Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf884232-ebf7-3af1-b9ef-f03e1f5b8a54.roa
File:                     bf884232-ebf7-3af1-b9ef-f03e1f5b8a54.roa (raw, json)
Hash identifier:          jUhHvMGgN7ooyOlsWHdTeEJDpzg/dHdW+1qxbgaCa7I=
Subject key identifier:   2B:76:34:73:20:CA:02:9B:DA:1E:F5:50:9F:1A:FF:DE:D0:F4:7A:74
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F70882796678EDA57C09F6200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf884232-ebf7-3af1-b9ef-f03e1f5b8a54.roa
Signing time:             Fri 09 Oct 2026 01:00:12 +0000
ROA not before:           Fri 09 Oct 2026 01:00:12 +0000
ROA not after:            Thu 07 Jan 2027 02:00:12 +0000
asID:                     396546
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:70:88:27:96:67:8e:da:57:c0:9f:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct  9 01:00:12 2026 GMT
            Not After : Jan  7 02:00:12 2027 GMT
        Subject: CN=cc947293-f4ec-4fe5-a2e7-93413916aa39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2c:05:de:1b:e2:f7:e4:9c:17:12:66:1b:40:
                    5d:8b:05:55:79:89:41:b9:5e:ad:77:6a:00:15:bb:
                    83:17:97:20:a6:f8:ce:63:e8:c1:05:ad:aa:f8:2a:
                    59:8b:99:58:fc:97:2c:68:27:f9:61:33:df:99:3d:
                    21:35:7a:bd:cd:d3:06:86:d7:c7:6f:5c:f7:ef:f5:
                    56:94:26:fd:e3:25:25:fb:df:07:89:f8:ee:a9:08:
                    64:cf:e4:6d:42:03:f2:04:56:ed:16:96:12:75:d5:
                    b4:40:a3:e5:55:0f:77:42:27:5d:f1:c0:6a:3e:bc:
                    ec:17:e3:82:12:a1:a5:22:70:7d:1f:ec:90:32:bb:
                    e7:06:f9:84:00:8c:12:56:ee:e3:77:90:09:c6:e3:
                    55:00:f7:e8:85:3b:10:fb:6b:d0:04:e7:45:ed:f5:
                    8a:c2:9e:50:a9:ce:3e:91:93:01:3f:a4:ff:dc:65:
                    d2:b8:1c:1e:3e:a2:d9:da:3c:bc:5c:92:64:b6:84:
                    3d:52:42:ab:48:92:3f:4f:91:30:f6:23:66:75:43:
                    41:98:ea:b3:e5:3a:f4:8c:00:0d:3e:2a:4f:eb:ed:
                    d0:58:2e:97:b7:e2:26:40:5e:ce:0e:15:73:c8:3e:
                    50:7b:8b:61:ce:f8:f2:a9:90:2d:5e:02:71:68:c2:
                    1b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:76:34:73:20:CA:02:9B:DA:1E:F5:50:9F:1A:FF:DE:D0:F4:7A:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf884232-ebf7-3af1-b9ef-f03e1f5b8a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:f9:a3:fa:fd:40:58:bf:e8:7e:91:dd:a7:08:42:9c:a4:b4:
         52:89:f2:6e:06:33:ed:a2:3e:c9:df:16:0d:6e:56:c4:e1:0b:
         af:8c:cf:87:ee:d7:3e:97:3d:ab:3d:87:ed:1e:7f:cc:94:d5:
         56:e6:59:3e:97:f0:6a:26:50:cb:60:de:dc:55:7a:7c:2c:0c:
         ea:5e:20:d1:57:58:6e:ae:ed:a3:37:2a:07:81:a2:bd:b4:0e:
         c4:f6:42:b7:f1:db:73:b9:56:09:89:26:60:41:82:32:2c:ca:
         d0:ba:30:bc:d9:f3:71:01:04:6b:58:97:9c:6e:75:51:55:6e:
         8d:de:7d:d5:07:0b:4d:ff:6a:ef:50:b5:a5:58:d2:0d:0c:e5:
         03:2e:b3:29:ca:47:73:f1:a8:10:db:2a:90:5b:6f:57:21:20:
         3c:57:5f:dc:c7:05:5c:4d:e0:29:64:78:5d:e5:53:e4:7a:5c:
         88:b6:ab:89:61:2e:dd:70:65:07:0c:ae:11:3b:e3:ca:ba:b4:
         23:d5:60:ad:ae:80:bf:96:21:26:59:9f:25:89:51:59:63:66:
         b0:68:46:b2:0f:9a:72:f7:a9:5e:0d:b4:cd:3a:da:06:f7:a5:
         ee:20:f4:a8:0a:9b:ae:fb:94:4f:93:bd:82:9f:32:3c:17:ee:
         24:f2:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 04:32:49 2026 by rpki-client