Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b88934d-903b-373a-812e-878620233eb9.roa
File:                     3b88934d-903b-373a-812e-878620233eb9.roa (raw, json)
Hash identifier:          mpcqjj2oHY0pFHA/PsWOSspAp6dn0r9NAGJtD8K22Jc=
Subject key identifier:   AB:2E:59:C4:74:9D:41:BF:F2:57:AA:86:A3:6A:CB:FD:CB:3A:AE:FD
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4D5A90D07B11B985B6FFA700
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b88934d-903b-373a-812e-878620233eb9.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     36623
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:90:d0:7b:11:b9:85:b6:ff:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=32cda5e8-1cd0-4408-99aa-89eee8700625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:10:5f:5e:db:d3:c4:ce:6d:8e:df:c0:42:be:
                    fc:9e:57:fa:7e:c6:f4:3d:6d:03:39:c7:40:8e:27:
                    65:f9:65:e6:9b:3e:8e:a8:20:1c:41:87:f0:2a:26:
                    54:b0:f7:73:13:48:2a:c3:61:b6:f4:07:51:da:2a:
                    78:83:74:5c:a4:7d:bb:77:a5:28:68:6d:77:2c:3a:
                    7a:9e:41:91:d3:87:8e:3a:4b:39:ae:ef:68:a5:6f:
                    bd:9d:d1:e3:3e:62:47:ae:ca:62:b0:cf:83:de:7c:
                    fa:a0:82:de:c2:1a:ab:a8:82:1d:16:24:ae:30:9e:
                    14:f9:68:91:4a:e9:75:47:93:88:78:b8:42:39:92:
                    e7:3c:7c:79:25:8e:59:ac:1b:88:d4:a3:3d:7e:f3:
                    5f:90:75:eb:b5:ff:88:ac:b5:43:da:fa:f7:ac:47:
                    e5:30:aa:31:28:f6:05:24:31:c0:df:e9:fc:6e:4c:
                    2f:70:35:65:f1:4f:3e:ff:de:58:c7:d7:96:c7:58:
                    3a:8e:05:da:0a:ae:6d:92:1f:16:46:94:fe:51:13:
                    8b:9c:45:a7:27:40:c7:aa:93:e9:d0:16:3b:b2:bd:
                    d9:e9:2d:8b:08:f0:c9:fa:42:24:f0:05:9a:d3:06:
                    f2:3f:08:07:b8:5f:41:64:01:a2:9e:c8:ab:2e:27:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:2E:59:C4:74:9D:41:BF:F2:57:AA:86:A3:6A:CB:FD:CB:3A:AE:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b88934d-903b-373a-812e-878620233eb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:37:0a:18:e0:91:2d:10:72:df:ac:74:60:a4:f0:3f:2d:d5:
         5c:82:4c:9f:1d:81:30:8f:f5:32:cb:0d:60:80:f3:fd:4e:41:
         db:10:c9:24:01:0e:53:82:24:1e:8c:ab:1f:bc:bf:d3:a7:3c:
         1b:17:d7:ea:17:8f:ee:f5:a0:a6:f6:64:2d:f5:d5:eb:cb:17:
         35:8e:9e:12:f1:50:5e:e7:90:ed:ce:3c:62:42:07:33:f0:27:
         a1:71:5a:50:0a:9c:ad:c2:89:a9:48:7f:5d:7d:92:49:90:89:
         cc:32:0c:2a:9b:45:e7:93:60:65:7e:04:dc:08:49:2d:7f:4b:
         63:6c:bd:2c:8f:df:83:63:17:a0:74:46:91:b6:6b:5c:c0:27:
         67:a1:5c:b0:74:fe:4e:84:92:04:ae:b4:68:1a:41:17:b2:b9:
         dd:14:f6:d6:ce:80:d3:1a:13:63:a7:57:b1:bd:1c:e4:af:37:
         a0:d1:55:33:8e:f1:ac:39:26:0e:5b:f2:18:2b:6b:49:27:de:
         17:a8:3a:75:e2:4c:51:9e:62:40:dd:50:44:da:51:15:aa:9d:
         31:37:b9:20:aa:da:b7:43:8b:ea:e0:c2:ba:8e:a2:f7:00:81:
         81:ed:fc:a2:05:09:d4:56:fa:9e:da:c6:43:2a:ba:d8:33:8f:
         e4:7b:1a:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWpDQexG5hbb/pwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
MzJjZGE1ZTgtMWNkMC00NDA4LTk5YWEtODllZWU4NzAwNjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhBfXtvTxM5tjt/AQr78nlf6fsb0PW0DOcdA
jidl+WXmmz6OqCAcQYfwKiZUsPdzE0gqw2G29AdR2ip4g3RcpH27d6UoaG13LDp6
nkGR04eOOks5ru9opW+9ndHjPmJHrspisM+D3nz6oILewhqrqIIdFiSuMJ4U+WiR
Sul1R5OIeLhCOZLnPHx5JY5ZrBuI1KM9fvNfkHXrtf+IrLVD2vr3rEflMKoxKPYF
JDHA3+n8bkwvcDVl8U8+/95Yx9eWx1g6jgXaCq5tkh8WRpT+UROLnEWnJ0DHqpPp
0BY7sr3Z6S2LCPDJ+kIk8AWa0wbyPwgHuF9BZAGinsirLif88wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKsuWcR0nUG/8leqhqNqy/3LOq79MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2I4ODkzNGQtOTAzYi0z
NzNhLTgxMmUtODc4NjIwMjMzZWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADs3ChjgkS0Qct+sdGCk8D8t1VyCTJ8dgTCP9TLLDWCA8/1OQdsQySQB
DlOCJB6Mqx+8v9OnPBsX1+oXj+71oKb2ZC311evLFzWOnhLxUF7nkO3OPGJCBzPw
J6FxWlAKnK3CialIf119kkmQicwyDCqbReeTYGV+BNwISS1/S2NsvSyP34NjF6B0
RpG2a1zAJ2ehXLB0/k6EkgSutGgaQReyud0U9tbOgNMaE2OnV7G9HOSvN6DRVTOO
8aw5Jg5b8hgra0kn3heoOnXiTFGeYkDdUETaURWqnTE3uSCq2rdDi+rgwrqOovcA
gYHt/KIFCdRW+p7axkMqutgzj+R7GoI=
-----END CERTIFICATE-----
Generated at Fri Mar 27 08:15:08 2026 by rpki-client