Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224c3607-a84e-3e09-86dc-716b664f84fa.roa
File:                     224c3607-a84e-3e09-86dc-716b664f84fa.roa (raw, json)
Hash identifier:          PVMEj/o41k1Qu8mZiDh15xddKN5ok78MC37YCyUc7pk=
Subject key identifier:   37:31:53:FD:73:A1:CE:A5:51:A9:6C:AB:DF:42:F9:9A:63:9D:34:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D94AE955135EC50C0B9560900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224c3607-a84e-3e09-86dc-716b664f84fa.roa
Signing time:             Tue 21 Apr 2026 14:12:58 +0000
ROA not before:           Tue 21 Apr 2026 14:12:58 +0000
ROA not after:            Mon 20 Jul 2026 14:12:58 +0000
asID:                     36624
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:ae:95:51:35:ec:50:c0:b9:56:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 14:12:58 2026 GMT
            Not After : Jul 20 14:12:58 2026 GMT
        Subject: CN=0ab171cc-f35b-46f2-9191-caacd0b012dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:13:98:80:b2:10:32:5e:d1:f0:ad:69:63:
                    75:49:dd:55:a4:e6:be:3d:b2:08:f2:b7:c6:83:b7:
                    b1:95:cf:a8:0d:f3:e0:fd:f7:02:e9:e2:45:97:b3:
                    d0:7c:13:fb:08:b5:7e:d2:34:35:cf:13:25:cf:00:
                    e6:dc:2c:4f:54:9f:de:37:bc:45:8d:eb:bd:95:0c:
                    37:13:b9:7f:b7:9c:f1:bc:13:7b:d5:32:af:1a:c4:
                    93:c2:b8:27:be:dd:f8:67:66:d2:de:d4:97:ba:fb:
                    23:76:f2:df:16:6d:ad:73:7c:11:19:1c:6e:85:6a:
                    b2:f9:1e:e3:bb:ee:e5:ef:26:cb:ae:32:56:b0:64:
                    45:aa:50:99:71:a5:05:07:6d:48:f8:69:21:08:0c:
                    cf:0b:52:77:fa:db:f3:04:41:9e:9f:35:4c:c6:08:
                    c5:6d:f2:ea:de:0e:dc:17:5a:78:b6:18:cf:cc:2e:
                    1a:f5:7a:63:48:b2:fb:7d:35:f0:f0:8a:a1:23:ec:
                    94:b4:49:66:b8:2a:26:3c:64:71:3b:e5:28:ad:f5:
                    20:39:fa:16:aa:37:34:09:f5:a8:1f:5c:8c:b8:88:
                    64:94:58:b8:db:cd:42:15:9b:dc:29:29:e7:ad:f1:
                    1a:96:f4:be:87:a2:11:70:0c:83:61:e0:01:33:59:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:31:53:FD:73:A1:CE:A5:51:A9:6C:AB:DF:42:F9:9A:63:9D:34:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/224c3607-a84e-3e09-86dc-716b664f84fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0b:cd:f7:44:4a:fd:b2:ee:16:78:10:14:ce:be:ae:11:6d:
         ba:03:78:99:34:a2:cd:21:24:90:8d:0c:3a:4f:71:be:a4:37:
         6b:0f:db:26:e0:1d:97:85:4b:6a:a9:eb:74:14:66:a5:7d:8c:
         31:bb:3c:30:26:4b:0e:da:b8:46:b3:16:69:4e:0b:13:87:e2:
         4c:d8:2e:ad:0b:28:db:77:0f:dd:0f:3e:60:fb:7c:f0:93:bb:
         a0:80:38:16:71:9a:4e:34:10:72:d6:7c:0d:61:bf:cc:24:c8:
         a0:ac:68:e1:b9:57:92:6e:b5:12:33:61:b4:22:5a:8e:e3:e6:
         79:59:4d:98:14:3d:68:3f:37:3e:b5:d0:6c:15:af:e4:70:2f:
         ff:9d:3d:7e:46:d9:9c:da:b1:98:a1:d2:fe:bd:d8:c7:67:71:
         30:2a:91:a7:05:82:8f:07:8b:62:7d:02:25:07:3b:05:b3:bb:
         6a:7a:d1:2e:2a:de:c8:68:35:66:1f:c9:19:4f:e6:de:36:b6:
         e4:a9:40:a9:4d:bc:b4:2e:25:1c:91:f8:9f:ac:38:8e:40:50:
         64:0f:4b:02:f5:1a:4f:b9:a5:ce:f6:a0:23:eb:cc:f0:70:61:
         8d:25:18:eb:7b:6f:a8:72:aa:7e:96:6c:f1:a7:95:57:c9:79:
         0f:b6:de:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:34 2026 by rpki-client