Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c88eb9ff-6e2b-3789-be2f-2178e93ab066.roa
File:                     c88eb9ff-6e2b-3789-be2f-2178e93ab066.roa (raw, json)
Hash identifier:          qK1Eu09WQW6Qz1sZORhvRbFIC5OCZz0J/cz+A1qgzXg=
Subject key identifier:   DB:D3:84:A8:F0:49:DE:99:6A:41:99:AD:41:32:43:8D:9E:7F:D0:33
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D86B79BF9DD9EB99BDF451D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c88eb9ff-6e2b-3789-be2f-2178e93ab066.roa
Signing time:             Thu 16 Apr 2026 14:09:51 +0000
ROA not before:           Thu 16 Apr 2026 14:09:51 +0000
ROA not after:            Wed 15 Jul 2026 14:09:51 +0000
asID:                     396612
IP address blocks:        192.42.93.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:b7:9b:f9:dd:9e:b9:9b:df:45:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 16 14:09:51 2026 GMT
            Not After : Jul 15 14:09:51 2026 GMT
        Subject: CN=586428b5-af79-4a6c-9110-7ee354b6be62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8f:d5:39:65:67:64:4d:bf:0d:a2:af:5f:c6:
                    ec:b0:66:da:78:f0:9f:76:66:db:4a:ff:b6:18:d6:
                    21:ee:ca:b9:f6:bd:b4:3d:8d:d3:34:bb:72:83:5b:
                    8f:d9:bf:f0:a6:02:ac:71:5d:2b:47:9e:57:e6:e5:
                    02:6a:e9:f9:e5:fb:29:24:e1:81:23:d1:61:cd:16:
                    81:58:5a:05:45:46:47:0e:50:26:3d:83:0e:a9:ca:
                    f8:09:05:31:ae:99:fc:44:5d:34:39:6e:26:9b:67:
                    b5:14:13:18:fe:ca:d1:c9:2f:90:43:3c:a9:a4:c3:
                    cb:de:0f:f1:7e:6d:8a:32:c5:58:ff:ef:ad:25:ca:
                    6a:e4:04:03:1c:5c:d4:c6:94:63:ad:0d:d9:26:89:
                    27:6f:36:69:c6:ba:2d:c7:25:cc:8b:f3:aa:c1:57:
                    07:ac:9c:96:c8:fd:94:f5:76:b9:6f:3d:74:d3:c7:
                    bd:75:4c:7d:ef:17:b5:b3:e2:40:5d:68:f0:d0:f4:
                    8c:66:56:53:5b:3e:00:a9:6c:71:3c:55:ba:2a:83:
                    27:89:6f:84:f0:2f:d4:a4:2f:b8:f7:9b:36:e7:fd:
                    d6:1f:59:ae:87:33:7f:16:7b:c2:db:a1:c6:24:55:
                    22:32:d0:85:c5:34:fb:68:8a:a9:6c:8e:b1:08:89:
                    cb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D3:84:A8:F0:49:DE:99:6A:41:99:AD:41:32:43:8D:9E:7F:D0:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c88eb9ff-6e2b-3789-be2f-2178e93ab066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.93.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9f:40:dd:66:66:09:d4:d3:a6:28:8d:b1:98:9e:2f:59:3a:
         8a:fd:49:f3:f1:4f:5a:0e:c8:9c:2c:67:b9:f7:dd:96:12:5c:
         0b:e0:23:40:3c:29:74:3e:59:8a:09:81:ba:45:1a:50:98:da:
         b5:03:7d:c3:18:6f:29:65:ef:62:0b:f3:f3:47:b8:aa:61:21:
         0d:d1:36:68:6f:f7:a9:96:5b:d1:4c:20:b1:b2:51:f1:7b:20:
         92:00:d1:26:57:8f:64:d8:d5:41:9f:c5:bf:ac:7f:3f:b2:39:
         69:a6:09:6b:8d:02:0a:43:b6:1f:e2:cf:62:47:38:7d:78:51:
         5f:13:f6:3c:cd:3c:61:7e:ee:cb:91:39:31:aa:66:75:31:60:
         34:28:84:40:8a:06:95:57:f8:41:72:2d:c0:1c:50:e1:55:79:
         d9:9f:d3:98:fe:dd:9f:81:63:dd:b9:df:5b:c5:d6:b6:a4:c1:
         0a:a2:47:32:91:39:9d:cf:93:0a:30:77:83:e7:1a:b8:73:5c:
         39:aa:50:cf:92:22:74:17:2f:1f:5b:b4:8d:2e:7b:bf:c1:81:
         a1:08:9d:1b:20:ee:45:19:0f:d1:12:80:07:a4:91:10:ae:9b:
         65:73:b6:f5:b4:ce:f9:1c:1d:93:b9:53:94:bb:14:aa:00:ad:
         af:27:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:17:38 2026 by rpki-client