Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501f34f3-07e0-35cc-b2be-f3627373747a.roa
File:                     501f34f3-07e0-35cc-b2be-f3627373747a.roa (raw, json)
Hash identifier:          3MzPh7JrUM31OeWArWaAzKn5rxEG5QMlgH4XhTGysBI=
Subject key identifier:   99:7A:DA:24:AC:B7:A8:98:CE:CE:79:3F:C0:73:7F:36:AE:8D:D5:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D964F2CBFD49D38352480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501f34f3-07e0-35cc-b2be-f3627373747a.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     36631
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:96:4f:2c:bf:d4:9d:38:35:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=8b1d869d-2601-470c-a27e-a21daccbd8df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dc:53:11:e7:36:f4:6f:bb:0a:86:23:c2:d4:
                    bb:aa:06:ac:95:38:53:ef:d9:ec:6b:42:1f:33:13:
                    12:eb:4b:08:32:bc:fb:28:a0:73:16:d1:26:b4:4f:
                    71:5b:f3:61:00:5b:73:52:be:ae:af:35:e6:98:ee:
                    fd:db:af:5a:fa:54:fb:45:db:3c:21:b8:8b:f4:84:
                    cd:a1:b2:9e:96:98:38:25:47:a2:64:c4:64:60:da:
                    79:ae:3b:07:a4:72:58:7a:4e:f2:c9:25:b8:2b:57:
                    ef:ee:15:d9:96:0b:4e:0d:a1:d4:da:74:36:96:3a:
                    68:f5:d1:f0:cb:31:45:65:99:1b:86:b3:97:63:c9:
                    6f:32:c0:e5:a8:ca:9f:6c:d7:e4:98:61:4f:66:93:
                    d5:02:cc:38:7f:1f:f8:14:08:d5:e7:2e:28:a9:72:
                    d1:3e:b3:cb:6a:67:79:f1:47:21:1e:3d:15:bf:51:
                    0e:5e:39:8c:f5:6f:34:c2:95:c6:4e:5f:6c:15:65:
                    74:48:6c:62:a1:c1:3f:46:33:32:82:88:f2:81:64:
                    3c:c1:d0:69:85:90:41:e1:4e:14:b8:73:71:07:e0:
                    1d:e8:76:b3:d1:b3:95:23:5a:82:ae:f3:e2:03:3c:
                    34:92:09:51:e5:fb:39:f3:9d:44:69:e0:94:b9:85:
                    0c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7A:DA:24:AC:B7:A8:98:CE:CE:79:3F:C0:73:7F:36:AE:8D:D5:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/501f34f3-07e0-35cc-b2be-f3627373747a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:2e:74:34:88:9e:68:77:72:01:92:e6:d5:fd:85:15:21:
         ed:1b:92:72:00:27:17:36:52:3c:95:82:40:e2:91:83:46:42:
         0c:2f:68:3b:cc:21:6b:bd:44:7f:6b:2f:f8:e9:b5:e2:46:c4:
         d7:c6:72:1a:fe:94:4b:77:98:bd:f7:73:4f:e9:6f:a8:41:c3:
         1a:51:9c:83:f8:c4:4b:83:3c:29:94:72:d8:a6:1d:c1:9d:89:
         4b:1d:ce:2a:2f:bc:fc:be:97:91:ff:74:36:98:30:e2:7b:8d:
         63:45:b5:41:70:54:f4:10:de:3f:a7:16:00:0d:fe:c0:f4:68:
         38:ca:56:7d:f2:d0:38:aa:d6:40:dc:e6:dd:b3:9b:ac:a6:9f:
         25:fd:ff:75:82:3d:8d:86:9f:06:d1:23:c2:0e:64:b7:c2:d7:
         32:eb:83:07:cc:50:7c:c2:7d:1f:d9:e7:a6:51:a0:04:8d:97:
         c6:7d:ff:01:e0:d5:ff:f4:cd:d3:f4:45:99:bf:5e:bf:e0:d4:
         08:38:76:83:34:31:ec:eb:40:e1:23:71:d2:9c:75:94:9a:50:
         6a:61:ff:4e:4e:96:be:f0:ce:10:7d:68:12:61:e3:c4:cd:e9:
         43:63:fe:30:f3:51:a3:ca:d2:b0:1c:b9:d5:97:a0:e1:1d:46:
         c2:b5:53:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:46:43 2026 by rpki-client