Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a4c3928-f1b8-358e-886c-5e6bd0c3c329.roa
File:                     8a4c3928-f1b8-358e-886c-5e6bd0c3c329.roa (raw, json)
Hash identifier:          lFjv/T3XMsc7K4UIKUh62RtGXGq/TXicU/26zGe9Ioc=
Subject key identifier:   32:B8:7A:6A:DD:DF:55:A0:E2:9B:6B:78:8E:7F:5F:C8:81:62:6A:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79773F1ADDBE89B72C600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a4c3928-f1b8-358e-886c-5e6bd0c3c329.roa
Signing time:             Thu 16 Apr 2026 14:09:48 +0000
ROA not before:           Thu 16 Apr 2026 14:09:48 +0000
ROA not after:            Wed 15 Jul 2026 14:09:48 +0000
asID:                     396573
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:97:73:f1:ad:db:e8:9b:72:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:48 2026 GMT
            Not After : Jul 15 14:09:48 2026 GMT
        Subject: CN=5dcfb8ca-071f-4d66-923b-94a92d4f9817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:56:93:18:a0:bc:85:80:e7:30:ba:be:e6:
                    9e:f9:77:c4:e2:8d:c5:02:60:72:5f:1e:c9:0c:26:
                    7e:eb:dc:44:f0:c9:49:25:ca:64:75:b6:68:bd:aa:
                    c2:b4:23:65:46:a8:16:4b:7a:83:15:67:97:b5:a8:
                    22:c7:53:1d:4d:40:34:4a:a6:99:1c:9c:02:3c:1e:
                    c8:eb:54:c7:a9:8c:5d:4e:a9:1a:0e:12:05:cc:0d:
                    c0:36:bc:10:f4:10:f7:c8:76:33:ff:dd:be:f7:5f:
                    14:c1:1c:3e:d5:83:f8:5f:bd:62:59:b2:d5:31:f2:
                    b2:49:76:1f:35:6e:8e:97:df:f0:eb:8f:4d:ab:08:
                    95:db:69:f6:80:41:94:0d:59:cc:5a:e8:20:de:b9:
                    6b:27:ae:4f:94:73:92:7c:c9:b3:4f:44:6d:a1:86:
                    28:30:4b:9e:73:8b:01:e7:61:b7:83:c8:1c:57:18:
                    1e:53:54:ac:3b:43:b9:e7:e2:ab:4e:87:bf:a7:9e:
                    26:38:f8:04:81:90:a0:fb:5b:44:26:fb:cb:b4:12:
                    81:f2:ae:f0:57:c8:03:a0:b5:f7:58:fd:d8:de:03:
                    16:7f:f7:75:a9:2e:5a:00:07:9c:af:83:8c:4d:66:
                    70:d9:01:f2:82:64:8e:21:03:9e:67:29:08:89:14:
                    99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B8:7A:6A:DD:DF:55:A0:E2:9B:6B:78:8E:7F:5F:C8:81:62:6A:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8a4c3928-f1b8-358e-886c-5e6bd0c3c329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:a0:0a:1c:4a:c1:14:4b:ae:3d:b9:9d:5a:d0:0c:39:8c:8e:
         3e:5c:2d:47:00:d2:7a:d4:59:a0:96:0c:9f:db:9f:d5:f4:e7:
         c1:ab:f7:4f:15:65:eb:cc:fa:e5:db:5c:5c:3b:fb:8d:5d:21:
         72:13:58:81:dd:d4:52:94:38:b6:65:b7:1e:c3:cf:fc:88:30:
         48:7e:b8:10:1a:35:4f:c9:72:91:e5:85:99:95:7a:a5:35:95:
         85:05:71:1e:72:c4:6c:a5:1e:79:9c:af:4b:77:b3:5b:d4:2f:
         c6:96:23:75:ca:3d:ff:c6:9f:0d:c6:87:cb:4c:54:c2:cd:9e:
         1a:cb:2b:2f:e3:a9:f0:59:29:36:0e:12:1a:b4:4a:1e:d5:50:
         b2:54:86:b3:72:8a:3e:1e:2a:99:4b:c2:2f:76:f5:b2:7b:46:
         ca:ba:48:e9:1b:a2:9e:55:68:1b:f1:16:31:d2:6f:fc:21:08:
         e7:3d:fa:37:c3:6e:c3:31:62:4c:3d:1c:23:f6:e6:ec:4e:7e:
         ca:8d:7d:4e:ac:b3:2b:c1:f7:5c:b7:d6:d3:32:25:8e:fa:94:
         b1:23:90:ec:f6:6b:31:fd:31:21:5d:ad:81:38:72:56:65:33:
         27:18:12:3b:03:61:49:e0:23:28:0b:2f:37:70:70:06:fb:d7:
         eb:db:7d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:33 2026 by rpki-client