Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d21c39d3-e663-3ece-b3f2-d29b98426816.roa
File:                     d21c39d3-e663-3ece-b3f2-d29b98426816.roa (raw, json)
Hash identifier:          7XR4U+e/gG9BTLY7L3avyn+43Vq6/hCVzIMKJ9gYLXc=
Subject key identifier:   33:1E:9F:92:3B:8B:B7:3A:8E:25:5F:BE:AD:07:71:D0:52:C9:A6:1F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584F49867AEAE39800858769B180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d21c39d3-e663-3ece-b3f2-d29b98426816.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     396604
IP address blocks:        192.42.174.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:7a:ea:e3:98:00:85:87:69:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=793e6133-3eaa-4957-a2c8-3d31ffd8cb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:74:a3:14:c8:5a:04:ae:c6:b7:48:6c:e9:f3:
                    33:6d:c3:86:89:95:c9:5f:66:3d:20:c4:22:66:b4:
                    12:bc:33:77:00:8d:8e:90:7d:97:f9:1a:96:d6:37:
                    d7:e5:cf:a3:7a:00:3e:7a:29:b7:8a:2b:e3:14:0c:
                    b3:b4:b7:9d:61:4c:67:5b:2c:d9:00:4d:bd:c0:ef:
                    2e:6e:be:19:82:b3:68:1b:11:cf:14:c5:47:56:b1:
                    07:07:e2:dc:26:7d:d7:88:79:01:28:da:46:a1:6f:
                    29:a5:4e:bb:cd:35:3a:8b:60:25:75:52:3d:41:62:
                    6c:1e:f6:2b:b2:fe:ed:c5:b0:76:be:44:db:0d:a9:
                    72:65:eb:02:4a:87:35:c5:22:84:a9:33:4b:0c:fc:
                    b3:53:3f:43:91:e0:3f:8d:d8:d7:50:15:be:27:d6:
                    a1:01:57:b1:98:66:52:f3:7f:21:82:db:f9:5b:e0:
                    39:f4:af:0c:9c:5b:62:9d:3c:a9:53:7a:6c:eb:66:
                    c3:f1:63:1d:50:20:8c:93:80:88:54:8d:e0:aa:70:
                    78:fe:6d:a0:2d:41:7d:fe:12:58:ed:ad:50:a7:58:
                    0d:aa:05:24:2a:ed:3a:46:e7:72:a8:4e:13:7a:64:
                    36:b3:8d:b2:8d:9e:79:c2:de:68:0c:45:4d:54:19:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1E:9F:92:3B:8B:B7:3A:8E:25:5F:BE:AD:07:71:D0:52:C9:A6:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d21c39d3-e663-3ece-b3f2-d29b98426816.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.42.174.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d4:66:4a:fe:67:76:4f:df:e6:eb:a3:5e:2b:54:29:5d:9e:
         ae:3e:e2:4f:45:97:77:ed:e0:5d:70:09:ab:0f:9d:ee:f6:24:
         c6:4e:6a:0b:f0:b2:f8:30:69:62:1b:30:12:a0:ca:7e:6b:6d:
         45:9e:52:bc:c7:93:34:3d:79:e4:85:07:9d:8f:53:89:11:ba:
         16:dd:25:d9:85:3a:b9:d0:9f:88:78:28:17:19:ad:1d:c3:99:
         3a:9d:8a:da:5a:e2:aa:12:da:8d:de:4d:5d:5a:35:bc:10:3e:
         d4:80:76:53:60:28:54:bd:3f:b4:11:eb:81:19:2e:a5:23:00:
         90:de:a5:10:ac:99:24:ac:48:69:cb:0f:d8:50:97:6d:38:3c:
         2e:b4:f4:37:34:e2:52:73:f3:b4:90:0d:b9:8a:92:50:2c:73:
         f6:20:fe:21:d9:a9:a1:4d:d4:78:c2:7e:9b:27:16:08:ab:47:
         1d:e0:a5:2d:26:ce:d3:ae:b5:f0:86:f1:75:c1:12:ed:05:8c:
         83:0c:6d:78:57:7b:14:d1:40:2f:1f:3e:24:8a:f9:88:cd:6b:
         cb:58:f8:58:cc:f8:52:f2:db:b2:83:19:e3:1d:b7:24:00:3c:
         1a:5a:0a:75:19:60:a2:0c:fd:f9:94:7d:8f:fe:d4:60:cc:be:
         68:25:95:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:11:13 2026 by rpki-client