Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545a7908-02e6-3d6d-b2db-0a1ff1c3c98f.roa
File:                     545a7908-02e6-3d6d-b2db-0a1ff1c3c98f.roa (raw, json)
Hash identifier:          L9KlPnFvNPE4uTtj8fAAk5oAy1780zMQmZ+aFO5cPdU=
Subject key identifier:   09:A2:42:51:A1:0A:93:F5:05:FF:3B:FC:28:90:9A:53:58:4D:73:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D143D995B3F0F8D33B5A1E340
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545a7908-02e6-3d6d-b2db-0a1ff1c3c98f.roa
Signing time:             Fri 06 Mar 2026 14:00:40 +0000
ROA not before:           Fri 06 Mar 2026 14:00:40 +0000
ROA not after:            Thu 04 Jun 2026 13:00:40 +0000
asID:                     396588
IP address blocks:        192.68.130.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:14:3d:99:5b:3f:0f:8d:33:b5:a1:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  6 14:00:40 2026 GMT
            Not After : Jun  4 13:00:40 2026 GMT
        Subject: CN=199f7cc9-8967-4f20-8bec-92de7c2a6b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:85:69:ac:4b:de:b5:99:84:05:1e:ef:23:16:
                    39:86:d4:12:86:f5:3c:81:2f:1b:1f:e0:3d:24:62:
                    22:1b:2f:d0:2f:93:9d:d3:27:ab:46:00:96:b6:82:
                    fe:f6:5d:87:96:60:a6:02:af:4e:fe:aa:eb:e2:1c:
                    c3:88:bb:e7:7d:34:15:be:bb:d7:96:94:15:99:3b:
                    da:6a:75:0f:98:17:83:b3:ec:fd:43:75:ac:56:12:
                    1f:55:2e:d9:18:5d:ac:2a:71:7e:46:03:c8:f4:3b:
                    bb:b7:f2:af:10:12:5d:2e:64:a9:ef:42:ce:87:2e:
                    7d:d8:09:4f:57:38:f5:f1:03:df:f6:17:b6:91:45:
                    4b:c4:50:f1:8c:3c:3f:82:d6:6c:1f:15:4f:e4:45:
                    91:38:e8:39:c5:46:4a:c1:ae:20:e8:50:db:57:fd:
                    68:c7:a7:c3:ee:58:55:97:49:25:5a:21:81:a1:37:
                    d7:2c:ec:9e:53:06:45:cd:4f:02:19:4e:bc:ae:cd:
                    ce:25:5d:a6:38:91:25:db:a5:8e:9f:fa:98:2b:d1:
                    da:08:66:dd:c4:cf:e7:96:92:ea:c7:89:00:6c:a7:
                    da:41:d8:2a:95:a0:69:aa:6c:2d:00:7c:2c:a4:91:
                    7b:63:8b:85:2b:12:26:16:c6:6d:e8:39:1a:a1:5a:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A2:42:51:A1:0A:93:F5:05:FF:3B:FC:28:90:9A:53:58:4D:73:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/545a7908-02e6-3d6d-b2db-0a1ff1c3c98f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d2:82:60:b4:1a:4f:75:f8:7b:95:c3:e3:de:df:cd:12:0c:
         84:d6:8d:b0:71:e5:34:1e:f1:60:ec:a7:86:1a:a3:51:5f:8a:
         71:2f:c6:ea:1c:0b:ef:ea:6e:b9:87:b1:56:1e:59:39:29:00:
         79:a9:53:5d:fb:b6:d0:9c:ad:4a:04:06:8a:6a:9f:26:dc:1e:
         d2:10:44:04:e3:97:9c:19:3a:23:d0:26:2f:d0:53:e9:de:4a:
         50:c8:dc:d3:25:3c:7d:67:92:93:aa:27:38:ba:bf:e3:a6:77:
         b6:1b:39:9e:88:d5:c4:b8:1e:20:84:0c:13:3b:b5:e3:7e:eb:
         fe:db:27:a7:a3:70:37:da:15:7d:91:75:34:5c:ac:cc:7a:58:
         21:3a:5a:b7:0c:92:ac:2a:a9:c0:b1:ef:64:b0:22:69:b8:52:
         c8:f7:f0:41:b6:93:0b:c6:52:71:42:b8:8f:bc:7b:c8:fd:d8:
         9d:df:28:bd:3f:8d:13:99:5b:56:f5:60:84:dd:1a:2c:0a:24:
         7c:b4:82:37:fa:87:ad:4b:66:d2:26:e9:6c:4d:5a:eb:cb:77:
         34:0a:98:63:4c:e8:b3:5f:53:8c:69:05:ae:d7:7c:fa:29:01:
         13:3c:fe:34:b9:e5:0c:db:6f:92:3b:4c:c8:17:38:ec:2f:f0:
         26:3f:69:8e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPZlbPw+NM7Wh40AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
MTk5ZjdjYzktODk2Ny00ZjIwLThiZWMtOTJkZTdjMmE2Yjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYVprEvetZmEBR7vIxY5htQShvU8gS8bH+A9
JGIiGy/QL5Od0yerRgCWtoL+9l2HlmCmAq9O/qrr4hzDiLvnfTQVvrvXlpQVmTva
anUPmBeDs+z9Q3WsVhIfVS7ZGF2sKnF+RgPI9Du7t/KvEBJdLmSp70LOhy592AlP
Vzj18QPf9he2kUVLxFDxjDw/gtZsHxVP5EWROOg5xUZKwa4g6FDbV/1ox6fD7lhV
l0klWiGBoTfXLOyeUwZFzU8CGU68rs3OJV2mOJEl26WOn/qYK9HaCGbdxM/nlpLq
x4kAbKfaQdgqlaBpqmwtAHwspJF7Y4uFKxImFsZt6DkaoVpjzwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAmiQlGhCpP1Bf87/CiQmlNYTXNxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTQ1YTc5MDgtMDJlNi0z
ZDZkLWIyZGItMGExZmYxYzNjOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwESCHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCG0oJgtBpPdfh7lcPj3t/NEgyE1o2wceU0HvFg7KeGGqNRX4pxL8bq
HAvv6m65h7FWHlk5KQB5qVNd+7bQnK1KBAaKap8m3B7SEEQE45ecGToj0CYv0FPp
3kpQyNzTJTx9Z5KTqic4ur/jpne2GzmeiNXEuB4ghAwTO7Xjfuv+2yeno3A32hV9
kXU0XKzMelghOlq3DJKsKqnAse9ksCJpuFLI9/BBtpMLxlJxQriPvHvI/did3yi9
P40TmVtW9WCE3RosCiR8tII3+oetS2bSJulsTVrry3c0CphjTOizX1OMaQWu13z6
KQETPP40ueUM22+SO0zIFzjsL/AmP2mO
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:13:07 2026 by rpki-client