Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/892fa516-b226-3d99-a338-c4e88f41a7d9.roa
File:                     892fa516-b226-3d99-a338-c4e88f41a7d9.roa (raw, json)
Hash identifier:          v13Xznv8sdDvTiklGv8rAYNA2ltYO/B+hzGwzuXDVVA=
Subject key identifier:   90:00:4B:EB:7F:3A:CD:11:AA:78:6A:A2:E6:B7:55:04:58:DA:E8:3E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA797670F30CB5EAEBDA82880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/892fa516-b226-3d99-a338-c4e88f41a7d9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20362
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:67:0f:30:cb:5e:ae:bd:a8:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=afef94b2-0043-40e6-b818-4b2f28331811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f6:82:a2:ab:da:58:79:69:eb:5c:e9:42:70:
                    1d:69:52:20:d6:7f:1c:33:d2:0e:f4:d0:c4:83:d4:
                    1d:cd:0f:81:d4:2f:7d:ce:c5:46:fc:40:25:5a:25:
                    d3:32:62:0d:41:80:28:dd:8c:19:0a:70:e2:b2:d1:
                    08:b8:1c:96:64:1d:cb:5b:56:9a:b1:3b:d0:8b:b6:
                    10:b0:74:5a:b8:53:20:74:0d:12:6b:e8:6c:04:e5:
                    08:20:2b:cc:79:47:95:9b:82:7c:41:03:9d:c4:f0:
                    bf:50:fe:73:ad:c6:5a:0e:17:a5:75:70:c7:89:81:
                    a2:8d:6c:fc:82:85:f7:6a:0c:6a:5b:f8:e6:6d:37:
                    62:7a:d8:4a:f9:27:63:1e:79:26:cc:af:61:88:2b:
                    d7:5a:78:bd:c9:9d:bd:1f:ad:47:3b:83:0e:f7:97:
                    e6:54:c7:70:a1:4f:69:8a:8a:dd:cf:23:bf:b7:8a:
                    86:7b:ee:81:a9:c8:16:6e:d1:85:ff:2a:b8:b7:bf:
                    e0:8f:f7:b3:43:52:4e:fb:f2:9c:9a:7a:78:ea:07:
                    01:2d:c0:67:7e:5f:f0:80:40:ff:33:46:d2:0e:9f:
                    1c:38:73:ca:1a:eb:c6:8a:b4:23:0f:0b:09:8d:de:
                    49:51:c2:ef:86:b2:5d:b5:b3:91:86:8d:2e:7a:a5:
                    86:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:00:4B:EB:7F:3A:CD:11:AA:78:6A:A2:E6:B7:55:04:58:DA:E8:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/892fa516-b226-3d99-a338-c4e88f41a7d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8b:e6:41:aa:c9:99:99:8d:03:ab:f4:4b:49:c8:c2:cc:d8:
         de:71:fe:55:e7:62:ac:33:7c:60:f2:00:82:41:18:bd:41:4b:
         9d:64:da:a8:3c:e8:07:db:3a:69:0b:4e:12:83:06:78:08:a8:
         ec:e3:13:8a:cb:52:0e:02:91:ee:8a:e3:81:c3:44:b7:80:07:
         e9:5c:dd:b5:9a:2b:43:b7:3b:06:d6:60:43:0b:88:02:c8:d7:
         66:91:7e:af:78:62:b6:c5:f3:36:93:6f:df:27:5b:dc:78:8f:
         e1:71:96:11:ec:9d:72:70:b0:2a:ef:a7:b6:f7:ca:aa:30:32:
         59:0a:6f:e7:bb:08:7e:d6:4c:85:1d:9c:02:8c:87:99:a5:d7:
         0a:36:4c:eb:ac:e4:0f:2a:95:5a:eb:65:09:fe:98:0c:15:a1:
         1e:ba:8d:83:4a:fc:67:d9:0f:be:18:b6:b2:8d:cb:08:f8:37:
         d8:9a:ea:21:ce:e6:29:00:9e:aa:23:51:3c:0d:67:f3:58:76:
         91:72:7b:dd:14:37:85:c5:46:6b:68:b4:67:4b:e1:8e:5d:82:
         d9:5b:4e:10:9b:ca:44:36:9d:6c:2b:dc:1c:0e:83:94:ee:9c:
         1e:27:8c:95:d6:6b:c1:35:b4:b6:9a:ca:b5:b8:66:72:98:03:
         52:5c:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:47:42 2026 by rpki-client