Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2788be-6abd-36a7-98bd-397f82c136c6.roa
File:                     2e2788be-6abd-36a7-98bd-397f82c136c6.roa (raw, json)
Hash identifier:          nQAA+MG7ztOgIfbzgoRlCgzMgQvvTh6s9HLVU3Vxepw=
Subject key identifier:   13:53:43:EC:D5:DA:1E:69:BA:6B:73:E9:AE:5D:15:E2:3E:FA:57:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74E0D58DC41D7A3856CE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2788be-6abd-36a7-98bd-397f82c136c6.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     25485
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e0:d5:8d:c4:1d:7a:38:56:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=5fdf0fb6-6a4b-49c8-80df-e9e11ff4db42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:cb:ab:be:a1:0b:7c:76:3c:b6:0b:77:df:
                    71:eb:5a:71:1c:01:1e:82:14:ca:38:be:86:77:07:
                    8b:8f:67:4e:ec:5e:6e:a1:47:84:00:bd:3f:8d:6f:
                    b5:4e:fe:86:83:d9:b7:d7:b2:25:d2:99:fb:f8:c3:
                    54:1d:36:27:34:93:b6:e9:10:b6:ca:c9:68:e7:40:
                    75:5e:b8:53:40:3c:22:6a:42:26:05:7c:67:12:ae:
                    f5:17:3e:fa:79:20:b0:a2:9b:99:71:b3:9b:08:82:
                    22:c0:20:dd:f9:a5:8e:73:32:34:df:1b:91:63:a1:
                    37:a8:b6:f3:74:4d:a7:33:34:11:70:53:77:ee:95:
                    5a:a6:43:0a:51:ce:88:ce:41:7b:76:8c:0c:d0:0f:
                    4a:13:21:1b:bb:bd:84:9d:24:e5:dd:80:ce:fa:64:
                    64:fb:27:c3:0d:4b:6e:6b:d1:1c:24:9e:6a:3d:d6:
                    32:e9:8d:e3:e4:e0:72:3f:13:fe:9d:c8:30:ca:08:
                    db:1a:a1:ea:84:7f:8c:42:13:c4:9e:e6:b1:97:00:
                    e3:f6:b0:ef:c7:c9:0c:9a:cc:52:6a:ab:55:1f:5a:
                    70:20:65:28:43:56:7d:af:2b:5d:87:74:82:a6:c2:
                    7f:a9:70:e1:72:f4:aa:12:cc:19:f1:8b:76:d0:cc:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:53:43:EC:D5:DA:1E:69:BA:6B:73:E9:AE:5D:15:E2:3E:FA:57:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2788be-6abd-36a7-98bd-397f82c136c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c6:91:c9:14:cd:68:00:95:ca:26:2b:1f:02:e5:04:db:37:
         66:9f:70:c4:d6:97:ac:56:9e:db:7e:94:09:37:c7:86:d9:79:
         5c:8f:0a:7f:57:97:5c:a9:ce:1b:f0:d0:87:59:af:79:cf:a7:
         e1:4f:4f:0d:50:d7:89:8f:95:03:f5:70:0d:0e:df:e9:ad:eb:
         c1:16:a1:c2:58:3f:89:9a:65:f2:d0:b5:e9:b1:cb:1b:2c:73:
         58:3b:97:7e:4c:8d:38:ac:b5:b3:66:88:d0:4e:6a:ac:d5:78:
         ed:cc:6b:92:29:53:b9:3d:b3:d9:83:63:7c:92:6e:89:c2:9b:
         cb:f5:b6:53:d1:84:d8:a8:3d:52:ba:dc:fa:fa:38:3c:2c:f7:
         e4:11:d5:ec:95:af:52:6c:bd:7d:65:91:e9:17:aa:fa:d7:04:
         80:55:2d:f6:73:26:cd:ca:46:44:ea:8e:9a:12:d5:2b:41:dc:
         a2:af:c5:40:64:e2:6d:d4:88:cd:5f:ed:64:7b:6b:35:36:22:
         64:8d:20:6c:15:be:4c:1f:75:9b:7b:0a:9f:6a:93:9f:7a:52:
         a0:c7:2c:ab:03:ff:fd:24:f5:57:1e:e2:e2:81:6b:7b:36:76:
         fb:09:82:9c:d0:6d:cd:da:ae:e9:2c:34:97:01:11:1d:35:a0:
         70:26:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:09:54 2026 by rpki-client