Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7010eafd-c324-31a1-a418-268d13da51d4.roa
File:                     7010eafd-c324-31a1-a418-268d13da51d4.roa (raw, json)
Hash identifier:          59D62wvP4ETXS1SoA9N3WAjw2ei3qK6cN7UiX7/7bGg=
Subject key identifier:   2E:55:6C:1C:9F:84:C0:E6:AF:AA:AE:E0:4A:82:1C:36:C9:CF:FF:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F0672830B27D9B9ED20038DC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7010eafd-c324-31a1-a418-268d13da51d4.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396594
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:83:0b:27:d9:b9:ed:20:03:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=e7f61fd4-325f-4694-953f-d23d78f89cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:b3:5a:8a:15:63:60:2a:06:a9:bd:7e:62:
                    23:3d:66:10:e0:ea:60:17:35:8c:68:18:ea:de:18:
                    a6:4f:fd:a2:86:3b:05:cd:fb:1b:98:1e:87:8c:79:
                    b7:f9:7a:8a:c2:2b:4c:65:b0:68:fc:86:05:93:e4:
                    c1:d5:87:c4:19:b7:94:5c:d2:51:73:ac:c0:57:8e:
                    2f:b5:db:da:51:c3:43:3d:11:27:da:2f:9f:65:f2:
                    58:f6:91:2f:c8:40:38:06:79:d6:28:20:69:25:da:
                    73:3f:39:ae:e3:dd:e0:0f:3f:72:9b:63:dd:a2:88:
                    a8:48:85:9b:95:be:9b:c1:d9:de:e0:e6:e2:f2:6b:
                    d5:85:66:08:97:09:40:af:f0:3a:f7:ed:8c:cb:d5:
                    b8:21:77:85:28:af:21:0a:85:30:23:46:21:75:18:
                    eb:3e:c6:f8:1f:6f:03:87:67:94:a7:9b:a3:d4:7f:
                    eb:8b:99:c4:c2:39:e9:e3:2b:74:50:bc:97:e0:e2:
                    94:ac:54:59:02:2b:86:7a:1d:08:9d:1c:9d:bd:60:
                    db:18:64:2b:3f:c3:5d:24:69:21:82:ee:b5:e8:3a:
                    5e:85:0e:7c:42:cc:f8:55:81:36:a3:08:0c:79:2c:
                    55:59:52:5d:2a:2c:be:66:a1:7a:0c:87:83:71:96:
                    b6:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:55:6C:1C:9F:84:C0:E6:AF:AA:AE:E0:4A:82:1C:36:C9:CF:FF:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7010eafd-c324-31a1-a418-268d13da51d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:fc:bb:14:6d:ad:d3:c8:46:12:ad:7a:5d:f4:bb:c7:0e:b2:
         c2:bf:e6:b2:cc:ab:e1:70:96:1c:25:8f:fe:46:e4:21:61:01:
         1b:75:18:4a:69:2f:ea:32:28:68:31:95:43:ef:90:78:15:3b:
         af:b6:c6:17:59:87:8f:1e:05:e4:95:74:8f:bb:42:da:f7:ca:
         76:15:57:a0:ab:8e:42:71:33:51:20:38:72:db:09:f4:aa:01:
         66:c1:9f:df:76:30:83:24:d4:32:3b:8e:d1:9e:4a:1f:7e:37:
         54:51:25:a5:1a:5b:8c:be:e7:d4:0f:fe:c8:c2:4b:63:87:6b:
         03:1f:3c:f2:ff:1c:3f:97:4a:c5:d4:90:7f:2c:11:7e:a8:c6:
         5c:6e:b0:10:ab:81:f6:48:9e:ed:c5:e6:28:a6:7f:f8:8a:4f:
         e0:cd:17:e1:14:52:93:5a:9b:6f:53:8f:fb:e2:4f:71:c2:c6:
         97:65:05:a2:b9:61:01:a8:20:b1:af:ec:b0:32:73:75:0c:2b:
         2c:a0:90:d1:20:10:81:70:a8:81:aa:cf:18:c6:87:e7:b0:f3:
         28:0d:64:ae:ba:e1:c0:15:7f:91:1e:dd:e5:5a:16:2b:45:7a:
         98:a8:22:cd:45:df:00:21:22:4d:2b:eb:38:3a:43:82:5e:94:
         31:5e:10:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:23:40 2026 by rpki-client