Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/500d0ca3-384b-376f-96af-84b2b76fb0ed.roa
File:                     500d0ca3-384b-376f-96af-84b2b76fb0ed.roa (raw, json)
Hash identifier:          KVX9ZuveNWRW8b+BCpiuiJoJlG59RPybNTGwuuMdHT0=
Subject key identifier:   93:49:91:82:22:D7:CD:3A:21:57:05:C6:F0:DA:BD:D2:0C:E0:59:2D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727936BB53ABB8454B3F00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/500d0ca3-384b-376f-96af-84b2b76fb0ed.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396560
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:79:36:bb:53:ab:b8:45:4b:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=b828f95e-90c2-4fc9-b668-629154a29a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:a8:df:77:59:1b:55:11:54:4c:ac:d4:9f:
                    64:a9:63:61:78:96:0b:7e:9d:99:d4:4e:58:29:bd:
                    83:a4:74:37:cc:b7:c6:2a:e1:37:ca:4d:d5:1b:fe:
                    e7:d5:f4:88:3c:29:33:6e:ff:ea:fc:18:4d:e9:b7:
                    7c:03:9d:14:0d:4b:8b:96:6d:6a:92:10:81:4f:2c:
                    f6:2f:83:ba:bb:ab:33:e2:73:f6:67:46:62:17:12:
                    b1:68:de:5e:3e:19:8c:3f:49:45:88:ff:49:b5:0b:
                    90:a9:98:ee:a0:98:dc:e1:75:d8:44:9d:25:99:a4:
                    1a:34:db:23:32:2e:d5:53:96:89:29:7b:7d:08:f1:
                    e4:7e:bb:e5:0a:9c:27:38:e7:7d:00:8e:c8:e5:c6:
                    e7:69:9a:b8:6c:c6:fa:4e:12:88:62:2f:e0:e0:8e:
                    0a:ed:51:a1:9a:a6:af:8c:0d:f0:f1:ca:01:77:7e:
                    06:f3:bf:42:02:f4:2e:d8:d7:6a:70:d0:48:70:5f:
                    37:4f:e6:80:26:cd:df:3f:c8:67:1b:6f:c6:49:ba:
                    6f:98:30:73:24:5b:9c:7e:6b:ce:d6:24:83:ef:34:
                    c8:9a:ec:1c:c1:0f:1f:8f:30:6c:83:2c:d4:84:10:
                    9b:bd:0c:d9:69:b2:30:87:93:04:47:71:7c:af:ee:
                    1e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:49:91:82:22:D7:CD:3A:21:57:05:C6:F0:DA:BD:D2:0C:E0:59:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/500d0ca3-384b-376f-96af-84b2b76fb0ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:f4:d0:4d:53:17:d0:44:2f:15:48:20:e7:ab:6b:69:94:27:
         06:79:57:d1:b4:3c:67:18:10:96:e1:e7:33:35:4d:72:f1:56:
         16:b5:a8:76:b8:b9:0a:84:72:e5:82:6c:88:1a:e7:ac:d8:77:
         8b:0f:b2:fd:93:78:2d:48:7e:de:14:ab:61:d7:0f:c7:02:50:
         2d:d4:20:20:da:12:8a:07:26:f1:32:f0:56:5e:9a:98:01:50:
         fe:bc:c5:c2:a8:4e:cb:30:c4:21:66:c7:ae:9d:c9:9b:e0:4d:
         53:a8:7c:61:91:a1:43:0f:63:a6:2d:cc:61:10:ba:a4:86:2f:
         4d:6f:cc:41:88:41:31:38:51:b9:68:55:7e:0c:c9:13:fe:c2:
         91:d4:a9:fb:16:64:2c:93:b3:ee:d3:98:46:70:85:91:8c:a2:
         71:1a:4f:cf:42:78:47:bc:c5:d2:fd:15:91:91:47:38:c8:4b:
         ac:e6:0a:f2:6b:e1:6b:4b:2c:eb:74:ae:cd:19:f4:b5:d4:69:
         c9:15:65:18:d0:01:a5:c5:81:f2:3a:b7:85:1b:ef:3e:ea:b0:
         42:87:39:6b:7f:2a:8c:bf:05:57:db:d0:81:3d:5f:c3:b7:4d:
         d6:74:60:31:0c:5b:2b:03:5c:fd:ab:e6:76:9f:5c:fd:1e:92:
         eb:ef:fb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:18:04 2026 by rpki-client