Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0069028c-f6be-39d2-bb35-9551d895db25.roa
File:                     0069028c-f6be-39d2-bb35-9551d895db25.roa (raw, json)
Hash identifier:          v02mzDQpT6K6GZXeFcs9q8FY3IPt/LjqfRHoGaLwmBI=
Subject key identifier:   9A:77:D4:D0:FE:CA:F6:8F:DA:EB:B2:6A:91:BD:3A:4D:B2:6E:B4:C1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707E74483237A5F7F345580
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0069028c-f6be-39d2-bb35-9551d895db25.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     396552
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:e7:44:83:23:7a:5f:7f:34:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=2b37f70e-67b1-4083-ad40-641f037521e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ef:b2:dc:98:20:35:00:1d:8f:f4:44:ad:9f:
                    50:4a:02:b3:61:52:61:fb:b9:c0:3c:fa:a6:f9:3d:
                    cc:4d:ff:ba:44:59:56:c7:cb:28:12:96:fc:88:c9:
                    ab:fd:ea:a4:79:f0:60:23:8a:f6:af:e2:96:8e:33:
                    de:c1:d2:3a:89:20:fe:69:70:31:35:c2:ab:ae:ef:
                    d5:38:10:db:93:7b:34:50:fd:22:d8:a9:d1:04:13:
                    f9:18:63:3b:ec:7e:ce:2b:12:0e:65:96:da:ae:a0:
                    01:62:ee:eb:a2:8d:53:26:4c:e1:f3:35:36:fe:54:
                    a7:92:b5:34:c3:69:8e:bd:56:d6:cd:88:66:6c:5c:
                    52:47:b7:d1:a8:f9:ce:02:75:a6:b6:33:52:e3:be:
                    45:b8:62:0b:93:23:f1:59:cf:cc:77:f0:0d:c5:e2:
                    79:f4:5b:25:91:32:9b:ec:8d:16:5e:8b:6c:4c:48:
                    a1:15:33:0b:be:c1:3f:e3:fe:a5:5c:cc:02:6d:72:
                    99:5e:d9:01:eb:60:4e:56:38:7a:19:93:57:0f:84:
                    6e:cc:67:4a:66:a6:69:d1:3a:e1:11:df:fb:3f:5f:
                    89:5e:12:47:07:93:c1:3a:0f:78:b5:50:3b:a4:43:
                    59:f7:4b:0f:b1:f5:4a:65:50:93:89:25:06:6a:fb:
                    5a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:77:D4:D0:FE:CA:F6:8F:DA:EB:B2:6A:91:BD:3A:4D:B2:6E:B4:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0069028c-f6be-39d2-bb35-9551d895db25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7f:92:4f:61:8e:5a:cc:d9:13:24:91:8c:0c:9c:a8:0f:a9:
         35:ae:43:63:90:1c:62:d8:dc:f5:aa:bc:8b:44:2c:39:aa:7a:
         5a:89:78:0e:b9:4b:89:78:79:33:a0:91:d5:55:96:77:f7:d7:
         a5:6a:8e:76:d8:a0:1b:75:8e:be:82:b0:f3:89:0b:41:5e:8a:
         d2:4b:2d:91:00:e3:57:52:a7:34:ec:08:56:18:a6:65:57:6e:
         df:2f:bc:b6:19:c6:61:b1:ad:3f:08:15:d6:db:d5:c6:6c:7f:
         58:e0:88:c1:a3:24:bc:e3:75:f8:7b:b2:7b:c2:62:e5:fa:63:
         2e:fe:05:12:cb:5f:38:ef:35:59:02:0c:af:e8:dd:2f:25:3d:
         2d:46:c6:5f:65:43:5d:8a:b7:aa:81:2c:cb:d9:a2:1d:4b:3e:
         e0:05:ae:8e:07:1f:19:5c:6d:99:62:4a:76:9c:74:d0:7a:21:
         06:71:b8:88:5e:31:9c:28:6c:e5:ae:c6:7b:8d:87:f4:1b:4b:
         15:bc:df:a8:03:03:40:59:62:fa:6c:c9:b1:31:f6:98:c9:96:
         d4:54:e2:03:cd:10:27:6d:33:af:e3:56:e4:57:2d:27:ac:f6:
         aa:6a:3f:55:c5:25:06:39:50:18:c2:07:66:68:07:0b:da:7d:
         01:68:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:12:42 2026 by rpki-client