Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa
File:                     3e8607d6-bc0a-3404-adea-1dc766049cd1.roa (raw, json)
Hash identifier:          YV9YTZSPQFhQ4aRxvLt7/WmuMJO6wH2FzDdZufO4Qik=
Subject key identifier:   10:30:81:C1:5D:0D:F4:E6:AB:6F:F4:B7:A2:30:7B:71:3B:BE:06:C4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DF7A5C97ACEB1B3DB70D89180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     396617
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:c9:7a:ce:b1:b3:db:70:d8:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=6de47898-8b07-4289-810c-f8189904890d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:20:ad:03:b3:a1:ba:fd:d9:42:63:de:c4:20:
                    10:ef:8b:c0:78:05:10:b5:7c:de:c4:c1:0d:cd:d7:
                    a4:73:76:21:03:d7:3e:5a:33:8c:01:f7:34:ce:f7:
                    d3:46:56:15:0c:85:97:c6:cf:b2:ac:5d:fb:2f:e4:
                    26:3f:7f:4c:3e:3e:70:66:a9:75:c7:9e:51:b8:c1:
                    eb:dc:b5:04:9e:02:10:4c:83:7b:46:87:24:6c:42:
                    28:96:30:db:b7:10:68:4e:c2:a6:c2:fe:1c:68:6f:
                    fd:76:f6:66:dc:8d:23:02:c6:13:98:6e:ce:34:a1:
                    8a:da:ed:95:4b:91:a8:43:4d:33:c3:d2:91:2c:fd:
                    a4:ad:18:55:ae:4d:59:ca:06:da:af:ee:fb:84:51:
                    50:ad:0c:b9:c5:bb:f8:20:a9:f7:0a:c6:84:d9:ea:
                    3e:80:be:e4:07:41:fe:7a:4e:84:d6:93:55:5f:cf:
                    2d:80:f6:68:61:1b:67:fd:c1:dd:77:c0:df:23:db:
                    fd:f0:e8:25:ee:b4:13:de:d3:67:89:9d:33:e5:12:
                    77:42:f2:4c:60:8b:8a:db:83:2b:27:50:e4:e9:fa:
                    d7:48:a1:9e:61:b2:38:9c:25:71:30:ec:71:60:93:
                    c6:9a:e8:6f:da:43:c1:16:e5:31:29:60:ce:73:c0:
                    dc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:30:81:C1:5D:0D:F4:E6:AB:6F:F4:B7:A2:30:7B:71:3B:BE:06:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3e8607d6-bc0a-3404-adea-1dc766049cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:f1:af:39:01:17:18:81:41:0d:69:3a:c9:17:a7:11:fa:
         22:4d:01:f8:52:b7:6a:60:8c:f0:c2:bf:59:6c:2d:cf:95:1a:
         45:c5:53:21:53:b7:5b:0e:80:6d:84:b0:1d:9a:66:d1:4c:35:
         42:65:07:44:80:39:48:9f:a6:57:6c:1b:f9:bd:32:39:06:1c:
         6b:58:b4:aa:5a:d8:69:bb:b2:05:34:3e:a5:5e:a2:ed:5c:5c:
         c4:a6:33:58:1f:3b:8a:8c:4b:7a:c0:a7:6b:04:c2:c5:01:49:
         82:e9:fb:a0:89:05:af:97:09:ff:92:c0:3c:6e:ed:30:21:4f:
         1d:be:cc:a5:83:3d:c0:8e:70:cd:29:73:d1:ce:23:51:1b:c8:
         9d:d8:96:b6:2c:52:1c:d5:9a:d3:a2:b7:4c:f1:11:6c:e4:34:
         7f:77:9c:fd:ab:c8:ff:aa:e3:1f:4d:de:1b:c2:3a:8c:60:f6:
         40:9f:14:2f:56:3f:2d:f3:78:b9:11:8c:1c:3c:92:4e:54:35:
         7f:bc:f8:40:4c:c1:56:fe:54:1e:71:84:e7:af:88:47:31:9b:
         15:91:a3:bf:ab:49:94:fb:95:99:5b:bd:54:05:28:42:30:22:
         a3:36:67:e4:35:12:89:6c:0d:06:21:ad:36:a3:76:27:e5:53:
         2d:2a:d3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:44:36 2026 by rpki-client