Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2ebd38-b352-39dd-8ac8-ae32cb89e052.roa
File:                     ef2ebd38-b352-39dd-8ac8-ae32cb89e052.roa (raw, json)
Hash identifier:          p0AmWtNeZZ317CS8eA9ghyfNFAuRNQeSCzvmPhOdrdQ=
Subject key identifier:   8E:E4:21:B3:56:31:4A:86:B9:3D:50:7D:9E:25:56:4D:CD:1E:EF:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA794BF4211B02540D14DB920
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2ebd38-b352-39dd-8ac8-ae32cb89e052.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397202
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:bf:42:11:b0:25:40:d1:4d:b9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=cfa286fe-666e-42e6-b865-c4f165f0a904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:57:fa:18:be:fc:d9:cc:62:5e:b3:1b:49:
                    3b:d7:1b:99:90:53:5b:5b:25:e2:b8:36:6d:93:2b:
                    92:4e:63:b9:98:b4:8f:db:25:dc:8b:e4:c5:7f:c5:
                    5a:99:40:62:a1:82:c0:c1:0f:02:df:aa:d7:6c:49:
                    6a:ac:3c:32:43:c7:35:27:8e:9f:fc:a7:72:18:35:
                    d7:f0:d3:bb:15:62:d1:d9:27:44:f9:d6:29:e8:ec:
                    9a:bd:51:c8:8f:ca:13:a4:5a:c5:b6:6a:2b:68:4b:
                    57:20:6a:f6:0e:86:59:dc:4d:5f:90:de:34:f3:aa:
                    9c:42:3d:d2:b2:8a:22:45:89:3c:ce:cf:ab:e1:08:
                    90:22:c5:17:a3:51:df:2c:5f:85:e7:b4:ef:1b:16:
                    61:b4:a4:85:d6:9b:46:47:ad:d7:d9:34:d5:d1:dd:
                    bf:50:b0:86:f5:4b:20:3d:07:74:42:0d:73:64:e3:
                    38:0d:c8:1b:1f:3e:3b:95:46:d6:50:fb:d0:6b:f5:
                    c5:02:66:68:10:36:23:e2:66:d5:13:09:dc:5d:05:
                    e0:ba:62:7d:c4:2c:cc:3c:e1:15:4f:97:7c:65:c7:
                    51:10:86:24:a5:15:df:c1:58:eb:3b:13:82:0a:90:
                    bc:25:f7:ec:97:9c:c3:b0:8f:e7:f9:ef:c4:1a:4b:
                    f5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:E4:21:B3:56:31:4A:86:B9:3D:50:7D:9E:25:56:4D:CD:1E:EF:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef2ebd38-b352-39dd-8ac8-ae32cb89e052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:8a:56:5c:bf:3e:9c:05:7e:5d:42:74:fa:d9:6e:43:d2:b1:
         da:22:e3:ae:76:7b:c9:ec:9e:d4:82:67:06:8a:e8:67:a8:39:
         59:bd:85:c0:09:27:70:0f:bc:85:ef:e9:c2:04:0d:3e:b7:d6:
         7d:6e:65:cc:72:d5:d5:5e:7f:29:a0:38:66:de:6e:ab:a3:00:
         68:56:29:6c:6a:15:51:cf:52:d9:11:e8:b3:46:aa:02:f4:14:
         a8:e3:b9:2e:13:95:d4:5e:fd:83:3f:45:b8:65:f0:07:ab:1b:
         c8:73:8f:39:98:29:37:e5:75:b6:1c:92:7a:d6:1c:82:75:d8:
         f2:31:9a:a1:aa:d1:fd:c8:18:ba:30:02:27:fc:56:bc:f0:4c:
         ce:70:ca:d7:90:5a:64:33:c0:41:44:da:8f:83:05:5e:0c:21:
         a2:4a:a2:21:89:53:92:4b:6d:d1:f3:94:c5:88:79:ed:09:f3:
         89:d3:f2:18:69:30:9d:06:8c:57:67:cd:e7:a1:6f:1f:fc:58:
         80:2a:88:c4:3c:33:16:b7:66:98:86:59:3a:a6:84:3a:61:1e:
         cb:49:d5:36:96:cd:9e:d1:d2:27:86:30:a8:ec:d8:35:2f:66:
         ee:37:fb:85:72:c3:80:5b:b6:c2:59:27:4e:d4:53:95:93:0f:
         50:57:83:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:44:13 2026 by rpki-client