Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c139d57-32a7-3377-986e-20b21fb65a11.roa
File:                     0c139d57-32a7-3377-986e-20b21fb65a11.roa (raw, json)
Hash identifier:          8GM1RZrNa+YZg+7Ex6KknNvgOH39G5UL6pgP0AKYWq0=
Subject key identifier:   47:FA:7B:73:4B:15:F6:95:CE:52:9D:94:B6:88:38:6B:21:19:04:4C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74F8CBF16B179F39EAA980
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c139d57-32a7-3377-986e-20b21fb65a11.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     397199
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:f8:cb:f1:6b:17:9f:39:ea:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=11da71d2-de1a-4935-ac3b-a3b1c093d1be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:52:f4:de:d3:ff:29:16:58:f0:df:a5:17:45:
                    ce:69:03:e2:d1:b5:07:57:3e:ca:b5:a8:0b:5a:1e:
                    da:68:ce:b0:c0:0c:81:07:35:93:05:cd:9e:e0:e9:
                    ea:55:54:a3:11:ff:8b:0a:22:59:ba:0e:92:93:f4:
                    20:99:ef:b0:cf:05:c4:37:96:72:55:65:f8:5e:cc:
                    dd:48:dd:97:3d:e6:85:e1:99:40:64:e8:50:ec:c3:
                    03:cf:a3:ba:d5:af:fd:5f:e2:34:ba:5a:62:7e:53:
                    75:fe:8f:4f:1c:e8:ce:ca:97:e1:eb:86:2d:d1:ba:
                    d6:ba:7d:92:24:ea:6e:5e:22:9d:f4:d0:2d:b9:23:
                    a9:67:39:36:4e:be:f5:26:94:ad:4c:b1:30:d5:4b:
                    18:cc:69:1b:c5:e0:6a:b5:84:7c:fa:57:e6:77:5b:
                    a2:15:f9:52:1d:3a:b9:41:3d:99:a0:64:75:9e:da:
                    0a:55:be:43:91:df:cc:e2:8b:dd:e7:20:4b:f1:dd:
                    19:b1:b3:74:13:4b:d2:55:37:bb:a2:29:0e:b1:e8:
                    13:3e:ce:e7:22:f4:7b:59:67:25:c1:57:28:1a:80:
                    39:1a:80:92:51:12:b7:bb:90:1d:b2:72:34:c5:fa:
                    26:5f:f6:08:5c:35:55:d8:2b:be:49:57:af:31:99:
                    2f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:FA:7B:73:4B:15:F6:95:CE:52:9D:94:B6:88:38:6B:21:19:04:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0c139d57-32a7-3377-986e-20b21fb65a11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ea:97:47:20:ee:d6:14:95:24:3a:87:50:dd:2e:a9:89:c5:
         d4:5c:a7:f6:10:8e:9a:6a:37:a5:ec:db:05:c7:b7:bb:5f:6e:
         aa:ce:b8:99:e8:15:b4:05:e7:91:d1:30:da:aa:ad:68:98:f3:
         c6:21:c7:be:d3:98:df:7b:bb:8d:94:89:1e:8e:c3:26:11:8c:
         51:3b:e0:2d:8e:e6:ab:0a:36:3a:dd:3a:cf:30:fe:cd:c6:a7:
         76:b6:1d:b5:0b:30:da:5c:34:31:e9:ce:91:b0:b4:f8:e2:56:
         e2:7a:aa:8d:9e:b6:f0:5b:4d:ce:d2:c3:02:1e:a3:5e:c3:bc:
         f2:f9:ea:58:fe:7e:a4:15:8f:ce:2e:a5:5e:19:ee:e7:4d:98:
         c9:42:78:ae:39:a7:58:7c:93:26:2e:7a:65:73:24:82:11:b7:
         58:4f:13:65:9c:50:1b:ec:36:78:64:77:d7:d5:52:38:f9:d1:
         b8:e2:af:90:c2:2d:39:17:44:c3:21:bd:e2:28:44:48:2c:e0:
         01:7a:01:88:ad:d4:c1:c0:ec:02:84:64:51:26:64:1f:05:80:
         0a:0d:85:2a:d6:d7:b3:82:9d:cc:f4:3c:a8:56:0f:ea:3e:b0:
         3b:9d:7f:d7:16:1c:34:eb:de:4f:e6:8a:8a:b2:56:43:0a:73:
         a1:2e:cd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:47:07 2026 by rpki-client