Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0eefea0c-8ad1-36d8-aaf2-fbf0f77a1c8d.roa
File:                     0eefea0c-8ad1-36d8-aaf2-fbf0f77a1c8d.roa (raw, json)
Hash identifier:          MQ6S9lus7rb6hGpMpT20T2LHaraHNaqHAtxQbb23ZX0=
Subject key identifier:   E1:2D:D2:D6:78:AE:81:60:BE:82:DA:74:DF:73:83:CD:9F:9A:91:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0EA7DCC49588D9A4F4764840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0eefea0c-8ad1-36d8-aaf2-fbf0f77a1c8d.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     20362
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:dc:c4:95:88:d9:a4:f4:76:48:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=71b8b40c-8a2d-4dd2-b268-8cb184089b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:64:44:52:da:62:73:40:a1:ce:55:8c:76:e7:
                    d4:02:0d:e5:52:c8:21:74:4e:6c:95:5f:21:cd:50:
                    a8:43:c7:36:df:ed:78:07:ab:b3:ad:0a:68:00:f3:
                    19:f4:29:fb:a9:3a:97:a3:58:74:21:68:93:f2:23:
                    47:5f:07:a7:90:68:ed:d8:77:7f:80:cd:d0:82:2b:
                    16:dd:86:f6:ff:0d:17:96:b8:31:bf:af:fd:96:99:
                    37:f5:c7:b3:b9:2e:6a:50:bb:41:a3:1a:c5:53:5c:
                    e0:f6:e4:34:87:6a:04:a5:3f:5b:30:cb:b4:70:86:
                    f2:2b:60:fe:cf:18:90:5d:b9:fe:dc:ff:e1:78:9f:
                    c8:bf:39:c9:5e:f7:e7:79:a8:31:72:8d:74:c7:83:
                    4a:d2:46:04:ff:ac:16:e9:e2:bc:d6:2f:75:f8:be:
                    fe:15:e9:e5:a8:f3:2d:fc:fb:f9:69:a4:f7:96:0c:
                    ee:cd:12:c2:3b:88:b9:78:3f:eb:65:2f:74:33:6f:
                    98:19:5b:87:14:6b:88:8a:ea:04:fc:e7:0b:f5:8c:
                    4e:03:ad:a9:30:aa:1f:ef:fc:9e:e6:5a:15:0a:eb:
                    ea:42:99:51:f2:c3:a4:fd:82:1b:c8:06:e1:7c:27:
                    c1:26:4a:32:f6:71:86:dc:a8:c3:3c:6b:14:7b:f7:
                    67:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2D:D2:D6:78:AE:81:60:BE:82:DA:74:DF:73:83:CD:9F:9A:91:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0eefea0c-8ad1-36d8-aaf2-fbf0f77a1c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:12:dc:f4:3c:f0:03:0c:f4:ee:60:55:da:8c:33:18:51:ca:
         80:f5:ae:87:dc:cd:ef:e6:2d:e0:26:b1:1b:8e:16:7d:6f:67:
         b9:b7:08:12:29:ef:7e:8d:3a:02:ee:1d:cc:e9:40:b8:f1:be:
         0c:93:06:a3:09:17:dd:37:0a:d3:65:2c:55:7d:ee:a0:57:b1:
         c6:59:eb:ab:13:60:b9:d2:5d:fe:af:01:ff:85:3a:62:5d:c1:
         eb:93:32:92:2c:fb:11:a8:37:48:55:6f:84:ac:b3:1c:5b:92:
         91:62:8e:12:4b:a8:11:50:0a:df:82:16:38:ae:60:98:2f:ae:
         21:58:c5:df:f2:80:84:01:b2:f5:98:81:90:d4:d9:c9:78:3c:
         61:73:20:e3:b0:ac:1b:df:e9:b4:e0:32:15:c9:4e:35:22:3e:
         7b:14:0e:72:28:b0:9a:aa:c0:a6:75:05:db:98:c7:89:49:76:
         11:92:b5:cb:11:5b:74:7d:1c:85:91:1f:81:d6:25:89:27:a1:
         b5:d1:dd:c3:70:95:9a:e2:ff:61:5c:74:18:07:bc:3a:bf:e6:
         44:e6:92:05:34:af:f1:2a:f7:94:54:85:c4:9c:01:94:64:06:
         20:47:b8:04:23:fa:bd:c4:e9:33:9f:01:aa:f0:88:de:30:c6:
         bb:48:3d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:16 2026 by rpki-client