Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26322dc8-4812-3ed0-a40d-d88b35f0c00a.roa
File:                     26322dc8-4812-3ed0-a40d-d88b35f0c00a.roa (raw, json)
Hash identifier:          8TDMuM6ilnnaMEf8JCDKL5WjeGnECpXn8KEkYCk2Y6I=
Subject key identifier:   6A:F9:1F:DB:85:0F:66:A1:5A:68:56:6F:8F:2C:4F:1D:6F:E0:2C:21
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC90714D6B075B79664507CC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26322dc8-4812-3ed0-a40d-d88b35f0c00a.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     396553
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:14:d6:b0:75:b7:96:64:50:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=dfa7e85f-5f1d-4979-b2c0-0f81976b3829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:de:a2:c3:a9:b5:43:2a:eb:fb:b8:cf:4d:
                    b6:70:ab:c7:1a:d1:e0:cf:37:77:25:de:bb:38:c4:
                    95:d3:21:fa:83:9b:f6:f3:13:5f:62:ff:40:fa:c1:
                    f2:8a:eb:f2:78:c5:d2:8d:0b:0b:9b:58:01:88:08:
                    8e:60:28:19:b4:1f:03:b4:35:8e:f0:6b:c9:1b:ae:
                    47:49:8b:3d:09:4c:b5:55:6b:13:eb:cc:42:95:17:
                    dc:ce:8f:43:b2:38:0b:46:a0:45:aa:df:4c:05:6c:
                    b2:54:07:cd:8a:28:4c:e9:63:d7:46:2b:c8:b4:d3:
                    84:9a:99:34:79:52:bd:e2:fd:4d:53:5e:eb:dd:58:
                    c9:ce:23:a9:1d:b2:3f:7b:6e:df:85:f7:6e:db:e5:
                    21:5d:b1:65:d5:b8:85:cd:cb:ad:0c:14:70:86:1e:
                    41:f9:a2:e8:8b:b9:17:79:10:e5:5a:31:ae:89:96:
                    b4:e8:28:1c:31:50:1c:7e:94:36:b3:55:4d:77:1f:
                    69:aa:b2:82:d9:68:c3:3f:43:e9:77:84:ca:cd:5d:
                    57:50:85:f7:a8:ee:c7:0b:70:f3:a9:d0:bf:00:7e:
                    b4:28:1b:61:09:ac:bd:3a:4d:cf:b4:7e:a1:15:30:
                    a6:03:30:bf:ba:c2:cd:57:5e:07:41:26:8e:af:b4:
                    80:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F9:1F:DB:85:0F:66:A1:5A:68:56:6F:8F:2C:4F:1D:6F:E0:2C:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/26322dc8-4812-3ed0-a40d-d88b35f0c00a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:04:18:9d:9c:80:66:e9:ea:a3:ff:31:81:c3:f4:37:9c:6b:
         c5:9e:c3:96:ab:ac:41:97:6c:c6:b3:12:f6:0a:00:c2:51:50:
         d9:a8:f7:6d:82:c7:f3:9d:55:31:72:c7:f6:25:3a:db:25:88:
         e7:26:d9:45:a8:d7:a9:10:ac:45:12:ed:9e:77:36:85:21:bb:
         85:7a:ea:db:10:30:bd:a7:3b:35:73:69:a5:bf:ab:b7:b0:05:
         a1:26:af:2e:32:82:c8:6f:7b:db:f5:3d:bb:7c:06:81:69:e9:
         2c:75:39:8c:01:dc:ed:92:45:1c:a1:40:c4:c2:9d:d7:59:9f:
         21:96:dd:5c:a1:5b:13:96:02:83:2a:08:c2:24:60:24:c1:9e:
         71:04:fc:ce:67:be:ea:eb:15:89:7a:ae:1e:84:3b:5b:1f:37:
         b0:81:93:5b:b2:9d:a6:2c:65:3b:16:bd:da:4b:84:08:b7:51:
         34:d3:81:36:90:c1:19:4d:20:fd:e0:b3:fa:ab:1d:75:c8:87:
         92:25:59:74:34:68:13:49:61:e2:4a:32:c5:64:99:b1:c5:4f:
         f8:7c:80:fa:a0:5f:b0:f3:12:54:ec:ea:d3:b5:fc:ee:cd:fa:
         0d:bb:71:bb:5d:fc:09:f8:15:eb:04:4c:b4:c0:09:cb:51:6b:
         5c:b3:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:02:36 2026 by rpki-client