Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a4e7c1-226c-398d-b857-557de6defc6d.roa
File:                     b4a4e7c1-226c-398d-b857-557de6defc6d.roa (raw, json)
Hash identifier:          DPj1skeBgwhIVvyYZrSwx5IBMlA4ONX1OwMTbScNkug=
Subject key identifier:   69:B7:98:AE:23:80:98:6B:21:FB:0B:20:C2:04:45:D3:5C:60:85:F8
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D2A74E3B5B14FC3293F8CE880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a4e7c1-226c-398d-b857-557de6defc6d.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     396609
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:e3:b5:b1:4f:c3:29:3f:8c:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=a319123e-bc7a-4483-b306-3d7100395709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:29:68:f9:92:71:32:7c:24:96:03:d5:1b:f0:
                    3c:94:04:6a:8f:55:f8:c3:d2:fe:5b:f1:b8:44:a2:
                    5a:5c:d9:01:76:18:c6:2d:d7:09:e5:47:33:3e:2f:
                    a1:9d:61:35:06:5c:24:bd:7e:8f:90:25:ec:bd:df:
                    1d:d6:71:0e:81:05:14:b9:2a:c7:0b:63:d7:d4:a4:
                    b9:fd:a3:b8:69:12:8a:f8:ce:89:e4:f8:28:04:fb:
                    1d:ec:9e:cf:cd:4b:3d:cd:11:1a:79:17:eb:a1:99:
                    00:c6:a7:6e:a1:fb:dc:ef:cc:59:9f:15:4e:07:d0:
                    14:0a:24:85:21:bc:15:59:f2:99:da:58:57:7f:17:
                    cc:af:b9:ac:0f:eb:ce:a5:5e:df:ba:02:bd:80:52:
                    8c:19:c4:7e:5c:f7:8e:04:4e:06:a8:54:0f:88:37:
                    f1:6c:74:a0:dd:69:52:3a:4a:f8:b7:4b:e7:d3:6f:
                    25:f2:b1:44:e0:2c:e4:31:52:8d:ef:cd:94:ba:63:
                    78:14:c0:f5:d6:86:08:fd:1e:b6:e9:8a:da:f5:a4:
                    b5:87:0a:d6:00:44:19:89:62:84:b2:96:6e:f2:2a:
                    87:15:85:a4:98:19:a5:ef:4c:68:66:30:43:09:97:
                    13:9f:6d:f2:cb:fb:7c:8e:19:cf:e7:57:b7:6b:af:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B7:98:AE:23:80:98:6B:21:FB:0B:20:C2:04:45:D3:5C:60:85:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a4e7c1-226c-398d-b857-557de6defc6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:85:92:37:e5:63:a1:7a:26:ea:30:a0:77:06:4c:e2:c6:b8:
         01:47:4a:35:ed:f3:db:47:8f:77:7e:f5:da:89:96:86:32:5d:
         9c:09:40:f5:2c:b9:51:ad:9b:10:97:fb:c1:66:3c:e1:4d:f7:
         3d:5a:dd:d7:d2:82:51:ea:12:0c:c9:99:a9:d4:0a:a0:a5:87:
         ca:af:02:a2:c7:dd:68:92:65:8c:f9:a3:29:0c:6b:ef:01:b6:
         7e:5d:28:f7:5c:83:55:0e:00:cf:44:50:89:d2:33:b6:72:7a:
         bd:4b:55:e7:d4:40:e8:f5:fa:6c:4e:ed:ef:6f:e7:57:e1:d0:
         80:a0:9e:40:92:48:57:84:d7:ab:08:59:05:e6:15:c3:4c:f8:
         76:c6:1c:00:a0:75:a5:da:42:35:9c:c6:af:b0:9c:16:40:64:
         f9:16:1a:8f:44:d6:74:4d:e9:f1:62:e4:f9:0b:73:8c:c3:f2:
         97:68:a4:3c:6a:4e:79:df:f9:64:8d:2f:f2:ff:46:7a:55:c8:
         b6:46:67:23:ee:eb:a4:cd:f9:d4:44:ba:74:31:98:ee:85:57:
         b2:5b:22:fb:7a:fb:54:1b:24:0c:12:b4:d7:74:57:5e:5a:76:
         ec:4b:10:66:65:83:e1:67:61:dc:0e:93:2b:70:75:d0:37:dc:
         89:40:46:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:59:45 2026 by rpki-client