Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa
File:                     7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa (raw, json)
Hash identifier:          AGZSxeCFkl1izHPD69Rvu60TvKXRvU/qngz0x0wDWnw=
Subject key identifier:   17:4A:56:8E:87:E2:E7:82:55:A5:C3:68:63:1E:1A:0D:28:46:F4:B0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD0A1EC916D135B1218E00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     397199
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:0a:1e:c9:16:d1:35:b1:21:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=4e305048-9889-4c8e-b2b5-dfec40075e6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a8:9a:a3:8f:a0:8d:d2:19:4c:ed:b1:b0:d2:
                    92:df:4c:e4:54:35:e9:f4:39:8d:42:3b:d7:4d:04:
                    77:89:0b:df:59:f1:75:c7:cd:e6:bc:70:59:54:42:
                    98:b9:6a:a4:20:65:52:ca:df:91:89:e0:38:da:92:
                    80:6b:47:f3:d6:36:ce:17:07:3b:b2:96:9d:cd:20:
                    b4:fe:4d:f1:22:5c:91:2a:46:bc:7b:6b:71:3b:84:
                    15:37:66:24:ae:82:55:4b:25:43:7c:50:b6:1a:54:
                    d8:a2:30:22:a0:b7:b9:b9:ba:12:f7:a2:23:9c:38:
                    7e:d7:ac:81:b0:43:6f:af:90:c2:33:1a:a4:97:73:
                    f6:5d:8e:9d:ec:0b:02:7b:05:91:7a:df:3e:6d:41:
                    52:26:fd:c6:7e:9b:f0:1e:5c:c2:b5:8e:da:d2:2f:
                    12:65:93:19:93:e0:09:f5:f2:a4:e5:47:d3:92:9f:
                    e2:4a:5c:69:a9:0d:87:83:e1:57:6a:b8:c0:f6:69:
                    42:0d:ad:35:75:56:92:86:53:f5:7d:b7:2d:79:b9:
                    59:a3:ae:4f:6a:ec:40:28:d8:f8:cd:2f:b4:fd:49:
                    ab:da:d1:46:5d:6b:9e:91:a6:dc:a6:2c:ec:97:fb:
                    ae:29:e9:80:68:d0:e6:ab:29:04:e1:3b:1c:fc:f8:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4A:56:8E:87:E2:E7:82:55:A5:C3:68:63:1E:1A:0D:28:46:F4:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f3fdf93-1654-3dfd-8430-5af94202f4f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:05:3b:bc:9f:4b:a2:66:6f:5c:29:1e:3e:df:36:c1:96:92:
         b8:c9:c6:aa:5f:e3:81:06:c4:99:20:1a:ac:d3:d4:87:fa:71:
         1f:da:2e:85:39:c3:ce:0a:91:f4:9f:48:62:8e:9e:3e:e9:bf:
         f1:56:06:c2:86:7c:78:fa:29:4c:3c:07:1e:c8:41:60:a6:e4:
         2c:35:c1:c5:f1:2d:0c:41:07:af:6a:c4:7d:21:e9:2b:56:dc:
         b2:ef:33:f2:4a:e1:85:59:0d:f4:e6:83:af:65:1b:86:8a:3e:
         50:be:82:c9:d6:72:f7:a6:0c:65:2e:d3:78:f2:c0:de:2d:b6:
         21:7c:7a:34:85:63:c1:c5:b9:b1:80:15:61:18:52:97:2f:d1:
         9b:9a:c7:6b:f1:f2:1f:86:77:b3:1d:51:21:d1:61:e3:2d:42:
         3e:7b:0f:6e:55:43:db:a9:a6:2e:5b:74:59:5c:8b:9a:15:3f:
         f4:07:88:c2:04:7a:18:fe:9d:ae:09:19:43:75:52:3b:7d:e5:
         d9:ea:dc:11:41:5d:25:d0:b7:ab:6d:09:5b:ad:af:53:5c:46:
         b5:e6:d7:ac:83:0d:cc:07:19:2f:ef:d7:2f:d2:e3:a0:c6:2b:
         66:ba:09:11:a7:77:58:97:75:92:8c:4e:b1:cc:c5:79:ee:7e:
         38:9b:70:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:07 2026 by rpki-client