Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dc8f445-0f8f-31c2-b980-26b46f0815c6.roa
File:                     7dc8f445-0f8f-31c2-b980-26b46f0815c6.roa (raw, json)
Hash identifier:          ZRHzX0H9tCJysjV4RomzWV/nTeeRqen23sw/OWjJ8WQ=
Subject key identifier:   5A:06:17:64:2B:E2:36:26:2A:43:51:79:D4:04:B6:05:80:38:F8:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7978559E96F996730E0A7A0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dc8f445-0f8f-31c2-b980-26b46f0815c6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396604
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:85:59:e9:6f:99:67:30:e0:a7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=94de813f-561f-4704-8f0d-7bc87fd1283d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9c:30:a8:c0:f5:71:21:71:e4:8f:b6:46:e6:
                    7d:0e:7b:e4:b4:f2:80:de:d6:9e:1d:30:3c:18:28:
                    86:03:af:60:7e:e7:57:de:ad:12:23:06:77:5b:40:
                    c3:2b:f6:cd:b8:26:94:49:08:cf:39:00:8a:f3:ba:
                    88:ce:73:f7:57:12:1d:68:d1:63:14:19:35:a9:20:
                    ee:2d:a2:00:08:09:bd:6c:63:7c:f2:cc:d5:42:d9:
                    e9:67:5c:49:fe:c3:02:df:3b:df:8d:da:8a:31:98:
                    5f:b4:e3:34:e9:75:40:11:c9:42:e2:42:c2:41:c9:
                    6e:99:94:ff:ab:1b:95:17:cd:33:85:b0:c3:66:a3:
                    bd:3b:72:99:bf:7d:7f:12:d1:b8:ac:5a:e5:74:64:
                    53:7a:38:24:57:43:00:b8:15:21:0f:8b:de:10:21:
                    c8:1a:12:0a:6e:57:f5:94:02:c0:e4:a6:e2:e2:99:
                    bc:f9:b2:32:77:22:e3:7b:cd:6e:07:73:b0:9b:da:
                    43:7a:85:20:98:75:78:6a:d2:64:3c:98:69:3f:57:
                    9d:65:47:5e:29:10:40:c8:4c:9a:da:ef:df:3a:98:
                    60:3c:6f:96:6c:82:71:57:78:13:2f:7a:75:a8:15:
                    17:da:ac:33:fb:28:ab:b6:82:cc:c0:86:12:b3:be:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:06:17:64:2B:E2:36:26:2A:43:51:79:D4:04:B6:05:80:38:F8:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7dc8f445-0f8f-31c2-b980-26b46f0815c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:7b:5a:d3:b9:4f:cf:c4:d4:6c:a6:97:a5:04:34:3c:d3:39:
         24:fa:4a:d9:fc:f6:e2:a9:72:38:a5:28:08:21:44:75:76:80:
         4c:07:40:e4:c7:eb:8b:ae:3e:ae:87:71:26:67:e1:71:4c:f8:
         61:0f:e3:96:fb:91:ca:f2:99:a2:ec:86:48:85:30:96:ab:9d:
         cf:4b:15:56:9b:df:74:e4:26:c7:6c:a8:05:11:4b:b2:d8:95:
         2a:84:23:19:d4:34:ff:a0:93:6b:d3:4f:f1:bc:64:e2:a0:6e:
         1e:ea:96:9d:d5:e6:f5:e6:38:a0:7c:de:60:a7:70:e9:79:e8:
         30:50:99:4d:30:e3:c7:93:eb:0e:a3:75:af:a8:3a:30:03:6e:
         27:ef:37:8d:4f:ba:f6:09:c3:e3:f1:64:fa:6f:d7:e6:49:7a:
         95:9c:36:3f:e0:26:12:41:fc:40:78:22:6a:c3:86:58:ea:c3:
         d2:52:69:c6:9f:28:6d:ee:c9:3b:a0:a5:e7:c9:f0:15:eb:d9:
         65:f9:11:7f:9b:6c:79:64:99:67:fd:95:a3:8e:30:30:c8:ce:
         bf:45:31:4d:22:bc:47:ae:b7:92:29:0b:5e:f2:b6:34:06:39:
         bf:ff:5e:a7:b8:60:2d:42:c9:c3:49:d9:50:77:1a:4e:74:29:
         e1:c1:1d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 19:34:58 2026 by rpki-client