Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ad1f093-1d1f-3080-a07b-e73ecd10a3b5.roa
File:                     3ad1f093-1d1f-3080-a07b-e73ecd10a3b5.roa (raw, json)
Hash identifier:          aPHQekDYdYOAcu58I+lrQuDHO46TbOqMIjyDoWK7/vc=
Subject key identifier:   A5:E5:6D:CE:DA:B0:8C:51:48:F9:C5:96:56:17:1C:C7:F2:50:E0:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D99D16D03D5CBCBDAD280
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ad1f093-1d1f-3080-a07b-e73ecd10a3b5.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     397195
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:99:d1:6d:03:d5:cb:cb:da:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=d2e0a9e8-122f-4f2d-94af-72c0b98e42b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:9c:af:6a:a6:a5:b7:1f:88:e5:e3:49:c8:
                    cc:3b:a1:c2:9a:14:00:1c:87:66:21:8d:61:e7:54:
                    67:39:b4:a8:10:86:5d:6a:f4:45:fd:49:23:27:2d:
                    5a:19:83:fd:8c:97:0a:ca:09:c1:78:a3:84:f4:e5:
                    ea:7e:fe:97:9a:57:95:ce:af:71:1a:26:7c:32:fc:
                    a2:94:5c:76:4c:d3:14:40:48:49:34:6b:58:ae:48:
                    d5:5f:3b:c1:81:28:b6:e4:11:2a:de:5b:a9:d9:a0:
                    12:bf:85:5c:8a:3c:1e:d4:86:7b:94:e7:f3:2a:36:
                    6c:c0:4f:22:32:db:c9:a8:e6:95:85:53:82:73:c4:
                    3f:04:95:a1:3e:a4:64:fb:76:aa:6b:6a:92:8e:3d:
                    1c:58:a6:a4:e4:25:53:57:7a:b3:43:ac:f9:61:93:
                    54:0d:4b:b2:b7:a6:4c:e2:3f:8b:9f:2d:82:f3:32:
                    ee:e1:83:71:fb:aa:08:72:2b:26:98:19:cb:d1:25:
                    f6:74:41:34:0f:81:d2:0a:06:09:15:71:d6:8e:75:
                    30:a8:8e:99:ff:86:af:7a:e0:82:a8:84:6b:2e:50:
                    24:0f:e1:d5:50:10:de:dc:a1:a2:88:6b:78:80:01:
                    86:f3:6b:d1:bf:c0:30:b2:fd:be:77:39:25:23:3a:
                    77:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E5:6D:CE:DA:B0:8C:51:48:F9:C5:96:56:17:1C:C7:F2:50:E0:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3ad1f093-1d1f-3080-a07b-e73ecd10a3b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:fe:b1:e5:30:48:d1:f4:ac:a5:25:67:c3:63:04:8b:01:e2:
         4c:94:9c:37:1c:3c:13:09:d8:cb:01:4c:b0:0b:50:da:e8:2f:
         a4:bd:01:48:2e:65:cf:58:ee:44:67:46:e8:f4:5d:91:75:a6:
         91:c7:d4:34:52:d6:12:ea:8d:43:3b:76:0e:b6:a6:5a:f7:48:
         81:3f:cf:1a:21:51:4e:74:08:2a:c4:38:bf:0f:6e:79:50:5e:
         36:fe:9b:fb:a2:f3:5d:9a:45:aa:52:48:0c:12:17:4e:07:41:
         f0:52:00:38:90:ef:c2:07:4f:eb:06:98:47:da:86:49:62:b5:
         df:62:df:22:eb:9b:6d:a8:80:2e:65:8f:be:a7:a8:af:ca:7a:
         59:3c:50:47:c1:7f:26:66:0a:1a:a6:ef:10:ab:07:d1:7e:33:
         93:47:8a:fd:38:04:4a:32:d5:17:3c:aa:fa:d5:82:5e:4c:f1:
         ef:a4:26:2d:99:5f:01:77:df:e1:55:62:0a:c7:dd:47:90:3b:
         ac:8f:03:ac:51:af:67:93:7a:0a:ed:cc:01:ea:0a:42:87:b4:
         d6:83:42:29:52:a2:df:d3:02:b3:db:ce:d9:a2:21:c9:99:4c:
         84:57:fc:55:4c:c1:42:ba:79:87:0a:d6:54:72:ed:25:7e:92:
         78:46:ae:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:50 2026 by rpki-client