Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d84a92a9-cbc6-3eb0-b872-8b19016c49fd.roa
File:                     d84a92a9-cbc6-3eb0-b872-8b19016c49fd.roa (raw, json)
Hash identifier:          8groxXsNv/80LRD9QQKO6JMQ8c2EbvxdphRlL6Tcj18=
Subject key identifier:   9C:AC:3E:9D:D3:60:66:EC:FA:6A:6B:FE:AA:C3:CE:8C:CE:99:EB:6D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE4F0F8BB118072DD3880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d84a92a9-cbc6-3eb0-b872-8b19016c49fd.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396560
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e4:f0:f8:bb:11:80:72:dd:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=01f539a3-14c5-4f6b-844b-bc8e7ef5e73e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:97:85:77:1b:34:3b:0f:b7:aa:07:34:26:
                    d9:10:72:ce:87:bc:e8:d9:82:e6:2a:4f:de:4a:a8:
                    c2:d7:bb:0b:01:9f:54:c2:77:50:b7:d4:47:7a:34:
                    ad:fe:c6:5d:b4:2d:45:4d:36:94:fa:79:90:6d:5e:
                    61:4b:50:3f:01:51:5e:6f:3b:c7:2d:a6:91:9c:5b:
                    92:23:62:d1:0b:d6:5b:d1:9e:22:ac:d0:f1:24:13:
                    6e:13:43:53:d6:36:41:e2:b8:18:81:e2:71:3d:93:
                    07:68:7c:5d:22:39:a0:bc:b2:3f:93:e7:db:91:ae:
                    61:05:2c:4f:03:b3:32:2b:33:84:66:25:51:37:8c:
                    56:ec:88:bf:3d:4e:15:17:0f:76:88:f5:21:0e:26:
                    a1:f4:23:b2:90:ec:5d:00:5b:95:73:df:26:44:ff:
                    23:5e:f4:14:5c:4a:3f:31:74:75:d7:bf:05:8a:e8:
                    03:84:f1:c8:fc:e7:f6:91:ac:1e:76:fa:7a:4f:27:
                    24:60:bd:2b:80:7b:99:40:53:7b:d6:f3:ea:02:59:
                    f2:d2:7c:ea:50:af:77:cb:a1:72:17:6d:de:f6:ee:
                    ad:82:5e:21:75:f5:4e:84:37:c9:d4:5a:52:87:e2:
                    3c:67:a2:81:46:a2:43:d1:0f:30:fe:83:2a:01:b8:
                    da:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AC:3E:9D:D3:60:66:EC:FA:6A:6B:FE:AA:C3:CE:8C:CE:99:EB:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d84a92a9-cbc6-3eb0-b872-8b19016c49fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:98:c6:08:f2:8b:e4:19:6a:60:fd:7e:ef:1d:88:61:99:44:
         14:13:44:b7:78:e3:07:f6:7b:eb:06:11:3d:3e:86:ed:62:a7:
         72:a7:cb:8b:4a:1e:58:5d:e4:b0:61:ce:81:0d:fc:c7:21:2f:
         b4:8c:4f:74:44:bc:e3:03:e4:cb:2f:1d:c5:36:c2:4f:be:7c:
         c6:79:6f:41:5a:be:41:7f:4b:fb:ab:a2:6f:9f:de:c7:8c:82:
         1f:8d:f1:f9:c4:3f:d9:a9:53:05:00:cc:7e:7f:56:3a:0f:15:
         b4:13:32:37:2e:01:23:5c:7f:64:90:6c:73:28:16:d0:dd:9a:
         16:64:fe:3d:fb:71:8f:b3:76:e1:1d:fe:fe:40:56:9a:7a:08:
         15:b7:a5:df:16:41:66:48:7a:3d:65:50:04:a4:da:e8:cd:11:
         06:91:2b:19:2e:21:ac:b3:db:49:1f:65:47:87:33:a5:bf:76:
         12:b5:ca:d5:bf:7b:c9:e0:93:05:93:8b:34:29:61:f8:68:7d:
         32:59:af:6d:31:ae:65:bf:6c:dd:13:a0:62:77:e3:ab:23:7b:
         0a:f4:19:a8:24:85:b0:91:55:c0:66:e7:38:9a:67:0a:a7:61:
         75:d7:6b:5e:5e:e3:0d:1b:d2:fe:72:25:3b:d7:22:01:e6:ae:
         ee:eb:94:e3
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2DyuTw+LsRgHLdOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MDFmNTM5YTMtMTRjNS00ZjZiLTg0NGItYmM4ZTdlZjVlNzNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJuXhXcbNDsPt6oHNCbZEHLOh7zo2YLmKk/e
SqjC17sLAZ9UwndQt9RHejSt/sZdtC1FTTaU+nmQbV5hS1A/AVFebzvHLaaRnFuS
I2LRC9Zb0Z4irNDxJBNuE0NT1jZB4rgYgeJxPZMHaHxdIjmgvLI/k+fbka5hBSxP
A7MyKzOEZiVRN4xW7Ii/PU4VFw92iPUhDiah9COykOxdAFuVc98mRP8jXvQUXEo/
MXR1178FiugDhPHI/Of2kawedvp6TyckYL0rgHuZQFN71vPqAlny0nzqUK93y6Fy
F23e9u6tgl4hdfVOhDfJ1FpSh+I8Z6KBRqJD0Q8w/oMqAbjaXwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJysPp3TYGbs+mpr/qrDzozOmettMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDg0YTkyYTktY2JjNi0z
ZWIwLWI4NzItOGIxOTAxNmM0OWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwFKGHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQADmMYI8ovkGWpg/X7vHYhhmUQUE0S3eOMH9nvrBhE9PobtYqdyp8uL
Sh5YXeSwYc6BDfzHIS+0jE90RLzjA+TLLx3FNsJPvnzGeW9BWr5Bf0v7q6Jvn97H
jIIfjfH5xD/ZqVMFAMx+f1Y6DxW0EzI3LgEjXH9kkGxzKBbQ3ZoWZP49+3GPs3bh
Hf7+QFaaeggVt6XfFkFmSHo9ZVAEpNrozREGkSsZLiGss9tJH2VHhzOlv3YStcrV
v3vJ4JMFk4s0KWH4aH0yWa9tMa5lv2zdE6Bid+OrI3sK9BmoJIWwkVXAZuc4mmcK
p2F112teXuMNG9L+ciU71yIB5q7u65Tj
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:11 2026 by rpki-client