Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db2eaf60-46cf-3f29-b0cf-6a0aed1e805c.roa
File:                     db2eaf60-46cf-3f29-b0cf-6a0aed1e805c.roa (raw, json)
Hash identifier:          OggB4xOZo1cvT3MRch31SguSkar88xaGiJ44vrpPDO8=
Subject key identifier:   02:0D:95:F8:B7:1D:C7:44:B7:CA:30:45:92:F0:6A:BF:E0:BD:75:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DD4C07C7F13A1288AFF032B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db2eaf60-46cf-3f29-b0cf-6a0aed1e805c.roa
Signing time:             Thu 14 May 2026 13:00:31 +0000
ROA not before:           Thu 14 May 2026 13:00:31 +0000
ROA not after:            Wed 12 Aug 2026 13:00:31 +0000
asID:                     36622
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d4:c0:7c:7f:13:a1:28:8a:ff:03:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 14 13:00:31 2026 GMT
            Not After : Aug 12 13:00:31 2026 GMT
        Subject: CN=c7ef23a4-ae59-44d2-af5d-3be320b082e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:d6:2d:90:cb:3f:04:20:cf:f3:fb:49:39:
                    3f:e4:b2:5a:b7:b7:14:29:60:de:e2:c2:f7:f1:c7:
                    e0:8b:81:6b:8e:ed:b1:83:57:2e:55:4e:d4:34:20:
                    26:d5:16:b8:82:66:db:3a:ef:b9:0f:71:19:5a:a0:
                    6e:7f:91:26:1c:3e:6e:87:eb:d8:3b:a4:50:53:e6:
                    4b:ab:53:0f:4d:5f:d3:a7:16:f4:52:50:da:94:3b:
                    13:39:3e:5f:0d:ba:59:d1:f4:74:1b:a9:11:5c:3f:
                    ef:83:65:fd:f1:d4:db:4e:4b:c4:73:d0:b1:2b:ab:
                    d9:8f:14:6b:89:09:f9:8a:22:c0:6c:38:43:78:3f:
                    2a:81:e1:dd:b2:20:d2:ac:aa:44:3f:67:c0:16:e5:
                    f9:4f:70:4d:24:c4:b6:61:57:7a:67:44:8a:8d:5e:
                    f1:e0:dd:82:55:da:47:81:c7:1e:3f:09:63:44:a6:
                    8e:3c:72:8a:85:07:53:b8:ff:9e:44:7a:32:34:c3:
                    18:6f:7e:1a:cd:c2:1f:26:45:ad:65:ee:ee:d6:db:
                    63:5f:76:b5:ec:20:63:c2:5d:0b:11:24:e2:e6:be:
                    25:0a:82:ed:38:8a:88:71:b4:e3:b6:99:a9:4b:8a:
                    7e:17:b0:56:e6:ae:6e:c7:15:24:89:c4:4c:8a:21:
                    70:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0D:95:F8:B7:1D:C7:44:B7:CA:30:45:92:F0:6A:BF:E0:BD:75:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db2eaf60-46cf-3f29-b0cf-6a0aed1e805c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:03:67:c0:ce:a4:90:37:67:2a:63:41:97:48:78:7c:b3:
         24:1c:db:ad:3f:cc:b5:9d:ac:09:4a:2c:3d:14:cb:2a:bb:ff:
         38:b9:24:60:57:e5:8f:eb:50:64:b9:a0:9d:cd:38:b6:85:58:
         64:33:39:c5:31:a1:b3:54:13:fb:10:85:df:53:a2:3d:32:c9:
         c0:a7:9f:2b:b0:53:af:44:3c:7d:54:04:c0:fc:60:d5:9c:20:
         9b:4e:cc:c5:76:14:8c:7d:7c:e4:31:59:eb:9f:8c:d9:6d:f9:
         18:8d:a4:11:c5:6e:83:d0:4c:6f:2e:1e:05:35:0e:31:f7:75:
         0d:eb:2f:77:92:40:39:97:2a:3b:46:f4:25:b2:88:5d:6f:4f:
         89:9e:5f:82:3e:13:ea:86:60:ef:5a:9f:41:b4:5f:cd:44:5c:
         bc:f0:23:08:69:c2:58:f8:06:1b:4b:ee:8c:d8:d2:f5:2e:09:
         7c:1b:79:18:ef:89:16:7e:aa:5e:c4:22:ed:97:92:ec:bf:e1:
         b8:cc:ed:d3:0f:ed:44:73:2a:99:2d:fa:45:c1:25:0b:9c:99:
         b7:1a:7e:dd:42:e3:05:95:b6:b3:22:d3:64:33:25:55:7a:8c:
         fe:e5:b8:fc:20:1c:c7:31:02:82:68:a2:d0:2b:11:29:2f:86:
         65:f0:c9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:57:55 2026 by rpki-client