Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/910fb4d7-9ee0-3378-bc3d-871525cd14c7.roa
File:                     910fb4d7-9ee0-3378-bc3d-871525cd14c7.roa (raw, json)
Hash identifier:          orARBHOVdaWaKtTD2UsNje5Tzp4yObIaAmkT1I+LJb4=
Subject key identifier:   62:13:70:95:5D:3B:C3:EF:E1:E7:8A:16:F4:BE:1E:8D:7F:66:35:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F067282B23E0D4CCCAC960EE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/910fb4d7-9ee0-3378-bc3d-871525cd14c7.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     20172
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:82:b2:3e:0d:4c:cc:ac:96:0e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=3e259110-0e31-4232-b561-c3993c133a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:d8:71:1e:b4:18:c8:89:12:98:03:d0:52:
                    1e:36:fa:ba:9b:b8:99:7e:f6:fd:44:46:2d:8f:98:
                    d7:ad:a7:6b:87:59:6f:f8:51:cf:82:93:cf:9c:33:
                    7b:dd:93:74:13:e8:fb:d1:02:bf:f3:8b:95:b6:a3:
                    c2:e4:82:89:bc:06:dc:ef:53:28:33:72:c9:f1:3c:
                    1a:60:6e:d7:07:93:8b:f3:a7:19:de:7c:89:70:ae:
                    bc:c7:0c:e0:2a:93:ec:0b:43:de:2c:bb:c4:51:38:
                    06:3a:b9:d7:3b:0b:61:d7:80:55:2e:17:4c:f7:c4:
                    a1:e1:6b:c5:42:e2:04:03:6e:18:f4:1c:13:c3:05:
                    3d:52:6c:b1:4a:30:a5:c3:8f:aa:65:86:09:e5:0c:
                    79:5a:a6:7f:0a:b4:f4:00:bc:00:fb:26:a6:2e:69:
                    2d:1f:6c:77:86:2f:fc:15:a0:10:58:93:ae:73:2a:
                    d1:5e:32:f1:39:5e:66:f5:39:37:2f:91:63:99:5e:
                    2a:07:79:3a:47:94:d9:a9:bc:56:a6:dd:80:ca:cb:
                    8a:b3:4d:f9:42:de:65:c2:dd:38:66:3d:79:15:3f:
                    4b:fd:ab:42:be:a9:56:83:ad:a3:c4:17:16:fb:c6:
                    1c:ff:37:35:f2:eb:13:93:59:77:48:b9:5e:26:1c:
                    bc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:70:95:5D:3B:C3:EF:E1:E7:8A:16:F4:BE:1E:8D:7F:66:35:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/910fb4d7-9ee0-3378-bc3d-871525cd14c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c9:c2:d6:20:dc:f8:63:f2:06:bd:d6:72:bb:88:ac:71:35:
         bb:dc:e6:89:56:89:02:27:53:b7:7d:6b:4f:d2:be:fd:81:99:
         c3:a5:50:a9:a9:89:0a:23:42:b1:c1:fd:2a:68:fd:3d:e8:b5:
         c1:5d:0f:5e:2e:69:73:cb:be:85:c8:b2:a2:15:73:73:b4:84:
         2d:cf:c8:15:60:f9:3a:23:f5:9a:64:79:b4:52:8b:c5:5b:7c:
         fe:99:75:4a:d7:f0:30:bb:95:48:ec:0c:37:b2:2e:3f:40:83:
         f4:54:4f:a6:01:59:d0:a6:da:25:66:74:88:2b:0e:f2:5e:a3:
         d9:61:38:0f:93:3b:da:1f:22:2f:db:5f:44:bb:af:df:1c:71:
         52:09:03:52:c8:46:bd:47:f5:e4:56:eb:f2:d1:03:d8:52:de:
         31:bb:42:44:71:5c:18:ba:c9:0e:6a:48:ab:3a:2b:4d:73:10:
         5a:a6:6e:0e:5a:e4:36:9b:98:1f:4b:9d:72:eb:7a:9f:29:c8:
         fa:6a:8a:a7:95:df:77:ee:82:7e:65:23:68:a0:bd:ad:91:cb:
         01:59:96:5d:41:dc:2c:94:00:47:e1:13:6e:4b:ff:84:18:ee:
         a1:98:52:4d:b7:4b:f9:ce:e1:dc:3e:1b:f6:b1:8e:3d:e5:7f:
         19:ab:cf:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:43:46 2026 by rpki-client