Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6da72bea-0c68-3d50-8f86-050ce761046f.roa
File:                     6da72bea-0c68-3d50-8f86-050ce761046f.roa (raw, json)
Hash identifier:          5QVXV/Jjfo0NPkeozbD0SwZK+e0wnkFZ5woW3Wyb/iA=
Subject key identifier:   49:FB:F1:38:21:FC:9A:BD:33:27:B9:67:9D:E9:DF:87:91:BE:A1:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707F0DA9B734650F9186F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6da72bea-0c68-3d50-8f86-050ce761046f.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     396567
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:f0:da:9b:73:46:50:f9:18:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=00fc2a5d-8894-4b1a-aeb4-bc9717b3f6e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:62:e1:4d:f6:d8:8a:a9:57:43:be:d6:e1:
                    3f:3f:fc:dc:e5:1c:12:9b:f9:2a:bc:0e:73:47:e7:
                    12:ca:55:df:a6:22:01:86:a5:e8:29:ce:89:07:0c:
                    fe:32:96:cd:1a:d6:9c:a3:2f:5f:e4:35:bb:f1:0b:
                    f9:62:08:22:ac:eb:76:a5:e9:c2:34:87:33:3c:f5:
                    68:89:b2:d8:bb:45:83:3f:c4:45:7a:56:fb:e8:72:
                    7b:ac:90:12:f3:81:dd:dd:98:e4:b5:04:dd:cf:20:
                    95:08:da:e6:9b:35:0c:53:50:ee:8e:5f:20:c9:41:
                    ad:be:7a:48:c5:04:2e:85:c7:13:b2:fa:0e:ea:65:
                    b6:37:24:a7:de:3d:0a:d0:cb:4b:26:ab:03:06:1f:
                    be:eb:ef:47:0b:c5:90:33:bd:a8:ea:a7:74:07:f3:
                    b8:c2:34:78:2b:0e:52:c4:00:fd:3e:72:76:e9:42:
                    60:0b:42:4f:5b:94:db:d6:0f:3c:3c:b5:19:25:b9:
                    52:b4:aa:6c:96:17:2e:cd:1c:f9:78:58:b5:86:ba:
                    01:6f:c6:86:aa:28:1f:40:bf:3f:38:b0:e9:74:fb:
                    75:10:75:50:93:4c:5b:15:dd:91:da:7e:ba:d3:19:
                    b8:55:c1:18:e0:78:39:f1:66:6e:7c:ff:98:73:41:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FB:F1:38:21:FC:9A:BD:33:27:B9:67:9D:E9:DF:87:91:BE:A1:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6da72bea-0c68-3d50-8f86-050ce761046f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:ec:69:ba:7a:f5:0e:d2:bd:ff:a2:7d:48:91:c7:0b:5b:cb:
         d1:a3:cb:b7:f6:ba:3f:d7:e3:88:4b:78:65:0d:f0:55:14:b8:
         8a:dc:2b:63:f6:a3:58:a9:aa:75:7b:6c:d0:c0:6e:12:a3:2a:
         1e:f2:6c:f3:7c:f3:19:df:dc:51:c7:c0:93:8e:0d:9d:29:7d:
         15:b2:df:85:d2:c6:cc:36:30:b9:7e:28:1c:26:43:8b:ae:53:
         43:d2:3c:fa:82:df:66:72:a1:39:5c:86:6e:1a:99:0a:42:13:
         66:19:60:1f:01:34:6f:ff:2a:3d:ba:01:d3:b8:a1:db:ac:05:
         71:ee:a8:8b:36:cc:06:38:64:7c:ad:c2:9c:a0:c3:82:1d:45:
         94:6f:7b:57:a6:4e:ae:f0:a6:19:55:7c:fe:d4:e7:43:ab:eb:
         32:ce:9c:09:49:b8:bb:b1:6a:ba:0d:da:05:c6:bd:72:0f:9c:
         78:23:fc:83:74:43:98:ae:e0:24:5f:ee:a1:24:7c:ce:4d:3b:
         93:d8:ad:41:82:e0:1d:62:ac:36:2a:71:94:40:c5:04:1c:21:
         55:88:3d:f1:72:2e:82:d3:55:78:1f:75:13:81:1f:bb:31:57:
         d3:9a:6a:c0:9c:b5:73:a0:4f:29:40:e8:31:f2:c5:0d:e4:8d:
         4c:ac:24:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:26:46 2026 by rpki-client