Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fb44b1c-5023-3f3b-a542-3818dca6e06f.roa
File:                     9fb44b1c-5023-3f3b-a542-3818dca6e06f.roa (raw, json)
Hash identifier:          meB1s/SXBm3aSVaXp7I5enfTzrHYy7ale5+YB3/5NnU=
Subject key identifier:   5A:B3:99:CA:1E:42:3E:D4:BC:E5:38:3D:F4:60:E6:4D:83:25:5F:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA7978249873E6906B3ADFC00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fb44b1c-5023-3f3b-a542-3818dca6e06f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     397195
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:82:49:87:3e:69:06:b3:ad:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7b0f7d4f-a9e1-48ee-a3ff-2af2a7421b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a3:e4:13:63:85:9c:c0:f7:b4:64:24:39:0d:
                    cc:c6:ca:e6:ed:83:f7:77:18:8a:67:ee:af:7e:07:
                    95:cb:6c:af:c3:f5:51:2d:48:48:1f:41:f1:47:8a:
                    01:3c:d2:97:9a:33:5d:87:a7:ec:a9:03:cc:f7:8c:
                    3d:f6:43:d7:e4:09:d8:c9:18:1e:f7:cb:b3:6d:43:
                    9b:d2:b7:60:07:9c:e7:aa:c4:2b:cb:33:ac:8a:4a:
                    09:f9:57:88:ea:d7:d6:16:26:b9:d5:64:7a:bd:db:
                    42:1c:6e:f1:de:f2:53:6a:53:d9:db:be:e5:aa:81:
                    b3:be:6c:df:20:9b:20:2c:6f:b8:7e:4d:eb:d3:85:
                    ac:e4:a6:d4:12:f1:e2:ba:d6:c1:2a:ec:26:6c:ae:
                    dc:ff:4f:c6:13:47:6e:72:8a:59:bb:52:cf:53:eb:
                    de:36:22:4f:fe:dd:ec:89:76:57:81:20:66:d5:7f:
                    63:38:41:89:40:d3:f3:ad:48:f1:70:2e:b6:5b:97:
                    8e:7e:05:cf:77:89:52:63:ce:0e:da:57:e6:be:de:
                    17:0c:39:7e:a3:0a:86:bb:dd:c1:84:e6:8c:3f:dd:
                    07:d8:89:14:53:72:b3:d4:a1:85:70:d0:c7:c4:4d:
                    2e:64:f0:32:51:ff:3c:0b:5d:6f:18:fd:cf:51:65:
                    c3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B3:99:CA:1E:42:3E:D4:BC:E5:38:3D:F4:60:E6:4D:83:25:5F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9fb44b1c-5023-3f3b-a542-3818dca6e06f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:cc:c5:34:af:8f:19:02:84:b6:59:e9:06:d3:f6:c9:fd:
         7e:9d:af:0b:85:e0:56:8d:59:28:10:ea:9e:30:e9:7c:95:55:
         8f:29:ff:36:86:0a:a0:53:11:7e:49:41:3a:16:8d:d5:73:ab:
         75:e7:18:ba:ff:1e:55:33:b6:66:4a:42:d8:28:e5:0b:b0:ac:
         9c:54:b2:19:f8:52:05:8c:22:df:97:f2:05:07:4d:ae:cf:e1:
         a8:31:02:bb:a1:b6:ae:e4:43:eb:fc:30:db:77:bd:db:03:f3:
         a8:9b:e0:35:1e:1c:3e:70:c8:e5:ab:fc:ed:95:7f:5e:e6:fd:
         23:c0:76:3b:f1:0b:6d:41:22:4f:f0:40:28:01:2e:fa:45:31:
         d8:ca:74:33:c9:d8:da:14:c9:f5:9a:ce:b1:b3:63:01:db:ce:
         37:3e:f9:86:9b:a6:2c:fb:33:f3:b7:b7:ce:86:ca:1a:1b:90:
         b6:d6:c0:6c:b4:09:97:7e:1d:3f:15:4b:d6:fa:5d:49:3c:31:
         ae:33:f6:9e:0d:80:2f:3f:ec:75:d4:d5:ab:4f:df:b0:1c:81:
         5e:c5:ed:ef:70:5c:11:65:ff:ae:71:d4:06:ef:21:81:ab:18:
         42:c5:17:f4:53:35:36:68:4c:0b:b5:70:fb:0f:49:99:4a:c7:
         14:d4:d9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 18:46:17 2026 by rpki-client