Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa
File:                     3a1da723-18c3-399f-9eab-e845b5b54a7d.roa (raw, json)
Hash identifier:          AAuvX2LkKSMSiQEsE9WWQtLcfigP0n7wqaVY7WMjUbk=
Subject key identifier:   A4:9B:5F:C1:E3:C6:F1:A8:48:46:1E:40:77:0C:3E:A5:68:69:53:1D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F4F080ED8745F3D122C594900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     36627
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0e:d8:74:5f:3d:12:2c:59:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=97f09e2d-529f-45e7-a079-9c4af8b049b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:68:7a:ce:87:0f:50:f8:2d:70:8d:80:1a:
                    b4:f6:b0:5b:ec:50:7a:6c:f7:74:b5:84:1b:ac:2b:
                    f0:f6:d1:bf:91:e1:87:81:bf:53:f6:76:fb:b3:e7:
                    6c:d0:1e:e8:b4:72:e9:5d:2f:91:4f:11:1a:ce:1d:
                    a3:61:31:8b:0e:33:7e:36:93:8e:e7:33:98:f1:01:
                    6c:ee:7c:88:44:f7:29:97:3f:05:dc:1d:2d:a0:46:
                    ab:e6:5a:90:0e:5d:95:17:24:86:f8:a0:94:31:19:
                    ac:2a:81:79:4a:af:f6:4e:fc:bc:bb:ba:c0:33:63:
                    53:d2:a3:1c:c0:f8:58:d1:70:28:93:8c:26:81:0f:
                    44:fc:5e:69:3b:6b:25:53:8d:26:dd:c4:e4:ff:3b:
                    d8:5c:2e:84:fc:32:8a:90:78:83:c3:93:d1:9d:ab:
                    00:14:f4:70:84:12:83:d1:6b:ad:6d:b7:f8:b0:74:
                    7a:4e:55:5d:59:52:74:ed:68:da:24:e0:01:f4:e0:
                    c4:c6:86:7e:b0:e8:ee:b4:f3:f7:2a:7b:08:d2:75:
                    32:d3:5b:d9:16:36:54:47:60:11:6a:99:4e:85:d1:
                    0f:58:5b:da:c5:ee:ae:6e:32:50:9d:d5:52:de:3f:
                    46:73:66:b8:ae:79:41:47:75:d0:fe:dd:bd:11:fe:
                    2c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:9B:5F:C1:E3:C6:F1:A8:48:46:1E:40:77:0C:3E:A5:68:69:53:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3a1da723-18c3-399f-9eab-e845b5b54a7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:66:75:0a:64:2d:93:e8:dc:20:bf:77:6c:65:8d:bb:0a:7b:
         97:3c:8a:76:86:63:a7:b5:d1:a1:b0:1d:0a:54:bf:24:22:a2:
         48:91:f0:bb:e2:b3:44:bf:a9:21:3b:2a:b3:03:04:c8:e3:ea:
         b9:2a:f0:13:93:b0:2b:11:41:af:a5:40:a1:4a:e1:08:8e:77:
         2a:ae:8e:63:4c:c1:1b:6e:23:12:b8:49:ef:e6:21:2d:46:8d:
         70:5f:47:cb:83:db:fc:5d:90:07:fe:05:47:38:a5:85:5e:51:
         b5:f2:bf:18:50:70:0b:3f:ec:78:ee:17:77:74:48:5c:0f:9c:
         42:35:b5:99:a4:0d:10:fe:89:a7:4c:d8:bd:54:b7:98:3d:e2:
         e0:7b:1d:36:ac:e1:6e:a1:73:20:79:4e:48:b2:c7:3a:15:c7:
         bf:84:4c:8c:93:e6:e9:9b:38:f4:26:cf:20:65:ff:20:79:28:
         cc:90:fc:77:aa:07:2e:29:c7:12:71:7e:94:0e:df:4e:9a:8c:
         77:aa:2e:34:5c:32:c1:d8:04:54:a7:bc:a3:8b:a8:d9:2b:72:
         e6:89:5c:83:21:51:09:d3:df:ee:fe:33:57:51:13:5c:05:b4:
         ef:f0:bc:ef:a3:de:37:e6:43:11:78:7d:15:05:a1:2a:03:65:
         ac:09:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:55:31 2026 by rpki-client