Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdc70b3f-0938-3895-a01d-b3dcd08876c2.roa
File:                     fdc70b3f-0938-3895-a01d-b3dcd08876c2.roa (raw, json)
Hash identifier:          LCHCia/7svk9qLTqALznGGjFgX+Kq/BEKyDgeEmzyqU=
Subject key identifier:   50:4E:FB:C6:98:92:06:B1:40:DB:3B:6E:C9:D0:AF:1C:7D:9F:C5:ED
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F497F5BB2B246FDF8D2CD1BD0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdc70b3f-0938-3895-a01d-b3dcd08876c2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     36626
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7f:5b:b2:b2:46:fd:f8:d2:cd:1b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=51082848-c39f-46c7-a46b-05afe497b091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:4f:66:a1:26:0a:83:7c:8f:5a:44:a0:fe:
                    c2:60:b4:4f:10:5e:b2:4c:ca:fc:7d:62:dc:df:2c:
                    11:a4:9e:41:a9:27:2d:70:9c:92:6a:f4:f0:40:46:
                    96:82:ba:6f:3c:0f:bc:ff:ba:d5:10:21:44:c6:59:
                    c4:a5:b0:46:32:1b:ea:0a:6a:67:b2:5a:7b:24:17:
                    ac:7d:5d:ee:19:6c:3c:d4:f8:20:ac:85:b7:f6:9d:
                    a1:ab:01:04:79:4c:2f:82:85:a1:49:a5:3f:25:9d:
                    8a:ef:28:90:72:3b:d8:5a:a6:3a:09:d9:57:f7:18:
                    6e:c0:13:30:10:4c:fb:be:b8:89:3d:3e:6a:23:eb:
                    5a:66:9a:7b:35:48:85:91:21:ff:04:16:d5:0c:df:
                    98:6e:bd:60:31:2b:fa:93:20:eb:02:23:28:0f:12:
                    4d:b3:05:4a:42:de:e6:9b:bb:ac:d8:31:91:eb:4f:
                    5f:ad:4d:4b:7d:36:09:12:30:dc:53:56:cc:a9:d6:
                    5f:fb:27:ab:98:3e:d0:da:2b:2f:7e:ad:5e:63:65:
                    40:d8:8a:80:65:82:a4:7e:1b:b9:7b:1e:4a:3c:6d:
                    9d:6e:7c:09:15:21:5f:77:17:9d:51:e3:62:ae:53:
                    02:01:e1:98:c3:e3:8c:85:f7:b3:e5:59:27:68:9c:
                    a0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4E:FB:C6:98:92:06:B1:40:DB:3B:6E:C9:D0:AF:1C:7D:9F:C5:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fdc70b3f-0938-3895-a01d-b3dcd08876c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:28:0d:5a:f2:e6:27:25:52:0a:a0:d5:c7:4f:1f:01:18:db:
         c9:12:41:3b:a3:af:d6:0e:e7:93:0c:38:87:02:72:fd:8a:5f:
         58:1f:5f:9a:bf:7b:10:aa:18:c5:b7:f2:13:04:d2:ca:03:59:
         76:ab:0c:ca:ca:a1:82:87:bd:d5:d2:2c:ef:46:7b:3d:a6:10:
         ba:d7:f1:9f:9b:18:8b:87:e2:aa:dd:d1:cd:4f:d2:28:7d:87:
         94:83:6a:67:71:d3:8c:9f:3d:5f:2f:94:6e:90:60:34:19:6f:
         cd:42:c0:66:9d:55:7a:d6:d0:52:89:71:fe:b2:4c:fb:70:05:
         9e:67:56:2a:69:fd:9a:49:03:98:44:46:38:1d:32:37:2c:36:
         04:87:57:32:b0:5f:85:2c:15:c2:d5:44:78:0e:38:01:47:d5:
         a3:a7:cc:1e:28:e1:e0:cf:21:aa:a1:48:07:a6:99:1b:3c:78:
         aa:69:75:d1:be:7c:bb:5e:85:df:62:6d:5c:80:ce:f7:4e:ea:
         a2:f6:2e:66:6e:72:d1:4c:c1:43:76:1d:c6:65:8b:49:46:5a:
         c8:3b:c6:10:c0:c9:08:44:41:d5:9e:3a:ab:23:34:68:80:dd:
         b0:da:77:fe:19:5a:d8:10:64:e9:04:17:04:59:e3:1e:01:8d:
         2f:ef:67:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:52:56 2026 by rpki-client