Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96c83b-16d4-3986-be07-cd9b26be2fd0.roa
File:                     be96c83b-16d4-3986-be07-cd9b26be2fd0.roa (raw, json)
Hash identifier:          o9B/gBooAWAhz0u0cELekCaI4xYZATx1in2Ecdlk67Q=
Subject key identifier:   D4:4F:67:11:FB:C9:F8:8F:CF:A9:C9:4C:CE:AA:43:34:AB:E2:D0:45
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE345CA68209CA4CCE680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96c83b-16d4-3986-be07-cd9b26be2fd0.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396597
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e3:45:ca:68:20:9c:a4:cc:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=e11429a9-39a2-45cc-85c3-9aa12d8d5e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:0d:3e:d9:fc:97:57:07:18:3c:b4:46:71:
                    8b:c1:4e:bd:da:9b:6b:9f:4c:9c:bd:55:b2:41:f3:
                    19:eb:93:6c:0c:ad:2a:84:2e:13:4b:6e:5b:60:6f:
                    63:d3:d0:74:9e:84:79:d2:48:3d:41:ff:c3:a3:fe:
                    72:96:7e:c6:0a:86:31:2c:bd:0f:79:12:9f:1f:f9:
                    ab:ca:9a:be:7f:6a:fd:49:05:f4:da:9d:57:0c:22:
                    e4:9a:80:d4:52:d1:50:ea:cc:f0:23:ea:45:77:14:
                    d1:f6:f7:f9:e3:2d:1e:96:2a:5d:4b:a7:5b:d8:cc:
                    36:90:f6:c9:ee:ca:dd:6c:29:f8:21:52:12:f5:b3:
                    36:a3:69:b5:d8:c4:17:7e:0d:7a:d3:fc:c8:fd:d4:
                    fa:52:8d:cd:d6:b9:ff:9f:66:70:0f:b8:e3:8d:15:
                    2f:c6:fe:63:7f:90:dd:5f:5f:11:64:d7:4e:15:f0:
                    20:c8:59:c7:9a:d8:14:5f:66:ed:58:7e:73:9e:d7:
                    75:74:21:d1:ee:bf:27:b4:71:30:4e:7d:fe:1f:74:
                    f0:de:e0:a2:34:2f:d0:19:f2:6b:9f:2f:63:05:ec:
                    16:e1:3a:14:6e:04:c3:57:3c:e4:be:f4:83:8e:ca:
                    4f:ae:28:3f:3b:96:4f:1a:9a:bb:a6:1b:c1:d6:a6:
                    d6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4F:67:11:FB:C9:F8:8F:CF:A9:C9:4C:CE:AA:43:34:AB:E2:D0:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/be96c83b-16d4-3986-be07-cd9b26be2fd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:72:8f:3a:fc:8c:43:fd:1e:ba:ae:ce:6c:89:e9:f5:f9:d1:
         31:a0:64:42:a2:b2:34:3d:45:14:39:a4:c8:d6:02:c5:33:92:
         55:4e:07:04:54:fc:86:2d:df:7d:20:75:a8:67:28:6a:97:a6:
         4c:3b:e4:26:ab:3f:86:e7:ba:ce:15:97:44:b4:e6:ed:52:c3:
         ac:6e:5c:5f:00:08:96:5a:17:eb:63:2b:9d:44:43:3f:55:ba:
         c9:8d:66:02:dd:23:60:b1:e6:40:5c:3b:43:12:b4:68:f5:f0:
         0f:07:d3:83:b6:8d:99:c1:e6:05:e8:7a:68:b5:3b:23:c1:cb:
         22:33:84:23:f4:8c:2f:c3:98:f4:cd:49:9c:e6:9e:9f:cb:12:
         41:dd:a8:be:b0:11:25:cd:22:9b:e8:69:1e:00:31:86:47:7a:
         da:af:97:41:1d:69:bf:33:19:8e:26:c3:1e:47:a2:74:af:17:
         74:4c:59:11:5b:92:bc:8c:a0:48:fe:93:8d:53:7d:6b:5a:8d:
         89:d5:92:1c:98:3a:02:10:57:15:47:63:d6:3a:02:5f:69:ad:
         d6:28:34:8f:04:69:67:ef:8e:fd:86:97:73:00:2e:e5:36:9f:
         d4:3f:8c:b3:a0:97:22:f0:ff:fd:2e:00:a7:53:cf:20:ee:13:
         a8:a4:54:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:48 2026 by rpki-client