Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f741eaa4-7207-382e-90e6-b5af2cda4689.roa
File:                     f741eaa4-7207-382e-90e6-b5af2cda4689.roa (raw, json)
Hash identifier:          JBgSmU0G1OnB66pYuKRvI6/Pf8SQqB7CUT11uIdklXA=
Subject key identifier:   A2:67:EC:31:E4:19:C2:8C:6F:7C:3C:72:38:91:92:18:4A:0B:DC:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584EC907249391DEE1E8AECE0600
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f741eaa4-7207-382e-90e6-b5af2cda4689.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     397200
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:24:93:91:de:e1:e8:ae:ce:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=dca4a9c9-1ae9-4a47-8305-0300a9b9f4fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c4:4d:48:ba:bb:e9:23:f4:5a:f2:b3:71:81:
                    70:7b:54:e0:0b:36:f2:96:df:7d:ef:24:6d:12:80:
                    21:a8:95:11:8d:6d:77:8e:fb:1a:79:22:cc:2d:65:
                    06:3f:52:66:2d:13:e3:b9:2c:a5:9c:54:64:b2:1a:
                    ec:f4:cc:e8:13:f3:70:a7:5e:17:b6:90:5f:9d:1d:
                    d3:bf:07:66:b5:c6:a7:13:99:94:60:d6:14:78:f0:
                    0b:33:0f:d5:28:8c:1e:f4:95:b8:98:4c:96:47:07:
                    98:ca:ec:8b:6f:55:17:ad:51:88:ca:a1:d2:db:8f:
                    f4:d7:e4:a3:ea:58:70:52:ae:65:64:93:90:ed:c4:
                    be:7d:a2:6a:3c:91:18:9b:23:9e:c8:b2:14:43:89:
                    72:2c:be:a7:b8:26:f3:af:da:01:01:eb:8d:47:6b:
                    6d:af:20:d7:79:49:05:16:29:2d:5f:f5:69:ac:2d:
                    57:32:6a:af:5f:3d:6a:aa:8b:52:a5:36:93:ba:b3:
                    43:65:a3:13:4f:90:85:c2:df:da:70:07:3f:ae:7f:
                    06:59:4b:ee:28:51:8e:35:ed:76:4d:38:6f:47:69:
                    6d:a3:2b:c2:d2:48:6e:07:fc:e6:37:a4:30:ea:ee:
                    77:99:77:27:fd:9a:9c:b7:49:fd:c7:ee:a6:14:a1:
                    d5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:67:EC:31:E4:19:C2:8C:6F:7C:3C:72:38:91:92:18:4A:0B:DC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f741eaa4-7207-382e-90e6-b5af2cda4689.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:57:41:da:41:06:89:8d:56:af:1b:85:71:31:00:3f:f4:43:
         15:a9:f2:da:70:d0:62:ce:4e:26:69:42:72:09:87:4f:05:0d:
         26:7c:2a:e6:5b:5d:8c:db:01:49:4b:4e:9e:be:5e:c9:c2:a8:
         f5:13:23:d4:a4:97:a3:3f:7d:80:d6:d4:7e:7e:7a:ce:35:86:
         9d:57:f7:4f:89:0a:09:29:b2:9c:f3:69:07:f2:37:a3:04:f1:
         f4:b0:27:b2:c4:03:01:43:c4:e8:e7:d0:5e:f7:b0:14:ba:ab:
         09:3f:b3:92:02:c6:9f:b3:87:4b:d3:0a:7f:e9:02:47:8b:4d:
         c2:68:1d:e8:97:a1:25:12:ef:d2:ff:03:a7:c6:db:47:ed:ec:
         57:d8:ea:d2:ab:79:47:26:16:9a:a5:e8:eb:d0:bf:43:65:1a:
         c9:6d:9d:6e:ec:cc:a4:58:39:95:ff:78:94:07:74:63:19:1c:
         fc:88:e3:01:d8:40:e1:e9:03:1b:97:72:e1:f4:c9:02:31:62:
         07:06:9c:42:5c:6b:36:cc:d2:1a:d0:f7:a6:8e:fa:de:6c:23:
         cd:ad:d9:38:71:f8:78:39:4b:14:cd:64:b6:cf:87:2f:af:68:
         75:b6:1a:83:30:08:ca:62:e7:82:d2:1f:94:ee:3a:a0:36:2e:
         7e:0c:b8:10
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE7JBySTkd7h6K7OBgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDgxMDAxMDAxMloXDTI2MTEwODAyMDAxMlowLzEtMCsGA1UEAxMk
ZGNhNGE5YzktMWFlOS00YTQ3LTgzMDUtMDMwMGE5YjlmNGZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48RNSLq76SP0WvKzcYFwe1TgCzbylt997yRt
EoAhqJURjW13jvsaeSLMLWUGP1JmLRPjuSylnFRkshrs9MzoE/Nwp14XtpBfnR3T
vwdmtcanE5mUYNYUePALMw/VKIwe9JW4mEyWRweYyuyLb1UXrVGIyqHS24/01+Sj
6lhwUq5lZJOQ7cS+faJqPJEYmyOeyLIUQ4lyLL6nuCbzr9oBAeuNR2ttryDXeUkF
FiktX/VprC1XMmqvXz1qqotSpTaTurNDZaMTT5CFwt/acAc/rn8GWUvuKFGONe12
TThvR2ltoyvC0khuB/zmN6Qw6u53mXcn/Zqct0n9x+6mFKHV/wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFKJn7DHkGcKMb3w8cjiRkhhKC9zgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjc0MWVhYTQtNzIwNy0z
ODJlLTkwZTYtYjVhZjJjZGE0Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwCMzHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCCV0HaQQaJjVavG4VxMQA/9EMVqfLacNBizk4maUJyCYdPBQ0mfCrm
W12M2wFJS06evl7Jwqj1EyPUpJejP32A1tR+fnrONYadV/dPiQoJKbKc82kH8jej
BPH0sCeyxAMBQ8To59Be97AUuqsJP7OSAsafs4dL0wp/6QJHi03CaB3ol6ElEu/S
/wOnxttH7exX2OrSq3lHJhaapejr0L9DZRrJbZ1u7MykWDmV/3iUB3RjGRz8iOMB
2EDh6QMbl3Lh9MkCMWIHBpxCXGs2zNIa0PemjvrebCPNrdk4cfh4OUsUzWS2z4cv
r2h1thqDMAjKYueC0h+U7jqgNi5+DLgQ
-----END CERTIFICATE-----
Generated at Wed Aug 19 19:31:44 2026 by rpki-client