81:16:
                    3d:3a:21:2d:35:8f:39:9d:cc:c8:b9:be:93:9a:6d:
                    57:71:9f:10:68:96:94:48:cf:fe:15:14:f5:c0:8f:
                    f2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4B:6B:BE:47:C7:39:59:CF:D3:2E:53:AF:29:E5:21:A6:86:F3:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/18ac3232-d363-39a6-b685-525db42b7d98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:00:f2:4e:b8:3e:82:48:12:e4:83:bf:d4:d0:e9:02:f1:f5:
         27:a8:41:6b:71:c4:a4:47:04:e0:95:7f:58:84:cc:f9:b1:c3:
         c4:71:93:20:62:4c:79:d9:b7:4b:4c:c8:ae:b9:69:43:1d:a0:
         d9:c2:62:19:83:3f:f3:65:54:2f:92:5f:f4:62:cc:cd:e2:89:
         2e:e2:07:cb:3a:69:17:15:9b:cc:d8:a5:68:11:28:75:25:2d:
         b0:bd:0e:a8:80:75:cd:69:7e:ed:b7:99:af:cc:f3:8d:b4:8d:
         92:f3:4b:ad:07:6f:bd:38:eb:12:49:2d:6f:a7:f4:84:fb:b0:
         2d:c5:7e:b0:d4:8c:35:b2:47:fa:44:95:44:e7:4b:21:42:dd:
         82:96:b1:0a:32:ab:fb:bc:1b:2e:63:8d:90:37:43:43:bf:15:
         f3:56:50:00:b6:d0:65:21:79:2e:17:7f:25:06:32:88:e5:e7:
         fb:ae:a3:95:6e:98:bc:4e:1a:d7:ee:33:95:80:c2:eb:d0:de:
         a2:ec:78:c3:c3:19:b5:0f:91:27:ba:25:f8:4e:7b:9c:1c:6c:
         64:13:d5:7c:c4:5d:67:68:f3:1c:6e:2a:af:a8:a4:52:56:40:
         78:5a:df:e5:db:05:1a:76:8e:a7:d3:51:1f:6c:29:ad:85:3c:
         8e:ea:fa:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:26 2026 by rpki-client