Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9231f9cd-1497-3810-982a-eb846eed559d.roa
File:                     9231f9cd-1497-3810-982a-eb846eed559d.roa (raw, json)
Hash identifier:          QzKW1/oMJewXXWfXV9SZfRhVEC5odEg0MKxJ09VS380=
Subject key identifier:   6C:13:EB:45:F7:7C:82:95:41:C7:AB:E4:55:AD:F6:51:27:36:87:A5
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79A2D96FF2B4EF1D30680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9231f9cd-1497-3810-982a-eb846eed559d.roa
Signing time:             Thu 16 Apr 2026 14:09:50 +0000
ROA not before:           Thu 16 Apr 2026 14:09:50 +0000
ROA not after:            Wed 15 Jul 2026 14:09:50 +0000
asID:                     396541
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9a:2d:96:ff:2b:4e:f1:d3:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:50 2026 GMT
            Not After : Jul 15 14:09:50 2026 GMT
        Subject: CN=cd373590-d324-4aa3-bcf7-136a9c486c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4b:e7:bb:66:c2:f7:5b:6c:4e:01:06:0b:9d:
                    49:70:88:24:04:58:cc:a5:7c:40:5f:ac:d5:76:48:
                    cd:4b:5a:16:f2:76:af:91:51:c7:c1:5c:b4:09:7f:
                    e1:0a:15:c7:cf:98:84:76:f9:72:50:0a:e0:b1:60:
                    aa:f5:63:a7:f0:ce:d1:cf:06:10:4c:a1:f4:31:42:
                    a7:35:70:38:21:20:e0:30:64:b7:ee:79:69:87:9e:
                    aa:9c:b3:60:c1:cb:e3:11:13:32:5e:84:98:6d:17:
                    46:56:45:92:05:a5:7c:03:8c:9f:02:01:01:62:f9:
                    9c:b6:3d:1c:69:24:b7:0c:0e:bd:66:37:98:88:8d:
                    6f:6b:a1:12:69:0f:a0:50:70:6a:fa:20:49:37:1c:
                    a0:0e:6c:b0:5d:ad:8a:51:fb:02:1b:00:98:c3:12:
                    8f:78:de:2c:c6:f6:0e:cd:97:3e:61:87:70:46:57:
                    1c:0d:aa:0e:48:53:eb:38:98:b6:59:07:c8:58:7f:
                    88:17:58:fb:67:09:0c:c7:f4:ad:c4:c6:fa:25:05:
                    76:48:57:ed:0d:7d:42:11:87:6d:ec:79:e3:78:e7:
                    54:7b:e3:cb:f7:bf:74:49:cd:92:61:a7:9f:b9:59:
                    5f:fc:44:82:8c:a2:e1:c7:47:9e:b8:4f:32:ef:16:
                    f3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:13:EB:45:F7:7C:82:95:41:C7:AB:E4:55:AD:F6:51:27:36:87:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9231f9cd-1497-3810-982a-eb846eed559d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:47:1a:f7:43:07:5a:f2:db:df:2f:c0:41:48:a7:11:f6:24:
         13:f3:55:5c:6f:8c:08:81:cf:1b:12:68:da:81:80:8e:28:1d:
         a7:2b:c2:c2:01:d7:5b:6d:e6:6d:58:6c:83:23:b1:07:4c:ec:
         fa:e1:41:e1:7d:49:80:53:f2:d1:f2:aa:31:89:84:46:e3:3d:
         6c:a3:c1:4c:28:74:b2:cb:cc:ec:38:1c:26:72:e8:fa:04:76:
         06:ef:d4:60:4d:c1:84:ed:01:e8:62:30:4b:63:f7:b9:00:5d:
         de:a5:22:11:ba:73:2c:52:86:a2:17:b0:66:7f:30:d6:9f:76:
         37:77:32:48:4f:b6:10:e2:c9:5d:9b:fc:b1:6c:f6:23:2b:ad:
         b9:33:b7:aa:43:8a:88:0e:ef:89:32:24:1c:57:8e:58:6d:89:
         5c:60:69:06:47:88:e0:c2:e0:be:4d:4a:f3:c1:aa:63:f3:ff:
         53:d0:e5:8b:fe:df:84:64:7f:26:e5:f0:cc:47:3e:1a:d0:8e:
         ad:48:71:7a:e8:69:b0:31:76:07:3c:27:cb:1a:0a:d4:2b:e9:
         d5:81:e2:48:07:bb:66:38:f8:8d:90:c1:9e:46:ec:55:50:4e:
         30:0e:ea:dd:c4:b5:54:88:6d:44:a7:3a:5b:31:18:58:62:1b:
         26:d4:5b:60
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Gt5otlv8rTvHTBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNjE0MDk1MFoXDTI2MDcxNTE0MDk1MFowLzEtMCsGA1UEAxMk
Y2QzNzM1OTAtZDMyNC00YWEzLWJjZjctMTM2YTljNDg2YzViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0vnu2bC91tsTgEGC51JcIgkBFjMpXxAX6zV
dkjNS1oW8navkVHHwVy0CX/hChXHz5iEdvlyUArgsWCq9WOn8M7RzwYQTKH0MUKn
NXA4ISDgMGS37nlph56qnLNgwcvjERMyXoSYbRdGVkWSBaV8A4yfAgEBYvmctj0c
aSS3DA69ZjeYiI1va6ESaQ+gUHBq+iBJNxygDmywXa2KUfsCGwCYwxKPeN4sxvYO
zZc+YYdwRlccDaoOSFPrOJi2WQfIWH+IF1j7ZwkMx/StxMb6JQV2SFftDX1CEYdt
7HnjeOdUe+PL9790Sc2SYaefuVlf/ESCjKLhx0eeuE8y7xbzcQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGwT60X3fIKVQcer5FWt9lEnNoelMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTIzMWY5Y2QtMTQ5Ny0z
ODEwLTk4MmEtZWI4NDZlZWQ1NTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCpdHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBDRxr3Qwda8tvfL8BBSKcR9iQT81Vcb4wIgc8bEmjagYCOKB2nK8LC
AddbbeZtWGyDI7EHTOz64UHhfUmAU/LR8qoxiYRG4z1so8FMKHSyy8zsOBwmcuj6
BHYG79RgTcGE7QHoYjBLY/e5AF3epSIRunMsUoaiF7BmfzDWn3Y3dzJIT7YQ4sld
m/yxbPYjK625M7eqQ4qIDu+JMiQcV45YbYlcYGkGR4jgwuC+TUrzwapj8/9T0OWL
/t+EZH8m5fDMRz4a0I6tSHF66GmwMXYHPCfLGgrUK+nVgeJIB7tmOPiNkMGeRuxV
UE4wDurdxLVUiG1EpzpbMRhYYhsm1Ftg
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:20 2026 by rpki-client