Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb8b1f97-aee5-390b-98f5-6bf39e9fe296.roa
File:                     bb8b1f97-aee5-390b-98f5-6bf39e9fe296.roa (raw, json)
Hash identifier:          qtkYXh3NWMUsyhZpBU3ZTA6LH8Dk5vOtMuOAGOVsz/0=
Subject key identifier:   A4:C6:B2:39:0E:BD:53:18:33:66:9E:2E:59:3C:98:F6:4C:EE:B5:55
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA5AA81DD91C192166B461900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb8b1f97-aee5-390b-98f5-6bf39e9fe296.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     25485
IP address blocks:        192.42.175.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:81:dd:91:c1:92:16:6b:46:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=8515fa9b-89d5-4066-b80e-889f865e68a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e2:52:e0:59:66:ad:09:e9:0f:60:1c:d0:21:
                    6c:e9:19:51:f5:37:c9:80:38:43:bd:1b:d3:25:eb:
                    f4:25:f6:f7:87:45:b0:a3:e6:fc:e4:43:a9:6e:1e:
                    19:50:6b:fa:9f:66:35:78:dc:3d:de:f0:c2:cb:dc:
                    56:af:a3:3f:ce:04:82:56:84:d8:59:dd:66:69:c5:
                    f9:4c:bc:4c:8d:c3:51:fa:06:73:b5:1d:ff:25:cb:
                    b2:10:fa:99:82:cb:28:b5:6c:37:08:56:7f:de:65:
                    20:06:c3:4e:3c:d9:25:fd:7a:87:fc:85:d4:96:3e:
                    e9:18:0f:cc:67:a2:6d:eb:fd:cb:c4:dd:30:d7:85:
                    fe:7b:f0:1c:56:d3:99:ce:23:d6:62:6d:1f:e4:f4:
                    d0:f9:7f:71:53:23:83:d1:7a:35:6d:d2:01:03:0d:
                    29:f3:13:61:b8:8d:3c:f0:9a:50:cc:58:f7:98:c9:
                    97:14:74:51:2f:f0:d3:38:7b:d4:ea:07:53:fe:5f:
                    87:4d:2b:b6:a6:0a:11:79:7c:ac:8a:c6:fd:9f:2c:
                    6a:27:fc:4a:b3:ef:55:8a:09:a5:f0:90:2c:6d:99:
                    af:08:c8:aa:ad:9a:03:0f:78:8a:a4:91:0e:fc:aa:
                    71:89:b4:6b:3d:bf:a8:84:97:ae:a6:ef:f7:e8:a1:
                    a8:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C6:B2:39:0E:BD:53:18:33:66:9E:2E:59:3C:98:F6:4C:EE:B5:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bb8b1f97-aee5-390b-98f5-6bf39e9fe296.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.175.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:d4:5d:50:e9:d6:b7:e2:57:b0:fc:99:2f:f5:c0:48:3c:03:
         ee:f5:a8:d2:a6:dc:12:08:48:f2:1b:29:70:6f:03:00:36:6f:
         1d:a1:c9:00:00:72:1e:2d:be:38:96:c8:ff:9f:0a:f8:1e:df:
         e1:02:a7:21:ff:ff:64:a3:ce:18:0e:ef:d6:a2:07:8b:1e:de:
         d2:83:44:84:47:2b:33:bf:dd:ef:cd:4a:57:f6:7f:d4:f2:24:
         7f:c1:98:9a:64:15:d2:f3:f8:83:ab:69:bc:9d:2e:4b:e3:38:
         0d:7c:c8:57:f8:66:42:60:35:77:24:df:72:4e:1a:cd:c4:fd:
         e3:8d:4d:7e:b5:bc:ff:35:f9:ef:9f:10:0a:30:93:19:a3:7f:
         ae:d2:25:98:8b:e4:90:24:c6:7f:47:36:c4:f6:0a:37:44:14:
         e9:f4:9d:d9:f0:1f:19:3c:23:1f:01:b2:0c:5e:8d:74:e8:e1:
         b7:0a:38:de:cc:f0:e9:ef:02:87:6a:72:42:e5:de:97:7a:92:
         a0:75:5e:06:ea:ea:e3:cd:64:41:17:1a:0b:06:a7:5e:05:06:
         b5:18:ef:ad:7d:11:0a:19:64:b5:00:e3:ae:8d:b5:26:f0:74:
         5d:06:b8:84:be:33:d7:59:50:8f:bd:de:47:60:ce:32:16:0a:
         13:01:83:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:55:30 2026 by rpki-client