Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8aa5a9b-e494-34b7-9df8-58230a9a70dd.roa
File:                     e8aa5a9b-e494-34b7-9df8-58230a9a70dd.roa (raw, json)
Hash identifier:          uw0eMpEpWMiN8wygLB1QMOp6XgRTqhbnLzJE2pOf/yM=
Subject key identifier:   E3:71:2E:BF:C8:92:A7:CF:71:04:A3:B9:89:6F:77:16:F5:67:4D:6B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F06727C4FCD48A3D3442C2920
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8aa5a9b-e494-34b7-9df8-58230a9a70dd.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     396582
IP address blocks:        192.82.134.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:7c:4f:cd:48:a3:d3:44:2c:29:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=0ad3cde9-eb81-4841-9fcb-3e83b9ab39a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:93:f2:ea:e7:4e:02:1b:25:57:d4:ad:04:83:
                    4d:60:a0:67:03:84:d7:58:ed:5a:ab:40:91:9b:39:
                    7a:d6:b4:d0:70:aa:69:a0:3f:70:98:26:b5:f3:ba:
                    4c:f1:f8:c5:92:df:d0:15:b9:58:69:ce:b7:bd:38:
                    79:00:23:9f:a1:76:1d:7c:39:0e:63:2d:f2:87:e5:
                    c6:0b:b4:76:a6:d1:f4:ad:36:6d:37:8f:04:de:28:
                    e0:c2:2b:22:2b:c4:ec:66:24:b1:72:d4:d7:13:7a:
                    69:a4:3a:57:c2:27:2d:0a:1f:46:4c:d1:87:35:9a:
                    13:9a:96:35:57:93:8e:ac:8f:78:0a:70:30:0d:7e:
                    3d:06:b3:76:1b:08:10:b6:9c:2b:77:af:e1:7e:22:
                    44:30:79:18:ce:65:d2:32:a3:dd:8e:af:2d:db:41:
                    8f:fc:97:ba:5c:64:6c:49:5c:65:f6:65:65:12:c7:
                    cb:c2:5c:59:78:9a:de:d8:69:7e:9c:48:3a:e8:1a:
                    d9:1b:bf:02:06:db:ab:6c:0c:fb:e4:c3:21:23:bf:
                    29:f5:82:da:a7:82:9c:81:08:0c:c0:46:4c:29:f6:
                    f3:b7:49:12:e5:43:17:ae:6c:12:bc:5b:3a:60:97:
                    bc:c6:c4:66:d1:93:65:0a:fc:44:27:f6:82:fd:b8:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:71:2E:BF:C8:92:A7:CF:71:04:A3:B9:89:6F:77:16:F5:67:4D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8aa5a9b-e494-34b7-9df8-58230a9a70dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f8:e7:44:01:b4:be:d9:66:36:a1:b7:14:55:de:50:1a:d0:
         ea:59:40:ee:83:24:7e:0d:3b:98:4e:06:71:3f:b2:6c:29:41:
         0e:be:a0:67:3b:9f:c6:c9:a4:d2:81:06:f1:c4:2c:02:7f:2e:
         f8:04:b5:c3:06:14:65:5f:ad:ec:de:41:e0:39:d0:e3:00:2c:
         81:a1:b4:2f:d5:ba:61:fb:3e:1c:cc:39:a1:5c:10:b3:f4:2d:
         5c:a1:1d:89:45:e3:9d:36:93:f8:d1:0f:2b:b9:56:87:70:3c:
         13:fa:52:38:00:8a:67:a1:18:3f:ad:f3:bf:96:03:89:cd:47:
         c1:c4:1e:0d:c3:5c:4f:db:b1:74:3b:5a:88:26:3a:6b:0a:d4:
         24:c9:93:a6:d6:d8:a4:cd:29:23:93:c3:0a:11:ae:08:a7:db:
         22:d8:4b:e1:03:00:12:72:75:73:4f:a6:5c:93:82:48:bc:10:
         d4:b3:5c:dc:e7:27:36:06:47:6a:66:1b:64:8f:18:52:92:77:
         4d:33:a4:23:2a:51:8c:40:42:ac:09:02:47:50:7f:1f:08:e6:
         b9:ea:13:fd:98:5d:2c:04:72:3e:51:12:3e:4f:78:39:df:a5:
         9b:ba:99:5a:66:6f:b9:7d:26:26:5a:41:eb:1d:0d:97:e4:5f:
         a9:ac:5c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:45:46 2026 by rpki-client