Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83b0255f-e217-3b36-af20-4006efc5f2b0.roa
File:                     83b0255f-e217-3b36-af20-4006efc5f2b0.roa (raw, json)
Hash identifier:          3wiWssVXNFvPfGG7eEJI7T2ryO+uTV32Um8CDle93p4=
Subject key identifier:   09:36:85:CE:A8:A2:3F:6D:27:56:2F:B4:40:61:7F:EC:A8:1C:98:D0
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707E71212F19750C5580500
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83b0255f-e217-3b36-af20-4006efc5f2b0.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     396571
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:e7:12:12:f1:97:50:c5:58:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=6a1b9ede-096f-47d7-8c72-2684645d6505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:cd:d5:07:1e:fa:c5:e1:ab:a9:e0:df:5c:
                    44:ba:6b:94:f7:bb:d4:51:7a:31:07:0d:68:85:2e:
                    9f:62:10:05:7f:c6:b6:8c:ff:ab:8a:9b:6a:30:44:
                    95:77:ce:d1:fe:56:af:7c:44:47:69:28:2e:5c:6c:
                    91:c3:e2:4d:78:ca:af:c8:51:1a:fc:dd:bc:f1:82:
                    8b:20:85:f8:b6:67:19:92:98:d1:0b:59:59:45:cf:
                    60:62:23:af:1a:9b:ab:04:8b:79:4b:53:5b:6c:26:
                    76:20:d3:f8:f9:15:b2:ae:1e:d4:fb:3c:e4:9c:57:
                    82:1f:41:9f:01:e3:3d:af:bc:eb:1f:41:8a:e0:83:
                    01:66:1f:82:e1:21:d7:71:ca:4b:1d:6c:9b:6b:b0:
                    56:00:ae:71:0d:0d:f8:ca:cf:c9:54:64:bb:9c:a5:
                    fd:f2:50:f8:11:b7:28:a4:c9:9e:3f:9f:ca:c3:3e:
                    a5:d7:b8:f9:5a:55:a3:97:f7:40:eb:56:49:e9:24:
                    45:c7:eb:c8:45:39:e8:47:e6:b8:b1:6d:f2:5d:4c:
                    6b:8a:51:0b:d5:15:b9:73:8d:cd:7e:3e:87:3b:33:
                    be:de:15:22:38:f2:44:36:64:94:09:be:b0:87:5d:
                    80:63:3c:ef:e0:f5:7c:f9:b8:76:e2:da:ad:28:67:
                    e2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:36:85:CE:A8:A2:3F:6D:27:56:2F:B4:40:61:7F:EC:A8:1C:98:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/83b0255f-e217-3b36-af20-4006efc5f2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1b:9d:d2:64:1e:ee:d2:4f:3b:f9:74:e0:f8:17:78:05:d4:
         b3:9e:b9:d8:54:a0:19:b3:ee:1b:21:6e:25:cd:77:9a:de:b7:
         79:3b:ff:11:79:8a:1f:af:cc:33:2b:de:29:df:34:82:90:b5:
         ea:01:d9:be:5e:e7:8e:ce:fa:2c:7d:a7:0d:f4:13:e0:fb:f1:
         49:64:3a:d7:20:b9:0d:a0:36:c6:e6:e8:89:26:0a:8c:99:38:
         89:12:4a:2a:56:52:6b:cd:a7:32:32:06:8a:60:28:51:4e:ad:
         99:ee:0c:ea:76:14:c6:6a:71:99:51:63:95:37:18:59:94:03:
         f3:c9:b5:e4:d8:b1:a8:51:47:ff:fe:37:39:9b:42:36:16:ba:
         33:fb:8c:6e:e9:ee:85:fe:79:42:d5:50:da:bc:bd:2d:70:79:
         3a:c0:84:42:06:b9:f0:5b:4b:d1:59:ba:aa:92:85:5a:df:ad:
         3f:36:3a:76:31:9c:2a:e9:ab:13:1c:0f:a2:ae:2c:9d:db:71:
         eb:4a:d9:89:96:66:29:c4:2e:1c:45:7f:f6:5b:78:e5:e8:1f:
         a4:a6:38:cf:72:18:aa:1c:4c:04:16:82:3b:a9:08:f0:c6:aa:
         03:c6:b6:97:35:de:5f:6c:22:b8:8a:26:51:0d:d9:38:fa:23:
         7a:2a:e9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:50:33 2026 by rpki-client