Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a74a479-3868-34a9-b1ee-354ee728bd4e.roa
File:                     4a74a479-3868-34a9-b1ee-354ee728bd4e.roa (raw, json)
Hash identifier:          vkHfTeVPqkrUO49aeqer+iknm1mWcV8hTfHyF7Q7eVY=
Subject key identifier:   51:9B:20:D9:3C:1F:C3:10:E3:7B:48:D7:C9:02:A0:DA:A9:4F:EC:59
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DA8158E51C58829C506E8FA40
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a74a479-3868-34a9-b1ee-354ee728bd4e.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     396827
IP address blocks:        198.17.208.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:8e:51:c5:88:29:c5:06:e8:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=94fdf6c5-80c2-42b3-8603-c5ad21a6c207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f2:b5:78:a6:4e:c0:68:59:e4:0f:38:e3:51:
                    7a:0b:24:44:82:2d:81:56:ab:eb:d4:07:ea:c5:fc:
                    4f:60:f8:ca:79:f3:7c:46:fb:48:99:16:45:6c:90:
                    c4:76:8f:07:7f:19:dd:53:40:31:31:c0:82:5a:bf:
                    8c:7a:bb:0d:0f:19:d9:21:c3:83:fd:78:4a:f9:02:
                    f2:ef:6f:ef:50:fe:c1:0e:83:90:e9:be:87:a3:3c:
                    90:b8:fe:d1:ed:c6:4d:7e:f7:d3:9b:41:fd:ee:dc:
                    a0:fd:68:20:96:a2:be:0d:c0:7b:6e:6a:42:66:bc:
                    b3:fe:8a:1e:fb:4e:5f:6e:3b:a5:b5:9a:d6:fd:22:
                    a7:54:2f:8a:fa:ac:f8:5a:31:08:2d:c1:95:36:84:
                    ca:eb:8e:4d:a8:60:62:84:1d:66:d1:72:62:ac:3f:
                    e9:86:7b:8f:f5:b9:dd:27:59:18:3f:0c:51:ea:88:
                    8e:be:b8:20:08:a5:0c:71:f8:c5:9e:ac:9a:35:30:
                    33:e9:33:eb:04:12:50:be:75:7a:50:01:f5:c9:2f:
                    89:f1:80:8b:f0:dc:ba:0d:94:4c:92:ed:51:42:d1:
                    d6:28:7f:c5:b3:0a:cd:ad:50:19:b5:fe:f9:0c:71:
                    c7:7d:1f:9e:17:3d:ed:81:e6:91:fc:23:f8:28:6b:
                    50:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9B:20:D9:3C:1F:C3:10:E3:7B:48:D7:C9:02:A0:DA:A9:4F:EC:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a74a479-3868-34a9-b1ee-354ee728bd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2f:ba:96:fd:08:07:ae:9b:70:0c:1c:b6:44:04:e8:4b:2f:
         3d:96:85:3c:62:51:83:dc:dc:5e:06:9f:ac:e7:f3:62:27:78:
         25:a1:e6:c8:c6:ac:2a:13:74:59:15:5b:00:bf:25:e2:68:64:
         ae:6e:63:13:d4:f0:85:df:ef:53:54:56:a3:08:02:2b:76:1c:
         b1:0d:55:e6:a3:31:93:8d:52:b3:f1:e1:85:b3:00:72:eb:c2:
         27:1d:eb:eb:52:10:3f:11:a1:06:4b:21:0b:6a:ed:cd:08:05:
         bd:56:c5:de:0c:2b:1a:1e:34:35:a1:72:93:a7:95:f5:26:aa:
         51:b6:8e:58:8f:8d:d0:65:49:40:47:7f:1e:be:d2:e8:65:35:
         f3:e8:0e:24:7e:16:c1:4a:9f:30:53:a0:9c:ab:78:87:66:f7:
         31:63:cb:a3:a3:27:f8:28:8f:12:f4:d1:af:e2:0c:d4:42:6d:
         ba:3d:fb:2a:6d:33:fc:99:89:7f:e2:b9:92:e1:eb:80:fb:1b:
         14:c7:34:97:fe:c7:ae:b3:05:3a:b1:70:94:ef:0e:75:fd:4e:
         82:9a:9d:c9:25:7b:a1:4e:65:97:0d:6d:56:cd:d7:fc:37:bd:
         de:f9:3a:fc:1b:89:25:d7:f1:c5:3a:0c:0f:c1:8b:83:5f:9e:
         c1:77:da:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:16:08 2026 by rpki-client