Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23a7b07d-e3ba-3151-8f05-ef59177eef13.roa
File:                     23a7b07d-e3ba-3151-8f05-ef59177eef13.roa (raw, json)
Hash identifier:          jUbEasVQVIdsGr8opYtJ5suW4KtZ4q8FrgE3WP8Qk8Y=
Subject key identifier:   91:40:EF:8B:63:F1:14:B3:86:8B:37:F9:39:9E:DE:DB:13:3D:21:97
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F11A131325372EC9E35D3DCC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23a7b07d-e3ba-3151-8f05-ef59177eef13.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     397206
IP address blocks:        192.30.45.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:a1:31:32:53:72:ec:9e:35:d3:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=3c32ade0-0d8c-482f-9fc3-8501994b8a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c5:66:a7:26:18:12:11:cd:ec:4a:b3:02:10:
                    8f:7a:38:c8:80:50:0d:84:e6:48:8b:58:9e:0a:68:
                    9a:6e:10:ff:11:77:97:f3:c4:4b:87:67:42:61:f2:
                    b9:85:ff:94:08:1c:44:b0:c1:86:ef:59:d5:9d:c0:
                    b1:23:de:b4:e8:8c:0d:1d:53:73:a2:9d:67:ef:19:
                    96:e1:97:36:13:ab:1d:61:17:c1:f1:af:c8:50:15:
                    72:7e:e5:cc:ed:ff:bf:2b:b0:09:0e:42:7f:c6:09:
                    9c:95:c3:a2:16:23:98:50:06:21:21:c9:2f:48:39:
                    06:81:bb:d3:3b:d6:31:71:67:66:98:bf:48:8a:8f:
                    4b:65:41:0b:59:f8:56:41:a2:e6:36:01:a3:54:91:
                    ce:9e:ca:1b:07:bf:af:ff:9a:bb:15:2e:96:31:b8:
                    d3:d7:e1:da:ae:73:bf:74:48:11:79:6f:12:04:12:
                    66:90:d4:68:ba:af:36:6d:e5:60:d5:7d:38:57:22:
                    e5:d8:20:b4:8b:ab:02:cd:13:1a:84:bf:7c:d4:65:
                    a0:1f:f6:54:a4:d7:aa:ce:53:c6:ec:97:07:70:00:
                    ec:be:4b:d2:9f:9d:f1:29:cd:3b:4b:b8:0c:5d:b7:
                    90:86:e0:39:8f:f9:c5:03:ac:f3:6f:62:3e:e3:7c:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:40:EF:8B:63:F1:14:B3:86:8B:37:F9:39:9E:DE:DB:13:3D:21:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/23a7b07d-e3ba-3151-8f05-ef59177eef13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:90:7c:38:e4:e1:0d:c1:cd:01:87:25:9d:3d:39:2d:a9:17:
         87:c6:c6:12:0e:9c:61:47:31:91:8e:53:f2:da:e1:73:a4:5a:
         b5:eb:5d:51:10:ea:4b:6c:0b:c3:f5:c7:96:12:b7:32:de:ae:
         35:29:bb:2f:79:e7:75:be:4c:6f:e1:6d:e3:ca:f9:59:bd:c0:
         30:a4:9a:23:a3:5d:2e:f1:e1:e8:67:fe:ec:90:ab:17:7f:55:
         a4:af:51:28:0b:8e:cd:22:fc:db:29:ee:82:cf:ec:73:7d:d0:
         3e:73:60:81:52:8c:fe:85:76:26:7a:03:89:7e:93:35:ad:fb:
         99:11:d9:29:10:3c:02:08:9e:ec:66:f3:45:a0:4d:eb:17:e2:
         9c:8a:bc:35:2a:fc:b4:90:27:d2:e9:27:02:ab:6c:0a:74:d8:
         aa:3a:5a:e4:91:35:00:11:44:d5:db:ee:19:29:02:b2:da:d5:
         e2:f9:24:b6:a9:68:26:d5:e2:9b:20:69:0a:4d:0d:12:c2:20:
         59:9d:02:f4:36:4b:a9:5b:d4:16:8b:9a:5f:07:57:d7:4c:a9:
         fc:d1:8e:03:6f:08:92:3b:00:04:61:69:48:55:94:21:a8:cc:
         69:5c:91:8b:97:22:91:a5:33:51:7f:5c:4b:e1:5e:f4:ac:f8:
         a8:b6:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:17:33 2026 by rpki-client