Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5bb1dcc-13be-3081-b3a2-2cf0196b1585.roa
File:                     c5bb1dcc-13be-3081-b3a2-2cf0196b1585.roa (raw, json)
Hash identifier:          Ud8cmiMyeIciG04qAHXzGTP0d+Gu25OOLiUY/hNQfVM=
Subject key identifier:   2B:27:57:D0:81:55:36:BF:CA:70:5B:29:82:86:DF:17:C1:AF:DA:DB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EA799B8AF768D91669EB64D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5bb1dcc-13be-3081-b3a2-2cf0196b1585.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396567
IP address blocks:        192.30.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:b8:af:76:8d:91:66:9e:b6:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=909ad4f5-2b59-47d8-9878-a0111b689d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:35:95:5b:ee:5f:b5:72:9b:89:4d:6d:0e:
                    d3:f6:e7:44:fe:0b:52:ac:0c:7e:32:af:9a:92:c6:
                    40:64:54:f2:be:9e:db:6e:27:d4:e2:5a:03:1e:11:
                    c1:aa:1f:62:35:33:61:06:4d:d9:44:c1:f4:fb:7a:
                    e9:a6:5c:8f:70:ee:d8:03:ef:08:7d:2c:0c:98:ce:
                    b8:de:1b:75:3e:e0:ce:c8:9e:e0:d4:32:41:75:29:
                    41:35:59:97:d7:3d:65:62:0f:33:09:23:80:e4:dd:
                    35:df:f8:ea:8f:c8:85:58:7e:5b:56:ba:0f:b3:5f:
                    92:4a:68:f2:09:59:cf:20:52:e5:87:06:7d:94:07:
                    06:7b:3d:ce:27:f2:0e:c7:93:7b:d1:05:2f:07:53:
                    d6:ca:4e:71:5f:5f:d6:51:96:af:9f:5b:ac:f8:08:
                    9a:17:03:dd:39:ba:c8:cf:fd:43:8a:ee:24:e4:fc:
                    3a:2a:52:18:0b:b7:25:f0:0a:ae:e2:c9:a5:ed:84:
                    84:bd:90:ed:c5:73:1f:bf:f4:f2:a5:c7:1d:99:33:
                    fe:94:48:2a:a8:30:78:7e:99:27:f5:04:b8:64:cd:
                    57:10:d3:7b:b4:e4:f4:ee:9b:5a:27:f1:01:da:1d:
                    47:6a:8c:e1:da:7b:bd:91:1a:32:1e:7f:e7:5f:5c:
                    68:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:27:57:D0:81:55:36:BF:CA:70:5B:29:82:86:DF:17:C1:AF:DA:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c5bb1dcc-13be-3081-b3a2-2cf0196b1585.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:49:31:87:fd:75:a6:c8:e5:e4:1c:04:fb:37:54:cb:e4:f9:
         ce:1c:fc:57:f5:89:55:e5:10:e0:3b:49:18:70:2c:0e:64:7e:
         b7:ea:05:38:15:0c:5c:bd:c5:0f:45:61:8e:e9:90:bb:f9:56:
         89:66:44:18:d4:50:dd:71:5d:eb:9d:5b:1f:19:5f:81:eb:82:
         3e:af:a7:89:83:ff:73:8d:ff:20:a3:52:78:6a:da:38:eb:ff:
         a2:85:5e:65:15:6c:d7:0f:02:d7:6c:4f:79:a0:45:87:f9:97:
         30:ce:be:ad:dd:29:d1:34:c2:70:c4:75:4f:27:3e:6c:31:fa:
         f0:4b:11:cb:64:bc:07:0d:9d:ca:56:bd:7e:14:4c:8e:51:d0:
         91:59:2f:3c:15:7f:48:65:51:9f:33:7a:95:88:1f:2b:38:fa:
         95:95:fd:4c:4d:73:7c:a2:61:76:86:a1:b2:ad:49:1d:3e:e1:
         c7:17:e8:3d:43:90:7a:57:41:d2:e0:e7:18:d4:8e:91:f6:46:
         a0:5a:fa:54:24:a6:9e:d3:a4:60:d7:1b:68:fa:23:f4:5b:66:
         03:7c:ac:b7:59:e8:5c:d9:0b:58:ca:21:fa:b4:be:90:16:40:
         14:27:96:5c:31:a1:a2:2a:15:30:30:59:e0:3d:77:cb:b8:7d:
         15:fe:ff:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 20:19:19 2026 by rpki-client