Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/628690a6-9a5b-3f74-b420-fa507f66e6e9.roa
File:                     628690a6-9a5b-3f74-b420-fa507f66e6e9.roa (raw, json)
Hash identifier:          u8IAYPHGxBfFnTQpGfMEzTyuHKoI45iM42okAOAtlvo=
Subject key identifier:   A2:23:0C:5E:1C:1A:98:3E:E3:F1:F0:55:09:D7:22:B9:74:0C:AE:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAEA6004AD744FEC5CB500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/628690a6-9a5b-3f74-b420-fa507f66e6e9.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     19836
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:ea:60:04:ad:74:4f:ec:5c:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=b484ea3d-7423-4325-aa4d-1061d2ab7aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cf:89:c9:b0:48:8c:e3:1d:23:71:f7:15:0b:
                    c1:07:0a:38:3a:2f:d7:37:6c:81:a9:0a:31:6a:ac:
                    39:c3:37:f4:9a:a7:f0:7d:cd:32:62:98:01:74:53:
                    96:64:aa:35:95:89:56:03:56:5a:9d:30:aa:03:6f:
                    68:68:23:04:af:9a:aa:9b:18:10:0e:b8:89:b0:2f:
                    3d:ce:af:e7:04:ac:d6:93:0b:f0:93:65:55:a9:85:
                    e3:32:da:57:f2:88:c5:93:c9:4a:3a:6c:09:00:ac:
                    b1:5f:56:81:da:ca:b7:ee:9b:89:f8:a3:ae:d4:42:
                    0c:b6:1b:9a:be:2b:e4:d5:bb:12:2c:c5:c3:9b:6e:
                    5e:a1:12:8f:e7:d9:f3:9c:f9:4e:1c:b3:fd:d2:07:
                    51:48:cf:69:b6:7e:bb:a4:6a:43:e9:15:aa:b6:9a:
                    87:bc:74:ce:f9:78:0d:38:f3:25:d0:e6:cd:e3:32:
                    ab:5d:c4:6b:87:d4:19:22:f7:10:98:31:b9:d1:ed:
                    37:38:10:36:04:f5:21:44:5e:40:cc:d5:bf:55:37:
                    19:98:e6:7b:a5:45:6b:0c:75:9e:93:5a:85:4f:35:
                    03:35:d9:74:da:fb:d7:af:97:cf:5e:ab:d8:6f:50:
                    83:e7:a1:0d:f5:0f:d0:f6:97:54:96:f3:38:9f:65:
                    32:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:23:0C:5E:1C:1A:98:3E:E3:F1:F0:55:09:D7:22:B9:74:0C:AE:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/628690a6-9a5b-3f74-b420-fa507f66e6e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:78:60:c9:a7:f5:10:bf:4d:ee:88:4f:47:ca:2f:fa:c6:60:
         23:c2:49:ff:61:2c:81:74:ae:37:e7:eb:9e:0e:e8:b7:b0:71:
         cc:06:c3:43:c1:97:d2:33:8a:d0:68:d2:b8:91:02:c6:2f:d8:
         e5:99:cf:75:9f:54:b6:92:01:12:c0:41:e8:82:26:33:a9:5b:
         5c:67:c2:92:a4:68:ff:c5:0a:42:f0:9c:49:06:c3:71:fa:6c:
         46:04:37:e7:be:82:85:49:a2:51:7a:95:ea:73:25:4b:41:38:
         72:b5:36:75:92:d5:10:6b:b7:f6:a4:fb:4f:0b:c5:31:2f:6e:
         8d:5d:cf:8a:88:22:c2:63:d5:05:af:97:19:a2:61:64:29:94:
         26:50:a0:de:32:2f:d7:9a:26:b3:bb:42:3b:dd:b4:bf:a2:72:
         0b:f8:84:bc:ff:2a:eb:0e:56:76:0f:66:95:23:71:a5:72:1d:
         46:a5:ba:6c:b1:72:aa:b0:c2:35:c1:5e:66:22:3b:f6:38:45:
         01:f8:5c:36:c9:24:c3:18:05:5a:df:1e:f9:f9:7b:4b:a2:3a:
         8a:5b:cb:df:d8:a1:3d:88:c8:5e:b0:f3:cb:b2:6c:b9:3a:11:
         11:ad:63:5b:61:f1:32:3a:c3:ec:b1:d7:4c:27:c5:6d:c9:98:
         37:a3:75:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:13 2026 by rpki-client