Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2056b671-8c26-33b2-b7a4-52dab5db657c.roa
File:                     2056b671-8c26-33b2-b7a4-52dab5db657c.roa (raw, json)
Hash identifier:          czdqLb9imABYa0eA4OJFK1dQHMnbVY6mZet+0hMEayw=
Subject key identifier:   55:61:5A:93:7C:9B:7F:14:AB:71:2D:36:CE:0F:DD:32:52:BF:E9:0D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA794C20A6DAD6DA30510C580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2056b671-8c26-33b2-b7a4-52dab5db657c.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20172
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:c2:0a:6d:ad:6d:a3:05:10:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=891342ac-99b3-431b-93aa-4c5695aea9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:0c:6b:82:c9:3d:1e:b7:b6:ec:a1:dd:c3:
                    56:73:f7:d9:d2:ca:56:a8:f8:6d:98:f4:8e:93:4f:
                    8e:ef:7c:ed:7d:7b:cb:15:78:f8:7b:14:86:98:d0:
                    72:c3:b7:38:71:18:18:02:54:c7:fe:36:18:98:32:
                    5a:db:03:0c:12:b9:27:ca:70:f1:d3:37:c1:6c:01:
                    06:6b:47:58:0a:cb:73:d0:a5:26:76:a8:1b:d8:26:
                    45:f8:67:e7:8c:6c:44:db:3f:64:f7:20:90:86:d8:
                    10:d8:60:5f:e4:e8:38:4b:91:74:22:42:7d:27:94:
                    f9:e9:3b:bf:59:e4:61:75:8f:72:13:e4:be:dd:f2:
                    fc:df:75:d8:49:92:1c:95:33:29:f1:2d:ac:9c:31:
                    5b:27:10:c2:9d:f0:65:cd:2e:86:02:8a:4f:d0:6f:
                    72:67:1d:91:95:f7:7f:e4:a4:d1:46:27:cd:bc:d7:
                    5a:ce:93:14:55:33:97:b3:f0:cf:e2:a8:e0:00:3a:
                    1a:e0:5d:43:67:e8:39:bd:c7:65:fd:96:0a:c0:f6:
                    92:2c:63:90:e5:53:1a:c9:a4:b2:39:f9:d5:c4:d4:
                    12:ee:dc:de:33:b0:49:71:6d:54:73:8d:d3:5b:83:
                    20:13:84:b2:a3:84:34:d6:45:10:a0:e7:07:7f:90:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:61:5A:93:7C:9B:7F:14:AB:71:2D:36:CE:0F:DD:32:52:BF:E9:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2056b671-8c26-33b2-b7a4-52dab5db657c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:35:40:bb:3b:19:6f:16:90:27:d9:25:3a:2c:5e:42:1f:e5:
         81:d5:6c:83:96:59:19:c5:5d:44:2b:58:33:8a:c3:b4:2b:e1:
         60:f3:1e:11:c1:f9:64:34:a4:2f:57:dc:26:05:a2:92:1c:9b:
         23:b0:27:de:37:a8:69:a4:83:ce:81:c1:59:2c:e6:56:dc:cf:
         ca:c3:20:48:9c:b2:69:5d:92:5e:19:1b:84:cd:c2:64:30:00:
         87:b0:de:06:0b:e6:72:e8:38:16:c3:ac:53:07:23:4e:4f:a3:
         b1:eb:fc:12:7a:7e:35:5b:f8:11:6d:1a:03:61:f8:6c:de:ad:
         e0:15:9c:8f:2c:48:04:b1:bf:ab:f5:08:91:79:94:01:6d:39:
         f2:63:1e:93:e8:29:cb:d8:89:7f:fe:08:95:62:e5:28:09:16:
         7b:28:dc:11:0f:19:dc:7d:7b:61:90:5a:f3:b2:fe:0a:24:ec:
         9c:b0:5f:c1:c6:f4:4f:f5:bf:71:6d:14:91:1d:16:04:f3:28:
         ca:07:c9:43:5d:6c:d8:9e:83:b6:39:e9:08:5e:00:25:0c:e9:
         f7:af:ec:45:bf:83:2c:d0:e7:d3:d2:f4:24:1d:80:c2:4f:7e:
         67:fb:94:14:0d:a1:ef:50:de:85:43:83:72:cf:08:2a:3e:81:
         c3:e5:17:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:40:19 2026 by rpki-client