Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cda31f7-a5fc-3190-b281-2acca24d9df0.roa
File:                     4cda31f7-a5fc-3190-b281-2acca24d9df0.roa (raw, json)
Hash identifier:          pzCfgPTlVIujBYo5TwkqYNnseEwT0C0Mi7A/+KjvAQg=
Subject key identifier:   C6:48:14:1B:CC:7D:ED:E8:2F:4A:18:13:AE:3F:31:70:0C:D4:2D:11
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06728A80FD537F9DE8D0EB80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cda31f7-a5fc-3190-b281-2acca24d9df0.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     21313
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:8a:80:fd:53:7f:9d:e8:d0:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=3e818097-ee92-4468-89de-e91ab0b92567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:a2:a3:6b:e5:4f:d7:70:44:97:e2:4b:a5:
                    96:a2:b1:95:c0:02:b6:79:2c:d4:27:4b:61:98:99:
                    37:d0:d4:83:7b:de:29:c8:d2:26:da:9e:2f:42:e9:
                    33:5e:f5:39:fb:e0:96:65:2c:85:a9:44:7f:9d:d9:
                    45:df:8e:f5:fd:a8:6f:b8:9b:f3:08:9d:61:07:64:
                    67:7a:16:e8:56:80:73:0b:45:09:57:72:fc:66:4e:
                    e3:c4:94:a3:ef:a7:cd:02:47:4f:17:72:e0:96:de:
                    c2:5d:44:7f:b9:e6:2d:18:85:50:eb:9b:a7:14:b6:
                    51:a6:81:c1:89:2f:94:66:1b:03:91:61:11:87:d0:
                    35:a0:eb:fb:0a:80:f4:e4:23:f6:ba:c7:70:06:bb:
                    0c:15:c4:d0:69:fa:90:be:ba:f9:78:c9:4c:ed:b4:
                    e2:e1:d9:4a:4c:fc:29:30:42:c4:d2:7d:95:4d:1d:
                    71:ae:92:56:5b:42:b6:64:2a:c6:25:ea:23:7c:af:
                    25:59:46:c9:d9:5d:d1:c2:bd:14:32:8e:e0:52:64:
                    bd:51:38:c1:98:c9:84:fe:e8:24:dc:0a:ff:49:33:
                    79:8a:24:b4:fe:d6:85:da:b4:9f:00:9c:97:79:47:
                    03:71:4e:9c:8b:c5:08:5e:94:44:2a:6c:74:a2:11:
                    15:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:48:14:1B:CC:7D:ED:E8:2F:4A:18:13:AE:3F:31:70:0C:D4:2D:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4cda31f7-a5fc-3190-b281-2acca24d9df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:61:55:cb:3c:c5:61:78:0e:ae:f3:36:83:17:7e:f8:db:e4:
         e8:8f:8d:e4:a4:c3:11:be:d8:24:d6:99:60:67:ff:91:fe:f7:
         be:31:7b:6e:f5:3a:74:f4:b0:01:b6:dd:7e:80:c4:88:0a:6c:
         3e:7c:b3:33:c6:38:e2:af:d4:85:01:0b:fa:79:27:25:e3:d9:
         15:f8:fe:09:93:37:af:6d:88:2f:ec:b3:4b:f0:c4:96:6b:33:
         f6:91:52:fd:32:c6:94:51:81:62:ed:3d:c1:68:67:94:83:2a:
         0e:41:6f:49:6a:fb:0c:75:f5:50:90:2c:a5:4e:14:93:7a:86:
         a1:28:e8:fb:65:42:88:59:46:ee:10:14:ec:66:b8:0d:07:de:
         26:32:7b:48:3f:7a:92:89:34:42:bb:c6:e4:80:54:7a:e2:ee:
         e9:73:a5:5c:f2:c5:e5:0c:b4:7c:f7:bc:57:8d:87:6a:40:18:
         d5:32:e6:66:e0:5c:a6:93:2e:51:63:0c:71:ba:ab:d4:52:6d:
         0e:d7:8f:ab:04:9e:27:3b:f6:7c:09:86:c2:ed:58:71:76:a8:
         fe:5e:cb:fd:59:cf:9e:b3:d1:3c:32:6e:1b:1f:f1:ca:90:39:
         b6:91:39:5f:fa:5a:ae:55:11:b6:28:c4:2c:f6:b1:13:62:42:
         b1:e4:de:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:46:38 2026 by rpki-client