Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07973353-f43e-3670-9afa-8445b65fccd8.roa
File:                     07973353-f43e-3670-9afa-8445b65fccd8.roa (raw, json)
Hash identifier:          4dZxBatbAtrb+Aww4YNojfrcc9kaA83DW9mF01IEpEY=
Subject key identifier:   21:56:88:8A:0D:22:9E:E1:70:7D:A3:37:22:21:FA:7B:F2:96:90:23
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0C036AE89C808BFAB5002000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07973353-f43e-3670-9afa-8445b65fccd8.roa
Signing time:             Tue 03 Mar 2026 15:18:10 +0000
ROA not before:           Tue 03 Mar 2026 15:18:10 +0000
ROA not after:            Mon 01 Jun 2026 14:18:10 +0000
asID:                     396586
IP address blocks:        192.5.6.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0c:03:6a:e8:9c:80:8b:fa:b5:00:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  3 15:18:10 2026 GMT
            Not After : Jun  1 14:18:10 2026 GMT
        Subject: CN=68f515a9-1987-4322-a227-92bdd7b91cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:88:20:3c:1b:b4:78:fc:4f:29:73:a6:60:
                    6e:3f:31:ce:08:8d:dc:95:e1:21:0a:76:17:38:91:
                    ac:1a:17:c2:9e:04:aa:fc:77:31:78:7b:f6:8e:e0:
                    8c:9f:b4:b3:db:c5:41:78:9b:c6:3b:b1:d8:b1:d5:
                    4e:8f:ff:4c:8e:1d:72:3b:46:79:fe:f4:a5:79:ea:
                    77:70:21:74:90:de:1b:6b:4c:cc:2b:fa:d8:85:34:
                    c8:fb:4e:a7:1b:99:e9:83:48:f5:38:d7:5c:ca:6c:
                    f3:5a:a9:43:e3:fc:bb:02:ca:f7:1e:c4:49:4e:6f:
                    df:f1:6e:6e:88:e0:9a:c6:b4:a3:2b:a3:a6:d0:f9:
                    aa:7c:c2:80:b1:87:6c:b4:5d:95:68:7c:37:05:1e:
                    80:c8:94:4c:08:b0:db:6f:e8:59:f7:93:5d:4b:2a:
                    1f:7e:fe:48:1f:20:ef:81:a5:ed:6a:6a:4b:c5:aa:
                    c2:c7:f8:dc:0b:cd:3a:e2:bd:89:34:47:31:e2:2e:
                    90:d4:f1:de:ba:a7:12:54:42:a2:bb:5b:33:b9:30:
                    01:d0:af:a6:d8:18:7f:c4:93:df:2e:f3:9a:b9:02:
                    40:1d:21:b2:66:60:a6:6c:a6:e9:b8:b6:d0:d6:3d:
                    b3:e6:5a:ac:39:0b:9c:8a:1e:1f:26:57:42:55:8c:
                    fa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:56:88:8A:0D:22:9E:E1:70:7D:A3:37:22:21:FA:7B:F2:96:90:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/07973353-f43e-3670-9afa-8445b65fccd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.6.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cf:11:23:ab:13:71:8f:c8:b2:2e:88:7b:2e:cf:8d:b3:6f:
         1a:2f:33:88:16:98:9b:b3:af:5e:0a:99:c7:28:ab:8b:11:e5:
         4e:cd:1b:6a:8e:9c:df:ab:8b:4b:1c:87:b9:50:f0:b3:5f:12:
         5c:b4:b3:6f:3d:1a:95:a6:bf:1a:a0:25:67:29:d6:9a:13:18:
         fa:0f:ad:96:e0:73:b0:f8:fe:7a:78:ba:84:cf:7e:d2:03:13:
         10:c7:09:a0:b1:34:49:be:58:7f:f9:99:c5:7a:a5:fc:b4:fe:
         b8:3c:9a:26:ae:2e:6d:19:67:63:8f:c7:1f:d6:c3:09:36:73:
         9f:fa:f3:b2:05:21:4f:e6:a4:63:bf:c7:fe:9e:37:2e:a0:de:
         1c:d6:70:4e:bb:98:b2:d1:cf:af:04:57:cf:9f:81:32:96:7c:
         e7:01:69:5a:1f:ec:28:51:62:05:0a:f6:54:4c:20:e6:5c:c6:
         cf:08:38:d5:a9:46:a1:32:89:a4:e2:d7:47:21:a6:1b:fd:05:
         a6:31:1d:c1:b8:7c:06:5b:41:5f:e6:d5:d4:0c:c6:8d:a2:f4:
         9c:13:fa:1f:88:fd:78:47:a2:c8:b9:1a:b6:84:2b:93:bc:6e:
         fa:7c:48:bc:19:ef:a3:4f:3c:dd:7b:13:95:65:c5:47:6c:47:
         6b:a1:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:09:05 2026 by rpki-client