Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42a8372b-68e3-3d60-8085-b0e77b8935de.roa
File:                     42a8372b-68e3-3d60-8085-b0e77b8935de.roa (raw, json)
Hash identifier:          GLPfksxTxMmadnlXkC4G9ZPLIvO3Dr1OC9Dm4SVMwnw=
Subject key identifier:   A6:E8:2E:09:59:25:DE:1C:E1:85:66:FA:F1:0F:CB:52:F5:E5:20:4F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC9071D8CE8DFFFFF3D2E9C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42a8372b-68e3-3d60-8085-b0e77b8935de.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     40647
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:1d:8c:e8:df:ff:ff:3d:2e:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=71e74cb7-30c0-4adf-8908-f53969460dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:51:c4:cb:28:3a:cf:c3:93:77:c7:33:00:
                    ca:4e:3c:52:5d:9d:c9:d8:3e:de:21:ec:38:14:10:
                    59:a5:02:f9:b6:2b:51:47:19:b5:2f:64:0d:bc:da:
                    b4:bd:06:9d:27:63:43:50:ac:7f:29:cf:79:06:e7:
                    a9:b0:5e:21:8d:b7:19:5f:26:a4:32:91:05:05:04:
                    ef:30:bd:e8:34:24:a2:4f:41:b4:da:45:cf:14:7a:
                    28:d8:e0:36:6f:bf:80:8d:3d:cb:9a:b4:0f:0f:7c:
                    7b:7b:ea:6d:46:35:6c:8b:4a:ff:0d:22:61:90:f7:
                    77:c1:ce:49:59:f8:79:c4:11:0e:8f:45:91:3e:91:
                    f3:c2:f3:4d:a1:6a:c5:a6:aa:79:37:f3:c3:82:e3:
                    da:67:a5:29:20:47:4d:79:81:b2:c3:2d:8a:a2:05:
                    6c:36:69:e5:23:ff:fe:59:1d:3c:38:75:bf:8a:ce:
                    14:c8:0d:ea:b9:b3:0f:a4:1c:6a:4c:99:6d:42:d3:
                    07:88:21:45:88:93:db:2f:be:d9:10:4c:58:3b:f8:
                    ec:d7:10:46:e7:94:c2:6e:1f:90:eb:e3:e6:7a:b4:
                    0c:20:4e:0a:05:cf:17:cb:d8:58:eb:29:1b:97:26:
                    38:8f:12:fe:c5:99:21:af:65:6e:88:87:e9:2f:6a:
                    e6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E8:2E:09:59:25:DE:1C:E1:85:66:FA:F1:0F:CB:52:F5:E5:20:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42a8372b-68e3-3d60-8085-b0e77b8935de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b6:46:58:5e:1a:57:01:4b:4e:2f:3c:60:58:f5:d5:b0:42:
         73:bb:15:15:57:b4:d4:9b:6d:0f:aa:26:bc:d0:5e:e3:9b:9d:
         9e:b7:32:8c:bc:3e:2f:bc:70:e8:51:f8:3f:16:f9:bc:4a:96:
         72:4b:54:80:da:4c:42:0e:a1:21:45:4e:ea:80:6c:5f:c7:02:
         73:18:e8:74:b5:3d:bf:31:df:16:db:15:a0:de:df:25:d6:b0:
         d6:90:d7:dd:42:c3:87:a3:d1:0e:e4:f3:34:28:cf:9d:76:55:
         15:a5:ab:1c:48:49:69:da:2f:82:ab:14:76:ab:42:1f:c7:82:
         63:dd:97:3d:4f:0c:36:fd:5d:23:60:08:04:bc:23:7b:5f:2a:
         6d:c1:f8:10:45:bc:23:56:e0:81:51:7c:72:61:7a:e7:43:46:
         8d:65:02:d2:88:46:ac:6d:1a:92:91:11:16:c6:73:b3:72:cb:
         f3:77:14:4a:f2:82:61:be:34:42:a6:7d:d4:ad:7b:3d:01:2c:
         a9:a1:92:5b:22:40:70:0a:a2:8d:6e:97:d5:42:55:fb:0d:b8:
         6a:7a:a7:16:fc:1f:71:85:75:57:ac:d6:bc:2d:98:5b:64:61:
         52:b6:97:8c:39:66:9e:f5:09:9f:de:55:ba:a5:02:62:1c:b7:
         26:e2:06:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:05:43 2026 by rpki-client