Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15f903b9-538f-392c-b1bb-e2540408171f.roa
File:                     15f903b9-538f-392c-b1bb-e2540408171f.roa (raw, json)
Hash identifier:          35hs0uKWD3IKyEeEExi29TqGi5r+iZjePv4fj0EQ4eY=
Subject key identifier:   11:CA:46:33:A0:3C:A6:0C:29:F6:58:17:02:13:78:55:2E:EB:74:E0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D0EA7DADA02283FE32692FFC0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15f903b9-538f-392c-b1bb-e2540408171f.roa
Signing time:             Wed 04 Mar 2026 14:00:41 +0000
ROA not before:           Wed 04 Mar 2026 14:00:41 +0000
ROA not after:            Tue 02 Jun 2026 13:00:41 +0000
asID:                     397211
IP address blocks:        192.81.185.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0e:a7:da:da:02:28:3f:e3:26:92:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  4 14:00:41 2026 GMT
            Not After : Jun  2 13:00:41 2026 GMT
        Subject: CN=2acd5012-787f-4021-925c-3b23710e6f63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f3:27:57:80:7a:d8:6f:fa:ef:70:e5:9e:f4:
                    9e:4d:2e:d2:51:1b:c6:77:19:d8:ab:4e:f7:ef:c3:
                    6f:09:69:4f:d9:a9:1c:19:38:d0:b1:02:a6:b7:cf:
                    56:ab:9c:25:9b:d8:63:6b:6c:aa:40:da:7b:6d:82:
                    eb:72:d8:b6:0a:da:fa:e7:c7:ef:f9:19:4b:5c:d4:
                    17:46:59:47:35:f5:b2:4e:14:a1:57:89:30:01:21:
                    37:32:da:59:d9:bf:63:ca:b7:87:b0:e5:8d:a3:a9:
                    64:1e:d7:ac:88:c9:17:b5:28:01:31:2c:b9:91:a9:
                    cf:cf:e2:e9:00:da:6e:60:b4:ad:89:65:0c:a6:3c:
                    96:7c:7b:04:53:54:54:04:45:69:4e:fa:dc:ff:5e:
                    b6:a2:94:7f:6e:4d:75:0f:1b:2a:3c:01:8f:26:4d:
                    a7:a5:5e:c3:04:ab:97:16:64:12:63:6c:83:66:94:
                    63:35:b0:d7:de:fb:a1:65:9c:23:67:3c:48:24:08:
                    ab:ea:35:68:9c:eb:c0:72:a6:69:a5:30:64:c6:04:
                    23:0f:99:77:8c:77:ab:ee:ce:52:81:15:d2:1d:1b:
                    72:4a:33:68:7e:57:c5:49:eb:79:ab:5f:34:e2:c0:
                    dd:dc:eb:c1:33:94:c7:5e:34:3c:8c:83:b0:d2:48:
                    bd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CA:46:33:A0:3C:A6:0C:29:F6:58:17:02:13:78:55:2E:EB:74:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/15f903b9-538f-392c-b1bb-e2540408171f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.185.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e5:4a:93:01:c6:be:da:b0:13:88:2d:8b:15:17:47:23:e4:
         5b:ab:cc:52:59:5c:29:bf:48:b2:58:eb:11:6d:0f:ab:98:5f:
         3b:9f:fc:58:1e:cb:01:89:7f:e6:33:d3:f6:33:64:ea:e3:c2:
         81:19:02:63:4f:4f:5c:94:a7:8c:f2:01:82:73:dc:4c:39:45:
         68:c0:91:27:ad:eb:d0:13:e2:1e:7b:0e:8d:fa:c8:07:cd:78:
         68:3a:de:05:0c:2d:e1:63:5d:55:d7:ee:1e:ca:72:a3:3f:cd:
         cc:c5:69:68:d1:75:50:3b:65:71:45:1e:14:49:53:f3:ff:08:
         68:1d:7a:2d:c6:3b:7b:21:ae:12:98:7c:43:a1:0b:71:a2:f8:
         91:c1:73:ae:33:4d:6d:5a:e5:f4:1d:37:44:5b:2c:8b:5d:49:
         de:4b:78:e8:42:f1:09:3b:81:34:7c:c1:8f:c0:40:27:c1:9b:
         6f:54:61:04:b3:5b:67:82:11:05:1d:02:d0:e0:09:62:2a:28:
         3b:5a:90:29:fe:d6:77:61:13:06:15:f1:c5:bc:ca:9a:70:ce:
         c7:63:72:d4:ba:ad:8c:b6:ab:cb:e2:b4:10:3c:64:5e:3d:6e:
         32:39:2d:a5:6b:bc:c3:33:e0:0e:d0:62:d2:bb:c1:2a:bf:d5:
         5b:9a:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:04:43 2026 by rpki-client