Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d8b092c-8dd6-3090-9764-f4fe01f001c7.roa
File:                     9d8b092c-8dd6-3090-9764-f4fe01f001c7.roa (raw, json)
Hash identifier:          tFEFL9z3G6+Wa+yhbfAQxQNUP1dQrhTlAnZvJukbJZk=
Subject key identifier:   6F:2D:6D:A0:85:B1:25:B7:6F:4F:CF:EC:3C:5C:34:AB:FF:2E:78:E9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA79070DE3640DEC6BA05BD00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d8b092c-8dd6-3090-9764-f4fe01f001c7.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396610
IP address blocks:        192.12.94.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:70:de:36:40:de:c6:ba:05:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=75b8d211-b91d-4255-aa0b-bae984dc790f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:d5:99:56:08:41:77:3a:ab:aa:8f:97:06:
                    c1:9c:10:2c:22:89:6d:f5:54:2b:ba:f3:9f:8c:66:
                    e6:be:e9:37:bc:bd:9f:bc:0e:0a:e5:8e:65:0a:49:
                    52:71:71:79:b9:58:04:f5:2a:98:5e:49:69:4b:45:
                    73:9a:41:1f:18:62:86:d4:f6:23:d9:3d:e7:38:1c:
                    30:60:44:37:50:a9:b3:8a:7e:6d:63:25:da:4b:76:
                    ca:bc:e2:2f:8e:62:6c:30:88:67:2b:41:f1:5e:15:
                    bd:fd:7c:a1:7b:71:ff:4d:05:d6:30:a4:68:68:fd:
                    18:0f:c4:19:b4:8a:a9:a7:53:a6:ff:ad:e1:b6:dd:
                    5f:48:88:8f:e1:c2:9b:4f:42:a9:4d:12:69:b0:0b:
                    74:21:6c:fc:b5:74:b5:96:35:9c:f0:27:91:78:98:
                    01:f3:5a:79:79:b9:82:de:2c:ae:df:6c:15:91:d9:
                    6f:c2:35:3f:2e:c9:54:d6:2a:35:e2:5a:1b:ea:85:
                    9e:13:d6:ab:50:a5:ce:1e:bc:6a:48:c7:e3:88:23:
                    d1:a3:05:16:33:ba:53:d1:f5:cf:19:f3:c1:93:61:
                    09:a9:a4:bb:cd:54:75:ba:9b:d0:e9:0f:ac:3d:58:
                    38:86:e5:6c:a7:06:99:b6:a4:d6:9b:38:1d:fa:80:
                    ca:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2D:6D:A0:85:B1:25:B7:6F:4F:CF:EC:3C:5C:34:AB:FF:2E:78:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9d8b092c-8dd6-3090-9764-f4fe01f001c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.12.94.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:20:28:a3:7b:df:26:c6:b4:74:2c:46:65:2f:5d:78:2b:e2:
         34:02:53:85:c3:3f:b2:13:d2:db:a1:66:c4:96:9a:6c:ae:24:
         c9:60:28:fb:40:b4:29:42:ae:ff:87:5c:3e:b0:50:16:5a:6b:
         b1:cb:c5:fb:79:61:26:06:9a:ac:b9:38:81:6a:7b:38:18:31:
         5b:f1:9c:b9:bd:11:13:8b:f9:c9:49:4a:c8:36:0e:d5:98:6c:
         7f:ab:b3:e4:12:e6:46:c8:1f:ef:18:be:e7:dd:ac:e2:c5:9f:
         66:f8:b5:7b:5f:bc:de:58:6d:07:98:ae:65:f8:8a:c2:1c:ec:
         2c:33:66:f9:b3:38:bc:9f:16:8a:4e:fb:56:df:ad:3f:79:a5:
         6b:3d:7b:82:3e:b4:72:f5:38:1b:b7:bc:1f:22:1f:37:0b:dd:
         aa:60:b6:83:52:80:49:a1:37:2a:b5:64:86:7d:d3:4c:22:73:
         f1:e9:2f:2b:fa:99:d8:b6:18:33:f3:02:e5:bc:aa:02:20:00:
         5c:cc:f5:b8:c2:0b:35:34:ce:74:4b:a8:0f:40:27:f8:37:f5:
         e0:b9:60:c2:40:e1:a6:cb:2f:af:35:32:51:2f:fd:86:c6:8c:
         dc:7c:13:87:c8:ce:50:7a:b7:04:e4:15:00:1f:7d:c0:9b:52:
         65:d3:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:47:44 2026 by rpki-client