Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7af4decb-2f7b-377a-8ab1-49e25b171d21.roa
File:                     7af4decb-2f7b-377a-8ab1-49e25b171d21.roa (raw, json)
Hash identifier:          O5UPiVCn9XkRk/u3Dx2r5ORiZvtK22UUCqOXVKMp9Xc=
Subject key identifier:   35:AA:C3:DF:FC:6D:1F:77:1F:8F:3E:B0:6B:AE:43:39:A7:88:E8:D7
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFC1436E98576F6CBE1325980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7af4decb-2f7b-377a-8ab1-49e25b171d21.roa
Signing time:             Thu 28 May 2026 15:06:01 +0000
ROA not before:           Thu 28 May 2026 15:06:01 +0000
ROA not after:            Wed 26 Aug 2026 15:06:01 +0000
asID:                     396583
IP address blocks:        192.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:14:36:e9:85:76:f6:cb:e1:32:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 15:06:01 2026 GMT
            Not After : Aug 26 15:06:01 2026 GMT
        Subject: CN=9ac4e833-68c1-4019-a50c-ae1205317206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:66:e3:25:e9:8e:82:95:00:56:e1:9d:fb:c2:
                    34:09:ae:40:fd:54:86:bf:39:08:ac:6c:62:62:66:
                    36:35:ac:64:fb:75:07:6e:4b:f4:2d:40:f5:e7:08:
                    fe:f9:42:0d:52:24:2b:55:86:8f:38:24:7d:a5:82:
                    2d:c5:e8:1b:be:da:fc:03:2b:17:f7:77:e9:cd:82:
                    3f:af:b1:7b:35:43:5c:05:29:08:5f:19:5a:f3:5a:
                    a7:47:f1:c4:6e:00:23:c8:b2:70:d3:83:96:8c:d5:
                    ec:56:ad:41:60:63:36:16:fc:4b:3b:d2:70:b6:8d:
                    26:a5:45:cb:04:d4:b2:b6:da:89:9b:b4:96:00:c6:
                    63:41:20:c1:70:bf:94:e8:6f:60:aa:f3:44:63:e9:
                    6d:b3:7e:2a:b5:b6:9b:3e:4f:c7:d7:70:4a:2c:6b:
                    33:f7:62:2f:38:f3:04:f3:78:ea:10:ed:31:4b:74:
                    82:db:97:30:a1:bb:5f:4b:fc:9d:f2:9c:51:5b:3b:
                    91:71:37:62:ec:1f:e6:6f:aa:67:a6:e6:9b:94:7d:
                    72:16:ab:f4:50:71:6c:8f:ec:dd:56:f7:c9:6b:63:
                    72:8f:c2:d6:18:76:37:cb:ff:83:14:0b:53:6a:83:
                    3d:2c:62:5b:63:95:92:0c:60:c8:c8:5f:04:e2:a0:
                    c8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AA:C3:DF:FC:6D:1F:77:1F:8F:3E:B0:6B:AE:43:39:A7:88:E8:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7af4decb-2f7b-377a-8ab1-49e25b171d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:1c:e4:8c:c7:41:57:18:5d:1a:6f:ae:58:d0:65:ac:5b:3f:
         ca:a1:ea:d1:5b:44:0e:2b:fc:a2:fa:ba:70:54:5a:85:68:0a:
         98:b1:b2:86:aa:10:d1:ad:71:ab:60:bd:5b:e0:8d:8d:01:0a:
         5f:95:db:78:9f:bf:e1:87:96:37:a6:1f:fb:4e:a8:ec:31:ab:
         a9:0e:da:b4:0e:06:44:b8:54:06:31:14:68:50:94:e6:19:1f:
         78:03:14:74:64:95:a0:e6:e3:dd:bc:4e:4e:b0:71:de:95:80:
         c5:95:4e:7b:bf:ca:cb:0a:5c:b9:e9:46:2d:3a:1e:8f:3f:6e:
         74:d8:5b:c3:54:40:b9:93:6f:72:04:49:8b:e4:27:38:18:af:
         a1:af:79:a5:ee:74:90:72:00:63:cf:bf:cf:a5:b4:45:4d:64:
         35:32:a7:49:c5:d5:6d:2d:fb:06:65:ac:19:05:c4:fb:db:a7:
         5d:7c:9a:c0:f0:26:0e:b1:9a:97:35:89:72:1b:d4:99:d6:63:
         3f:1e:ce:be:89:2b:16:c1:55:54:b3:60:4f:85:97:ae:34:5d:
         88:08:6c:8a:ca:3f:6c:7a:2b:0d:77:76:0d:b8:89:55:64:a5:
         4b:26:43:fd:69:7d:57:33:77:bc:79:4a:b9:98:4a:3b:44:d4:
         6c:53:4a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:54:44 2026 by rpki-client