Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f2bc9b8-18b6-3ba6-9548-3e71b38512c7.roa
File:                     1f2bc9b8-18b6-3ba6-9548-3e71b38512c7.roa (raw, json)
Hash identifier:          4CTU9AZUlIqurJ8E36kNd2fz8CRLD1ZESM1EFgl73is=
Subject key identifier:   97:65:B0:38:4E:AA:B4:98:B8:AF:FE:65:36:E2:18:F7:43:4C:FD:D4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7889B7668CD4DBE0881C980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f2bc9b8-18b6-3ba6-9548-3e71b38512c7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396827
IP address blocks:        192.42.173.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:9b:76:68:cd:4d:be:08:81:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=90567116-caca-4fe2-997f-7bc655fe06ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2c:5f:30:f6:db:3d:b5:7b:9d:ad:b2:80:68:
                    d8:6c:0c:76:5b:2c:a0:ee:b8:fa:d4:0e:d2:a9:ce:
                    92:35:b5:e3:06:eb:fc:fb:77:94:b6:5a:3c:14:89:
                    0c:03:00:ca:7b:c0:47:3c:41:7c:d0:79:7c:5e:45:
                    0f:81:44:28:c4:f3:a7:19:a4:4c:8b:bd:d3:0d:5c:
                    35:f6:bb:05:58:a0:25:8e:1d:1e:c7:7a:a8:19:7d:
                    f9:31:84:aa:96:16:0d:97:68:d3:65:cc:e9:96:9e:
                    77:79:d7:66:1b:4a:00:f8:c2:d9:30:8d:5b:42:6e:
                    b8:8a:99:46:73:35:ee:c1:5e:54:70:96:36:10:ee:
                    fe:5f:36:b0:86:27:d5:46:60:79:51:aa:ea:23:99:
                    5b:49:6e:14:96:6e:db:0a:40:f2:d9:7f:bb:9a:f7:
                    fa:ba:fc:e6:2c:46:a8:dd:10:80:c7:78:8b:1a:52:
                    0d:15:a4:60:c9:e0:62:da:7b:90:60:bc:0c:85:db:
                    b5:45:69:f7:79:f0:b8:7c:14:e5:a0:ac:b2:4c:33:
                    73:7a:9a:1c:be:0f:ae:dc:08:20:e3:64:9c:8a:38:
                    00:3a:a4:2e:11:ba:b4:d6:45:98:8a:47:6f:0c:64:
                    a3:34:db:4c:94:16:fb:3f:9e:62:ed:c7:99:03:01:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:65:B0:38:4E:AA:B4:98:B8:AF:FE:65:36:E2:18:F7:43:4C:FD:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1f2bc9b8-18b6-3ba6-9548-3e71b38512c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.173.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:9c:56:1a:8c:d6:a2:d0:e0:03:d4:4f:e3:74:bf:d8:20:c6:
         21:2d:84:f3:b2:60:d6:41:d2:5b:30:8e:41:e6:2a:25:6d:a1:
         5a:b8:d9:59:e2:e2:b7:34:77:d6:98:b3:fc:5c:0e:ab:1f:d1:
         ef:a0:1f:aa:12:4b:5c:c4:43:5b:28:37:4e:46:4c:e3:e9:2e:
         4d:78:47:a4:fa:48:2c:5d:58:52:c0:f1:81:10:5c:16:cd:85:
         37:c9:94:92:f3:3f:46:87:e6:57:ab:30:87:5e:e6:16:d2:38:
         97:81:33:63:86:27:1a:d5:85:37:fa:64:ba:51:62:cb:68:87:
         bc:5f:93:31:92:79:da:b9:db:b4:c5:bb:05:5a:74:5d:df:f4:
         20:1b:2b:b1:be:98:78:74:09:04:58:a9:cc:e4:3d:5a:f0:92:
         6f:01:24:c3:66:3a:ba:9b:cb:42:e3:14:02:42:ea:d9:0a:dc:
         b4:44:9c:e0:53:b7:5c:14:4c:08:90:b3:a6:27:b2:12:e6:11:
         55:26:bb:60:46:6d:88:71:2f:a8:58:58:85:e4:19:a1:57:09:
         02:5c:30:21:6b:fa:ca:f4:46:28:d6:52:20:ec:17:e6:e3:70:
         3b:0f:72:95:89:95:c4:b0:17:9e:c9:b6:86:15:a9:d4:85:f5:
         28:78:de:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:05 2026 by rpki-client