Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa
File:                     ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa (raw, json)
Hash identifier:          Pi9qmxpsb1WXwn6oEESkzYvm3+JovAGxDkPbKn39a3o=
Subject key identifier:   89:F5:D2:80:11:F0:26:D9:E9:1B:1D:98:9C:1E:86:0E:79:8B:7A:5C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CADE4F150FDE931B46BD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396594
IP address blocks:        192.42.177.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:de:4f:15:0f:de:93:1b:46:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=23b77ee1-bbd7-475c-9ce8-53235cfb5821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:43:90:d1:b0:6f:aa:7d:08:22:14:51:a3:
                    69:ab:ed:82:7f:55:2b:77:1a:ce:f9:b8:07:6b:94:
                    81:79:ac:ca:f2:2c:12:c9:59:1c:b4:b1:26:66:b7:
                    60:32:63:77:32:4c:6b:05:30:ba:b3:bb:08:c3:68:
                    87:7f:18:53:4e:b4:f9:7d:59:9a:29:79:31:ec:02:
                    93:46:11:c2:a4:ef:cd:95:6a:83:7d:52:ed:e9:17:
                    3b:fc:c9:c8:0e:d7:8b:ef:fd:1f:6e:f6:70:64:4b:
                    65:da:cd:7a:90:1b:da:b4:0f:89:f5:4f:f7:75:94:
                    e8:fa:71:a9:e9:37:36:7e:b6:66:a6:a9:fc:19:aa:
                    94:05:e5:78:e0:ff:1c:97:73:f1:80:1e:eb:07:9c:
                    13:3a:50:89:c4:ec:94:25:ec:c8:3b:f7:99:4c:8a:
                    06:df:6b:fe:e5:40:7d:45:17:84:6d:2a:7f:10:d3:
                    a0:b8:38:98:ca:ff:cd:37:12:64:27:3e:3a:b1:42:
                    5b:38:13:e7:95:f3:7c:dc:b4:4f:d4:19:7f:96:d4:
                    b5:a4:5c:95:33:d5:07:28:52:f7:12:c0:c3:8e:58:
                    af:c3:6e:24:bb:f0:b5:da:7e:dc:bf:17:c0:56:ed:
                    e6:09:0e:1c:a8:c6:b9:f5:2e:00:a9:38:65:52:51:
                    d1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F5:D2:80:11:F0:26:D9:E9:1B:1D:98:9C:1E:86:0E:79:8B:7A:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce090c67-2f6e-3474-b4fd-b5ae5522c25d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.177.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f6:e1:67:2a:e0:96:6c:24:d6:d2:9c:f2:f2:dc:44:08:ea:
         cd:bb:ff:1f:86:20:de:8e:b9:dc:0e:62:f6:cb:6d:e8:03:ad:
         05:d7:29:7b:46:79:34:52:a3:1e:49:86:e3:4c:46:0b:ef:8d:
         c0:86:e8:10:39:6a:dc:e0:d2:b5:a1:e4:41:44:d4:95:65:ff:
         6f:16:6e:62:0f:52:13:97:fd:e0:8e:bd:28:cd:d9:01:63:88:
         0e:39:0b:52:43:ad:42:75:6c:0b:50:c3:92:51:e7:f3:d4:c7:
         07:bd:b8:fd:8e:f9:f5:9d:8e:78:03:2d:ce:bf:6c:42:5e:83:
         eb:05:48:aa:69:14:06:49:47:84:c7:ce:c2:d9:4a:9c:ee:91:
         49:53:a0:29:52:21:e6:1d:5d:f5:62:c8:66:84:81:95:3a:5a:
         b6:c2:20:f7:f0:1c:ae:42:92:c4:fc:8e:35:67:50:13:b6:78:
         d9:2e:d4:fe:8a:72:d7:36:ba:cb:ef:c5:ce:48:58:90:d2:56:
         9a:4e:49:96:1d:c0:e5:84:f9:23:47:a7:fb:91:cf:a1:ec:2a:
         06:a9:bb:01:ae:b9:52:f3:2c:ea:cc:33:25:38:a0:a2:58:9d:
         5a:98:ac:fc:69:ae:75:9f:55:a6:8d:b7:10:27:b9:d1:21:b1:
         32:85:a9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:10:37 2026 by rpki-client