Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41521d41-2589-3fc4-91f9-18f31d310dad.roa
File:                     41521d41-2589-3fc4-91f9-18f31d310dad.roa (raw, json)
Hash identifier:          9DC1G0dzJnsgMq3Shg7AVm4MkvMpDeefsOo/2hGlnLM=
Subject key identifier:   35:5C:8D:0F:63:7E:A0:3A:A9:B3:2B:06:4A:BA:59:BF:5F:5A:AB:7B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B114F6BECD762DED836180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41521d41-2589-3fc4-91f9-18f31d310dad.roa
Signing time:             Tue 24 Mar 2026 15:44:57 +0000
ROA not before:           Tue 24 Mar 2026 15:44:57 +0000
ROA not after:            Mon 22 Jun 2026 15:44:57 +0000
asID:                     396603
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:14:f6:be:cd:76:2d:ed:83:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:57 2026 GMT
            Not After : Jun 22 15:44:57 2026 GMT
        Subject: CN=dfd536f7-7189-4621-b62c-dfcaefd51826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:17:9d:a2:21:a7:f8:11:3b:eb:ad:e1:6f:3e:
                    95:1e:7d:3a:ca:9a:74:5b:09:1d:9f:41:62:1e:66:
                    36:c4:01:7e:9b:c1:d4:b0:b4:f5:5c:ba:16:15:21:
                    72:69:32:00:97:37:06:11:15:91:be:63:c5:a6:1f:
                    56:fd:54:35:15:3d:27:73:61:9f:3d:09:cf:d2:1d:
                    5f:a7:81:ec:d2:0b:e2:af:cc:93:c8:a6:6a:67:4a:
                    92:3e:68:dc:0a:06:0b:5d:c5:a6:fd:d1:3d:01:40:
                    9e:24:15:82:db:52:dd:18:42:06:fc:10:8e:0e:4d:
                    84:f5:30:9f:34:32:33:41:2b:82:0e:81:2b:96:c3:
                    b4:a1:6d:2f:93:c6:d0:8d:f1:29:28:c4:5b:e1:2f:
                    ca:ea:f6:bd:0b:78:e4:fb:f3:a5:66:b8:5a:2e:f3:
                    1b:cb:52:c7:59:41:c4:b5:7c:cf:9a:43:b4:3a:8d:
                    47:cf:83:ba:c3:54:59:77:0c:99:ba:e9:e4:d1:2d:
                    55:3d:94:9a:f3:ce:92:0d:32:b8:2c:be:af:f5:e6:
                    b1:78:2a:33:9c:6e:23:95:0f:49:c7:6b:b3:a6:66:
                    8e:e0:c5:6a:8d:b8:c4:e9:0f:38:f6:9a:6b:52:34:
                    03:70:39:8b:9f:81:ce:7e:88:d8:da:be:c2:2b:04:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5C:8D:0F:63:7E:A0:3A:A9:B3:2B:06:4A:BA:59:BF:5F:5A:AB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/41521d41-2589-3fc4-91f9-18f31d310dad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:a7:c4:39:5a:37:5d:bf:c0:90:db:94:75:da:98:2c:d4:
         a2:ea:29:8d:b8:84:86:61:cd:28:3f:63:06:4e:5f:59:ba:eb:
         aa:00:c8:38:30:aa:b6:77:23:3d:dd:63:b3:e5:b6:e3:b5:48:
         a7:b6:22:a4:e8:4a:ca:50:be:57:30:24:f8:3a:5d:4a:c1:e0:
         d4:aa:67:bd:b4:bb:3d:33:1f:5d:59:4a:79:6d:e9:62:83:c0:
         45:59:f9:ae:a2:54:1b:45:5c:d2:80:ec:7a:5b:b8:d3:72:06:
         ca:8d:45:78:7e:b1:ae:d5:58:89:a2:18:27:99:90:cd:54:bb:
         e8:ff:41:97:4b:1c:a9:7d:10:c8:90:35:ef:bc:05:86:72:6b:
         06:de:98:66:6c:61:46:c4:6e:af:31:dc:e8:77:b3:83:1e:a6:
         f4:90:d4:2c:b0:bb:3a:e4:4a:9a:96:66:dc:54:2e:80:8a:8e:
         ea:3e:7b:47:e5:f8:93:1f:93:06:77:a1:0b:9a:63:cb:c6:3c:
         59:1f:bd:a1:f9:cb:56:8d:59:7a:1e:09:1b:c9:1d:69:f8:12:
         84:37:ed:1c:2a:ae:0f:dc:1b:33:b1:43:a3:28:0b:0f:d1:fa:
         af:0a:82:5f:d2:15:8c:14:38:f5:4b:f2:e6:47:be:22:36:ae:
         7e:97:35:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:03:42 2026 by rpki-client