Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b4356c-7c4d-35e7-a209-d7fdea3f9a67.roa
File:                     21b4356c-7c4d-35e7-a209-d7fdea3f9a67.roa (raw, json)
Hash identifier:          v++JzbXfKBoQu7MTQQN+1NNUIFQnG36Kc+pxxkbJWc0=
Subject key identifier:   EB:C9:70:4F:31:16:01:63:75:CC:CE:04:7F:6C:A7:86:B0:B7:AF:EA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0672895B28E5E91E646BFB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b4356c-7c4d-35e7-a209-d7fdea3f9a67.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396606
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:89:5b:28:e5:e9:1e:64:6b:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=7e91cefe-95fe-437a-bcce-c8bc07d3f425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:96:3e:2a:c9:43:66:da:0d:52:26:e0:35:9b:
                    1d:25:77:c1:ef:b5:e0:68:d1:72:09:b5:20:85:11:
                    d0:5d:4e:50:0b:5b:4f:7c:c3:b7:0a:6d:ef:53:69:
                    3c:34:70:bc:d7:d1:9a:92:b2:2d:e0:c2:86:3b:86:
                    c9:6a:b3:5e:cd:22:2b:c3:38:88:98:6e:47:b0:59:
                    3e:7f:fa:9b:0b:fd:84:93:d8:c5:a4:d1:e2:c6:0e:
                    cb:68:57:af:a9:7c:60:17:6a:ee:fc:c5:c5:5f:2d:
                    c3:42:a9:d4:ef:98:ec:d5:a4:ff:ec:7b:1e:fb:82:
                    da:bb:a2:0a:12:fb:5f:da:4d:ba:bd:d9:d2:b9:4a:
                    ca:47:d7:eb:7f:22:7c:55:8f:18:46:15:a2:95:3e:
                    d4:c7:69:b9:39:8f:5e:4c:7f:c3:a6:86:2d:5f:d8:
                    92:aa:1f:97:08:29:c2:da:f2:bd:5b:39:aa:07:0a:
                    f3:a3:4a:9a:b8:4a:aa:62:ac:da:df:79:03:9d:47:
                    cb:d1:79:06:a2:e3:35:c0:3f:08:88:75:c6:ef:16:
                    8d:67:68:70:0f:f7:5c:19:bf:b8:cb:38:b6:69:dc:
                    0d:70:d4:34:bc:22:48:28:ff:52:0b:d2:59:47:e2:
                    21:b3:e2:00:2e:dc:d4:f3:cc:67:02:90:e9:8b:fc:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C9:70:4F:31:16:01:63:75:CC:CE:04:7F:6C:A7:86:B0:B7:AF:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/21b4356c-7c4d-35e7-a209-d7fdea3f9a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:36:6f:45:cd:93:aa:76:b3:9b:c8:d5:4f:4a:2c:9d:29:6f:
         27:da:9f:d2:87:eb:68:4c:3b:c4:75:1c:fc:8b:1c:74:71:fa:
         7a:f4:f9:02:0d:76:f6:19:a8:e6:1a:34:a8:e1:68:85:e1:7b:
         8b:f9:8a:87:8d:21:4a:56:7f:df:17:90:79:18:f5:00:58:b0:
         94:05:a3:c2:dc:9b:b8:64:b2:84:5b:5a:48:39:b6:02:b0:43:
         b6:49:d3:26:0e:8c:eb:df:3c:c4:01:5c:88:e5:12:57:90:0c:
         dd:f4:d3:d4:b2:ea:05:1b:31:e8:76:17:71:b0:00:64:10:02:
         35:f5:b3:c1:83:0b:c1:76:93:37:fd:46:c2:bd:00:17:13:64:
         02:ca:36:82:71:2f:ed:7a:d7:1e:07:c6:51:3e:d5:ef:a1:81:
         61:44:e4:90:fb:65:c6:81:8e:81:d4:41:7b:5c:13:36:39:a6:
         30:cf:43:c9:40:82:6b:4b:45:85:16:3e:36:6e:c7:45:ca:88:
         22:9f:b8:25:0b:e8:40:4a:18:7c:7b:0d:54:78:2f:d0:30:49:
         59:b2:1d:bb:ca:7b:2b:3e:52:e7:c3:70:07:a9:80:4e:f1:ec:
         66:36:ba:e0:1b:92:28:58:a6:7a:e7:e5:0a:64:e9:46:f7:63:
         de:f1:22:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:12:45 2026 by rpki-client