Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/340ee5c3-1eee-3bb2-9297-ae822d94d75a.roa
File:                     340ee5c3-1eee-3bb2-9297-ae822d94d75a.roa (raw, json)
Hash identifier:          sDcfh+kx/C8hT9AltGOfhzOpQEdXKkaWfdru3EX50oE=
Subject key identifier:   66:2B:64:BD:95:D8:21:CA:98:AD:3B:C5:66:96:57:4A:4D:14:BC:90
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4986789BF888447BCC26CA00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/340ee5c3-1eee-3bb2-9297-ae822d94d75a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396614
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:78:9b:f8:88:44:7b:cc:26:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=54917452-0b0c-41a5-b38f-2368748fda5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:c7:e2:99:d1:be:1e:bf:21:f1:c1:12:f5:
                    8a:6e:57:07:77:d4:8c:74:9b:7b:61:44:b7:72:5d:
                    49:9a:eb:4a:2d:27:5a:83:8b:43:b0:f9:9d:72:f6:
                    eb:0a:35:a2:41:e7:28:c6:c5:82:c2:54:4d:59:c0:
                    24:d1:ff:9a:a8:61:a0:15:2f:50:a1:d6:29:0f:c0:
                    e7:c0:cb:a2:c7:53:70:8d:91:20:5a:58:25:f1:4e:
                    f3:c7:b3:03:6a:35:c1:3b:4b:cd:f9:1d:03:0d:6c:
                    dc:89:db:d8:05:1e:fa:65:45:09:7a:79:79:c2:55:
                    25:50:22:e4:62:01:db:f1:86:58:b4:96:2c:a1:30:
                    c5:eb:1b:28:19:26:c3:f0:fe:fa:00:6a:37:94:69:
                    f3:41:aa:e1:99:f0:35:27:ff:5e:2b:97:75:4e:a7:
                    e2:75:5e:cb:ae:51:a8:73:fe:74:b4:ee:5b:33:a1:
                    be:7b:a3:69:d9:a0:7a:5f:d4:7e:72:ea:e0:73:e5:
                    72:3a:07:c3:8b:c6:05:9c:b3:9e:9a:a2:e0:f8:8d:
                    77:2c:ae:19:fa:7e:36:9a:2e:cb:ad:72:52:8b:c3:
                    62:05:fb:10:88:27:b0:cb:ee:63:90:03:33:79:ef:
                    1a:84:40:f5:71:ca:ab:4b:b9:a3:1b:f1:ff:f7:a2:
                    f2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2B:64:BD:95:D8:21:CA:98:AD:3B:C5:66:96:57:4A:4D:14:BC:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/340ee5c3-1eee-3bb2-9297-ae822d94d75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:a3:bb:cb:ec:b0:16:0f:45:79:a8:ef:dc:d1:f6:03:5f:8b:
         57:6d:47:e3:ed:03:3a:bc:f7:d4:da:58:2a:0b:87:7c:b2:59:
         7a:05:5f:73:b5:c8:70:5a:b1:e3:dc:d3:96:11:1c:03:15:86:
         6f:27:ab:68:82:4e:98:a3:ba:b6:79:45:0b:7c:82:80:dd:fb:
         7f:6c:6e:41:75:8f:5e:39:82:af:a3:f3:5d:03:20:30:80:4a:
         be:c3:70:f7:22:9d:ac:42:10:5a:08:66:dc:7b:8a:e6:27:5c:
         06:71:5f:22:69:22:d6:a0:d4:93:3c:f8:7a:8c:92:07:ff:71:
         71:f8:1f:99:2b:95:4d:4a:07:34:40:fd:4e:0b:a7:7f:33:e6:
         37:c9:7a:29:82:55:99:61:65:cd:e1:f9:2a:fa:bd:99:5b:84:
         86:89:b4:d5:21:48:a1:63:08:f5:a5:bb:3f:30:74:d8:95:9b:
         57:44:59:f3:1f:86:cd:b6:2c:c8:2a:eb:b8:a7:e3:d9:2f:4a:
         7a:e5:29:a8:7a:79:bc:c9:87:6d:dd:4b:95:73:17:20:df:62:
         40:30:06:4a:04:c2:36:82:ac:57:c0:4b:8a:56:a3:15:c7:07:
         dc:cb:ca:55:88:0e:50:17:0e:dd:eb:f1:29:99:cf:6d:57:1c:
         81:46:5e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:18:57 2026 by rpki-client