Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b73430-aea7-3c43-bf44-b701c34a63ed.roa
File:                     37b73430-aea7-3c43-bf44-b701c34a63ed.roa (raw, json)
Hash identifier:          1joGlzmnxKgwRP6RaGfTwh/5TLoW748W536tO72wVJk=
Subject key identifier:   68:64:EE:2C:F1:06:A0:FD:05:06:81:7C:A9:71:FF:45:64:53:85:4B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74FB7CFB4726FA43B27D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b73430-aea7-3c43-bf44-b701c34a63ed.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     396541
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:fb:7c:fb:47:26:fa:43:b2:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=d5467a17-1949-45f7-9c0e-ec2a03050061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c4:af:a7:04:32:b8:70:f5:3b:97:b0:99:a2:
                    e4:e6:2d:87:00:d8:aa:23:74:e5:0a:53:34:e7:b6:
                    f0:66:a2:84:11:97:59:47:80:a4:73:7c:f9:e1:dd:
                    df:60:82:a2:ed:af:37:93:6d:97:ca:99:b3:5e:2a:
                    08:8f:6e:2f:89:be:52:7a:50:e2:bf:1e:79:70:ff:
                    9a:4b:3c:4e:19:ff:a6:87:b4:8a:a1:c2:17:aa:d8:
                    e2:10:e5:74:f6:52:f3:2a:c3:3e:a2:fd:7f:48:e0:
                    34:b9:bf:60:e6:c9:6e:49:16:7f:fa:97:33:0b:36:
                    1e:f4:21:5e:b8:3c:74:e4:27:81:94:12:14:40:c6:
                    b5:a7:ff:6e:57:75:d3:6a:da:da:3e:b6:60:2e:0a:
                    bc:92:ef:09:d4:9a:e6:f8:01:7a:78:fb:c1:a9:84:
                    2e:27:c2:b0:e1:7e:4e:40:93:e4:66:27:eb:a5:e5:
                    8b:33:73:45:41:9c:2d:31:c3:48:e6:80:3c:6f:24:
                    45:a8:a3:09:28:ac:bc:8c:df:fa:0d:76:c3:2c:1b:
                    32:f6:35:63:09:ea:18:c2:f2:9a:6d:eb:31:58:b8:
                    e9:3d:1a:13:e7:cd:63:7f:4d:ee:73:7c:3a:03:74:
                    34:d2:e1:a0:14:76:e1:bf:06:ec:72:8a:b3:aa:dc:
                    95:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:64:EE:2C:F1:06:A0:FD:05:06:81:7C:A9:71:FF:45:64:53:85:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/37b73430-aea7-3c43-bf44-b701c34a63ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:75:e1:44:f5:2f:46:88:ec:65:d9:0c:4b:30:0d:e0:55:50:
         c1:f3:98:d5:cf:17:b1:be:b8:ec:6d:16:ac:69:4f:04:21:54:
         89:f6:75:bf:6c:d2:a2:5c:a5:7a:9f:63:be:48:59:e5:f6:b6:
         9f:e4:5f:46:ff:fe:ba:db:40:56:54:2e:8f:cf:ca:04:34:af:
         78:14:f2:45:ff:cc:83:a9:12:12:23:16:19:77:10:54:8a:2e:
         47:07:c7:84:25:fd:1c:a8:bc:5f:ed:2b:7b:b3:88:6d:be:c3:
         f4:f0:3b:d4:35:02:a0:00:f8:cd:bd:81:d6:39:b4:e9:1f:70:
         f9:22:04:a1:5b:02:5f:9d:ea:4a:f1:86:a5:0b:7b:f0:ea:25:
         7d:61:28:8c:fe:cf:7f:69:d1:c7:74:28:50:cc:1b:cb:09:37:
         72:b4:40:40:e0:fe:4f:0b:20:cd:44:5e:15:2e:82:e9:0c:1a:
         49:59:6f:5c:aa:13:ab:af:4b:f8:dc:33:34:09:6e:8d:a1:13:
         f2:e7:f4:0e:06:83:2e:85:53:b8:d4:a0:d3:95:3b:6b:67:29:
         13:81:0f:f5:c0:5a:fb:68:1a:d0:d0:c0:0a:f1:30:ed:51:d3:
         b0:8a:8a:70:23:02:49:1c:56:f8:3d:14:aa:5f:4c:d1:b8:b7:
         3c:8f:7b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:16 2026 by rpki-client