Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85ab4c58-d104-34b2-87ac-42114d4e58a0.roa
File:                     85ab4c58-d104-34b2-87ac-42114d4e58a0.roa (raw, json)
Hash identifier:          QUolLhCWkdeS0SewUHwhpjsSE5kajDVGhJZuWCEeGwU=
Subject key identifier:   1A:B2:C9:17:85:D0:FF:6C:FD:4B:23:15:F2:AD:3D:0E:71:E2:56:7A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1199C5424E13271F91AAB400
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85ab4c58-d104-34b2-87ac-42114d4e58a0.roa
Signing time:             Thu 05 Mar 2026 15:20:09 +0000
ROA not before:           Thu 05 Mar 2026 15:20:09 +0000
ROA not after:            Wed 03 Jun 2026 14:20:09 +0000
asID:                     396542
IP address blocks:        192.26.92.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:11:99:c5:42:4e:13:27:1f:91:aa:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  5 15:20:09 2026 GMT
            Not After : Jun  3 14:20:09 2026 GMT
        Subject: CN=2eca9a37-aa7f-4e2a-97de-4f77e8c3e072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:98:9b:f2:c7:14:e6:ab:5d:ff:26:de:8a:4e:
                    7f:12:81:5c:68:b3:88:43:e1:ad:b2:6d:07:99:77:
                    f8:b1:d7:f0:72:d4:b0:1f:01:90:1d:f8:41:41:5c:
                    d9:ec:20:00:37:5f:8c:83:79:d2:e3:19:be:9c:f9:
                    de:0d:80:2b:bd:34:02:77:73:08:d7:75:70:69:42:
                    7b:1f:42:4d:86:68:21:a1:5a:7b:75:7c:13:1f:6a:
                    3a:9f:f6:eb:67:95:f3:52:42:53:23:72:91:93:e1:
                    b0:ae:2f:c7:de:21:09:08:d7:b5:61:1b:14:99:40:
                    c3:b8:1c:c7:c3:d9:b0:46:f3:c9:c2:0a:7f:29:92:
                    70:93:73:1c:0b:02:cd:8c:cd:36:c1:0c:ce:1a:c3:
                    93:fc:b2:15:8f:9b:bc:e1:65:dc:50:63:35:ad:cb:
                    c0:2a:ed:74:8c:60:90:c2:91:d6:1e:b7:bb:f5:62:
                    fd:69:d1:4a:65:da:55:2b:0d:c1:0b:1f:78:6b:14:
                    53:4c:b4:bb:f6:3b:6a:ee:bb:49:95:53:98:23:b3:
                    14:09:1f:90:1c:d7:72:d2:1b:f8:62:63:dc:26:89:
                    7d:48:13:f6:89:e9:2a:c3:40:01:b4:42:06:5d:96:
                    02:a1:53:76:c2:b5:bf:d1:7f:a0:41:a3:24:d6:39:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B2:C9:17:85:D0:FF:6C:FD:4B:23:15:F2:AD:3D:0E:71:E2:56:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85ab4c58-d104-34b2-87ac-42114d4e58a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.92.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:37:d9:be:5f:32:98:99:e4:ef:bc:2f:90:52:6c:a0:93:24:
         4d:a2:d1:79:f0:9f:8c:f6:37:be:63:f8:a5:10:3b:c3:c2:d7:
         56:a3:f1:9c:a3:99:a6:40:51:ef:e1:e8:68:d8:10:c1:c0:83:
         5d:1a:4a:55:0b:5b:47:04:53:c5:12:79:6d:b3:9a:7e:54:a2:
         0c:98:d6:d6:53:81:8b:1e:22:9d:1a:70:3a:ed:e6:a8:b3:fa:
         14:99:6a:9c:d5:3b:ce:58:f5:9b:c3:e5:29:c4:29:b8:c2:35:
         75:f8:dd:c9:d2:c6:4e:7f:53:02:ac:36:cb:e4:75:f1:34:32:
         a2:91:09:4f:06:1a:15:5d:f4:0d:42:de:03:71:2d:e4:90:cf:
         09:f3:38:de:56:42:31:2a:4a:22:ca:ae:91:16:dc:21:ac:f0:
         1b:26:4f:bb:23:3b:22:e7:09:0b:1a:c3:18:6b:35:3f:91:a4:
         c2:1b:fd:ba:c0:99:33:55:bb:d7:28:41:7c:0a:3f:45:9f:62:
         0e:68:ce:91:84:98:aa:e2:74:1d:d7:7c:8a:03:f4:9d:4e:9c:
         6d:87:86:bc:5b:37:57:fd:e0:21:5a:ce:e0:c8:86:d4:3f:e3:
         2c:06:ec:a4:b2:f8:9c:7d:cd:cf:21:6d:d2:f8:5e:1c:6d:7e:
         ff:3c:ea:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:38:56 2026 by rpki-client