Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bbe712-576b-3cc6-8847-b06177e3e876.roa
File:                     50bbe712-576b-3cc6-8847-b06177e3e876.roa (raw, json)
Hash identifier:          uJrmetKBSWYEPnO71rW8Q+qW/eV4XlyCLR5sVSLBMQs=
Subject key identifier:   FD:D0:AD:9B:A4:DE:66:B9:FA:79:00:F3:49:CA:99:75:ED:03:EE:29
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74FBAE47DF27CF3EF3C740
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bbe712-576b-3cc6-8847-b06177e3e876.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     396578
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:fb:ae:47:df:27:cf:3e:f3:c7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=aac5c74a-3b00-4196-9dce-8520fd304aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:59:b2:49:1b:20:ff:be:cf:11:80:c1:e7:
                    d6:9f:c9:bb:08:64:b0:7a:a8:bf:7c:ff:5b:93:60:
                    63:28:4e:93:12:b5:e3:8f:5d:1d:9a:4d:e6:48:a5:
                    52:b3:7f:65:7a:bb:28:79:d1:a5:bd:cd:12:4f:55:
                    9c:94:07:73:ab:67:d6:c0:3a:d9:49:54:56:f0:a8:
                    89:09:de:f7:d8:4c:12:7a:75:1a:fe:39:34:db:44:
                    03:50:6f:2b:2e:cb:65:3c:3f:ad:1c:d7:42:cb:ba:
                    2e:2f:5b:13:02:96:fd:d0:e5:70:2d:32:20:47:51:
                    dd:d6:60:18:fd:81:4c:03:81:b5:9d:6d:fc:e2:60:
                    f7:81:50:21:db:ad:66:e7:e3:37:2f:0e:b1:35:b5:
                    a4:78:5c:f1:21:61:41:3e:4a:f5:15:b4:36:93:28:
                    44:ed:0d:21:c3:89:5c:e6:37:75:fb:c4:95:c4:a4:
                    ca:dc:7d:f2:33:82:91:5a:d6:97:d4:e1:e7:23:87:
                    46:73:b9:fb:ca:87:97:e6:47:c2:83:75:c7:ec:2d:
                    dc:70:41:92:5d:82:d0:30:31:df:45:e2:d9:50:b7:
                    e9:e8:03:1b:ce:56:89:1a:1e:68:7f:92:eb:7e:95:
                    26:2f:11:47:99:7d:67:5a:58:39:21:0f:45:6b:b1:
                    01:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D0:AD:9B:A4:DE:66:B9:FA:79:00:F3:49:CA:99:75:ED:03:EE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/50bbe712-576b-3cc6-8847-b06177e3e876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8e:14:ad:3f:20:9b:52:d6:9d:bf:a8:a3:61:b1:f4:ff:53:
         30:c0:28:b1:ee:3e:80:56:0d:fc:f7:41:af:8f:2d:52:ab:04:
         38:15:59:be:b8:c1:84:13:1f:97:1c:c4:b1:ed:1b:d5:1b:64:
         8f:95:3d:4a:dc:72:6f:90:c2:db:84:2f:c0:41:4c:23:a1:94:
         55:95:c9:a2:7d:cf:73:73:0d:22:ce:23:45:f3:74:3b:b7:0a:
         6d:ff:6c:16:69:21:ef:bb:c4:68:9a:fb:cc:fb:70:c0:b7:ea:
         b1:73:12:8b:d6:4a:a2:6a:50:2d:d8:c6:81:a1:3c:50:d2:9a:
         d0:8b:b6:9f:34:fd:1d:44:0a:e5:64:17:e7:87:3a:ae:e5:63:
         cd:1c:cf:f6:b6:13:11:ee:f1:01:80:56:53:14:cb:1b:68:ed:
         74:3b:27:85:f2:38:5e:c0:20:55:63:0d:28:10:b8:2c:05:fb:
         be:41:ce:a1:c0:c1:32:03:f0:5f:7e:0d:86:25:b0:81:14:a7:
         05:67:87:e6:94:14:96:73:b6:81:f1:25:13:a3:fc:e9:07:d3:
         cb:23:d0:cc:4c:37:41:16:9b:57:52:3f:66:56:a7:11:ae:fa:
         64:24:39:36:16:ca:b3:71:f1:6e:55:2d:9c:4d:a2:33:4d:42:
         cf:52:7a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:33 2026 by rpki-client