Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4795cf25-3910-31c1-a7e7-eb331e83a23c.roa
File:                     4795cf25-3910-31c1-a7e7-eb331e83a23c.roa (raw, json)
Hash identifier:          lq+LuIJHuWVGl36YOejS4Nb+KcwTbchzCiPx6FQUUWE=
Subject key identifier:   EC:5D:65:76:AC:0E:3F:AF:9D:79:D6:B4:68:32:23:13:5B:15:4C:7D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F080CFC7B48609F25BA0B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4795cf25-3910-31c1-a7e7-eb331e83a23c.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     36632
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0c:fc:7b:48:60:9f:25:ba:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=07b5e869-d739-407c-b7d6-468005b97396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:20:73:e9:55:c7:f5:51:85:36:22:5d:17:39:
                    3b:a5:ed:50:2c:5d:20:ca:a7:11:7f:6e:a6:85:30:
                    d1:6f:be:da:3c:54:f8:2d:74:c6:96:32:ab:f5:1c:
                    d0:78:71:67:5d:14:e2:d9:9c:0e:92:c2:8a:c3:9d:
                    f5:59:4c:ec:7b:34:91:c2:6a:bb:f0:8c:84:8b:e0:
                    d2:0c:99:da:79:73:d5:84:ea:7e:01:21:19:c5:a3:
                    34:2e:c4:47:e9:d8:5b:bc:a7:fb:a2:21:00:00:00:
                    9b:e3:4d:33:6f:39:1c:f4:63:ec:9a:63:a9:f0:c4:
                    f3:b7:e0:ad:a6:02:92:c4:d4:72:bf:4a:51:e8:7b:
                    10:67:2a:21:88:90:3b:71:d2:fc:38:ba:52:c1:cb:
                    3b:bd:31:1f:70:9f:5d:8b:61:18:6e:b1:30:6e:78:
                    ac:62:a7:fd:a4:fa:1a:38:88:fc:6c:09:bf:e9:a0:
                    ef:2b:a9:67:74:aa:22:20:61:db:6a:e5:99:d0:dd:
                    84:d4:26:53:50:f1:a9:c9:e5:34:e5:6f:fa:2e:4b:
                    db:f9:b9:fb:d8:c7:93:6f:24:e5:df:33:0b:50:be:
                    ff:e7:4b:07:02:6f:14:10:8b:b8:cf:a1:ef:66:2c:
                    70:a8:01:ff:fc:0c:bc:7b:b0:ee:ac:55:c2:e8:aa:
                    91:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5D:65:76:AC:0E:3F:AF:9D:79:D6:B4:68:32:23:13:5B:15:4C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4795cf25-3910-31c1-a7e7-eb331e83a23c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:c8:18:99:38:21:c0:a9:3e:fb:bc:32:9a:02:11:9f:44:c5:
         14:3a:81:72:08:c1:27:91:9a:b2:0c:00:fc:fa:52:cc:3b:9b:
         27:85:7c:bf:a9:47:3d:1f:ed:1f:e0:de:72:e7:77:1e:1f:6a:
         1c:41:a5:ee:74:8a:c1:1e:88:57:54:82:cd:22:09:d1:c3:7f:
         2e:a6:0e:c3:4f:8f:ae:52:f4:6e:88:07:eb:1b:29:77:9b:02:
         f0:93:c7:7b:60:ac:1e:bb:9d:a3:73:71:eb:78:44:55:72:11:
         b8:4f:7f:19:ae:00:69:c7:21:10:d0:be:5b:3a:62:fc:0b:6c:
         42:a5:14:d7:a6:a5:1b:1f:cf:e4:cf:26:9a:db:93:d0:ab:aa:
         ad:35:15:41:c9:20:1c:e5:20:09:c1:9a:3e:83:57:26:24:7e:
         95:c8:72:50:da:72:d3:e7:c9:f5:51:b4:5d:d8:f0:99:fd:35:
         84:5b:20:be:e8:d5:81:8e:1e:44:34:f0:82:a1:90:68:c1:b1:
         29:bc:41:e8:12:67:05:49:ab:83:5f:dd:fd:58:dc:03:58:87:
         9d:8c:12:28:b8:54:f8:9b:e2:db:b6:5f:e8:53:2b:d4:0a:5f:
         d6:d7:ee:15:20:e1:30:d8:e1:da:9f:64:8c:f4:99:53:88:7b:
         e5:bf:6b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:48:04 2026 by rpki-client