Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e70f9c08-b239-3e47-b344-feebd5b1dcab.roa
File:                     e70f9c08-b239-3e47-b344-feebd5b1dcab.roa (raw, json)
Hash identifier:          uhhyP6vXCi7/UYt6nEbWZgdwQQUDPUXi4K7gHQnELOw=
Subject key identifier:   D7:BF:E5:89:E7:55:D9:37:B4:EC:98:63:00:9E:6B:42:C5:73:87:0E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F225D1D4CACDB62877B705D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e70f9c08-b239-3e47-b344-feebd5b1dcab.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     211369
IP address blocks:        192.42.176.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:1d:4c:ac:db:62:87:7b:70:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=cc0e9bdc-cfa1-4df1-abd1-dafd7ecd07df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fa:b2:e1:3b:a9:fc:70:8d:86:5e:05:3c:82:
                    ec:29:27:9d:6f:74:86:4f:e6:af:41:7b:55:5d:e7:
                    77:96:d6:bc:5a:e7:05:99:12:a7:40:dc:41:86:15:
                    d1:62:de:0c:7c:8b:00:13:d0:45:fe:61:a3:e2:0d:
                    d4:b4:d3:b4:27:23:4e:1c:65:ff:1b:6a:b5:61:05:
                    76:d6:80:82:65:1f:a0:9e:de:a2:47:1a:41:10:f9:
                    87:e4:22:c3:0c:26:6d:d9:bb:37:cf:5a:96:e0:d7:
                    2d:5d:5c:a5:98:87:99:dc:2d:6c:aa:e8:38:7e:20:
                    a7:32:cb:f3:f0:00:f6:80:9a:25:7a:9c:1b:a3:b9:
                    52:fc:52:01:8a:80:17:0c:95:b2:ab:48:65:11:3a:
                    f3:e2:eb:35:30:03:ad:e6:2a:50:cb:9b:ca:69:d4:
                    90:f9:ee:05:c5:7a:57:5c:d9:9b:ba:54:7e:8c:05:
                    66:70:e0:fb:79:d8:11:2c:0c:73:a4:82:32:b3:9d:
                    41:b5:1b:bd:7a:bc:90:0a:a9:ac:91:84:4b:5a:ff:
                    a6:2d:95:1e:0d:84:95:99:cb:ed:18:3a:fb:83:0c:
                    56:13:70:2b:a2:0d:6b:7f:39:47:75:03:82:33:41:
                    92:4b:f4:cb:4d:7b:59:b7:e5:e8:44:6c:92:91:d9:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BF:E5:89:E7:55:D9:37:B4:EC:98:63:00:9E:6B:42:C5:73:87:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e70f9c08-b239-3e47-b344-feebd5b1dcab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.176.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:4c:86:04:da:ac:ab:fd:d9:9b:14:03:38:0f:0f:3e:c7:59:
         13:2e:72:dd:39:b0:8c:f7:1c:07:03:25:03:83:ec:e7:e4:ab:
         c3:65:fb:82:5c:c0:62:35:ba:8b:ed:84:04:84:7a:6a:74:07:
         b5:3e:ea:1a:0d:df:a5:a5:10:34:eb:33:6b:a3:fd:9f:d5:0f:
         ce:2d:e9:f1:ae:a3:e6:79:9e:a4:cd:61:3c:f1:61:de:a4:a0:
         db:76:0c:59:da:ed:09:c2:7e:cd:a4:17:52:82:60:51:46:3b:
         de:14:d3:81:be:26:e8:77:f1:3e:a4:6a:94:e5:bf:6e:87:be:
         e1:0e:b8:31:0d:b2:b0:3f:08:d6:07:8f:e8:bf:a7:ae:32:f5:
         d6:84:3a:9c:1f:84:26:dc:8f:19:e0:a2:66:6d:8f:be:b0:38:
         b0:ac:c1:48:42:58:be:5e:cb:cc:93:ee:8e:0f:8c:25:fa:5b:
         c5:dd:61:03:4d:6a:ff:35:16:82:4b:57:8f:b4:a3:ad:62:07:
         76:1f:33:ca:6d:c7:4f:b3:8a:30:05:19:13:d5:49:dc:b7:bd:
         09:37:e6:18:92:14:04:90:f5:eb:a0:d4:39:3e:16:c0:7d:42:
         0b:5a:32:a4:57:9f:fb:04:de:34:3a:0f:ce:30:8f:0e:89:c2:
         94:9c:b9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:22:21 2026 by rpki-client