Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe099296-8d51-31a7-95d3-a00e66721abf.roa
File:                     fe099296-8d51-31a7-95d3-a00e66721abf.roa (raw, json)
Hash identifier:          ZTtfxhfRr7eLbklOBwXV0lveCa7v1Hd354m4N4DVK5c=
Subject key identifier:   87:1F:CF:F9:62:5E:F4:E3:42:FC:96:DE:EF:64:17:F7:03:3A:31:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F1037904B5B9E03C623251380
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe099296-8d51-31a7-95d3-a00e66721abf.roa
Signing time:             Fri 04 Sep 2026 13:00:12 +0000
ROA not before:           Fri 04 Sep 2026 13:00:12 +0000
ROA not after:            Thu 03 Dec 2026 14:00:12 +0000
asID:                     396580
IP address blocks:        192.48.79.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:10:37:90:4b:5b:9e:03:c6:23:25:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep  4 13:00:12 2026 GMT
            Not After : Dec  3 14:00:12 2026 GMT
        Subject: CN=840e8d49-218b-4eb3-8834-91efc7c8a10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:2c:4e:d3:c0:cb:ba:22:e7:3f:c4:88:78:
                    80:21:21:ff:97:f0:dc:03:fd:74:24:d2:d0:73:0c:
                    e7:e8:9c:a8:2c:4d:0f:24:71:b2:ba:9c:2f:a6:15:
                    02:a6:85:45:45:2b:2a:19:f1:47:f5:e9:80:81:ed:
                    70:aa:88:c3:4d:7e:26:9b:10:60:b7:b9:68:af:73:
                    da:7f:bc:65:4d:c0:66:8d:ab:fb:5e:bc:6b:49:72:
                    69:57:cf:21:34:0b:10:e8:4d:c0:38:6e:84:4e:7c:
                    7b:d8:34:8a:ed:74:23:30:aa:d6:f1:ee:86:db:65:
                    de:ce:39:00:b6:aa:ac:4d:19:3f:9c:60:b6:7e:bd:
                    da:fa:ea:c0:73:fa:f1:a6:74:7f:05:06:0c:eb:46:
                    be:9f:43:bd:80:66:2f:5f:58:ec:3f:2d:97:2a:b6:
                    8b:4a:ee:7b:3f:76:8a:7b:28:de:f8:04:d6:41:1b:
                    64:7d:b4:13:f3:e0:f1:cd:01:1f:72:a7:46:a4:77:
                    9c:ea:5e:c3:ff:4a:f8:23:3f:ca:80:6b:93:8c:47:
                    5b:4c:a8:b2:ef:97:3d:2e:10:e6:8f:ba:85:ab:fa:
                    75:f4:3d:54:1c:2b:c9:f9:5e:c5:cf:18:99:89:64:
                    56:8e:25:18:85:b0:69:86:8f:04:a6:5e:c6:6f:da:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:CF:F9:62:5E:F4:E3:42:FC:96:DE:EF:64:17:F7:03:3A:31:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fe099296-8d51-31a7-95d3-a00e66721abf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.79.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:77:5a:ad:4b:dd:94:5c:14:8c:28:74:79:e5:ec:60:69:47:
         26:23:e8:01:a1:6a:57:73:04:69:78:22:09:24:7e:5b:57:6f:
         57:3a:64:77:c0:a9:f8:95:83:fa:b6:2f:7f:61:f7:ee:72:b4:
         11:d1:53:1f:36:e7:1b:88:7f:f3:35:7b:8f:61:12:47:b9:02:
         0c:6c:dc:22:14:78:f3:74:62:de:c4:66:0a:00:e0:57:bd:73:
         3d:68:3c:af:e6:7f:83:0c:33:fd:ff:8b:ae:ab:45:9b:d2:b3:
         72:ee:ca:10:16:78:96:b3:8a:5f:ec:01:59:c4:b3:74:67:7c:
         fc:ec:e2:3c:fc:ce:16:93:6a:22:ad:fe:89:11:37:bd:fd:16:
         14:fa:d1:b7:b1:3d:7d:aa:47:22:42:a8:29:75:bb:6a:d4:d9:
         20:d2:77:cd:98:c6:a6:0b:2c:41:76:33:c7:b8:d7:43:0d:00:
         af:15:8f:42:fd:10:01:e0:92:53:bd:45:d1:e8:9b:b4:2e:48:
         ef:03:d0:15:2c:d0:da:6d:cf:6c:bf:85:45:72:0b:da:2d:db:
         4a:4e:c4:38:14:1c:f3:06:2a:a9:f8:ff:85:2a:9d:ef:62:56:
         cd:ba:84:89:5f:38:22:ce:9d:d4:0a:2d:13:f9:fa:ab:da:9e:
         a0:f4:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:25:29 2026 by rpki-client