Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41759970-026c-3ed4-8eca-de9345120705.roa
File:                     41759970-026c-3ed4-8eca-de9345120705.roa (raw, json)
Hash identifier:          KZi5/wcNcr3WQp5yXivPel+wXVPuGYH67auNLTdCVH8=
Subject key identifier:   9D:B7:EA:27:EE:0B:43:7C:25:72:BC:E2:C1:E1:1B:A8:FF:28:BB:68
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA795181E408E868027779560
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41759970-026c-3ed4-8eca-de9345120705.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36628
IP address blocks:        192.26.92.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:18:1e:40:8e:86:80:27:77:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=690c390f-f77a-4d0b-a51f-72331d74c4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3f:58:3e:ed:41:5a:7b:07:0a:bb:ce:37:a6:
                    7e:b5:b9:f7:2f:01:7c:04:a3:f2:83:9d:c5:ef:67:
                    58:a3:79:0f:8f:ae:09:ac:05:bf:b6:41:a9:63:d0:
                    70:36:49:f7:42:55:e6:b1:c8:9c:57:8e:c0:c7:b5:
                    7e:9a:75:49:0b:7c:d0:30:2c:4a:8d:e5:80:5f:73:
                    73:86:49:4e:6b:24:34:4e:f4:06:a0:45:d9:be:b8:
                    cd:10:5e:dd:50:8f:a9:1b:22:3f:22:2f:8b:d0:c7:
                    b6:3f:c5:c5:69:72:49:4b:bd:3d:78:14:16:77:87:
                    9c:c1:2e:5f:4c:b8:56:ce:5d:13:5d:fc:1f:e1:78:
                    0d:75:58:f6:26:85:12:00:2b:34:f1:7f:dc:18:7e:
                    ba:27:8c:e6:4c:f5:00:e0:24:21:6b:b9:0b:65:54:
                    e6:b1:dd:c7:10:54:c3:56:05:75:00:95:6c:8d:77:
                    01:ca:35:de:79:7c:bd:38:da:a3:9a:59:d5:74:b4:
                    40:4d:73:9f:72:73:48:b2:72:0d:21:52:a4:3e:5f:
                    8d:f9:3c:ec:37:90:aa:61:d4:dd:39:83:0f:13:96:
                    e9:9e:f5:05:b8:a6:9f:b7:79:e6:36:40:e0:b5:b6:
                    53:02:49:82:6a:f2:16:22:c3:3b:d0:47:f3:89:55:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B7:EA:27:EE:0B:43:7C:25:72:BC:E2:C1:E1:1B:A8:FF:28:BB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41759970-026c-3ed4-8eca-de9345120705.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:67:2e:4b:0f:bd:f7:ea:3b:60:d6:64:b1:73:54:8c:ef:bb:
         f1:40:21:ed:21:33:13:3b:3f:dc:61:ee:29:1d:74:29:07:93:
         ed:95:a7:6f:25:3b:0c:e7:28:d5:45:ca:7f:3a:83:8c:b9:1a:
         8b:33:53:68:b3:9e:3c:b7:91:d7:08:66:c4:9c:08:47:07:ee:
         67:c5:f4:52:e3:70:42:7a:92:8d:d4:2f:bd:7e:df:f8:05:e7:
         c6:1c:47:89:3d:47:58:8f:40:77:31:a6:a6:d9:04:1a:80:4b:
         d1:75:ee:bf:4f:8c:dc:58:77:05:1c:bb:e5:3d:35:74:ae:c0:
         68:d0:da:75:d7:19:7a:14:ab:dd:b6:8e:51:cf:a2:ce:a2:4f:
         ac:89:7c:48:bc:17:86:32:ea:80:ab:50:ae:ba:13:eb:61:44:
         af:60:c0:16:a5:b6:76:5e:cf:a9:92:d3:fc:57:0e:a4:29:cf:
         9d:df:a7:d6:0b:3f:92:a9:61:1c:bb:a5:8a:bc:89:6c:19:17:
         b6:7f:1e:9a:be:f8:9e:1c:bf:48:1a:17:92:dd:98:2c:c0:95:
         f4:ae:d4:98:4a:14:53:2b:21:2e:f5:88:e4:47:85:05:e9:8b:
         3f:18:65:d9:e6:ce:88:d4:81:fe:e8:c8:9e:7b:e8:c5:56:99:
         d1:b4:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:00:15 2026 by rpki-client