Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba273105-c788-3e90-932a-29d90afefb9c.roa
File:                     ba273105-c788-3e90-932a-29d90afefb9c.roa (raw, json)
Hash identifier:          9k+Qq1kK/VH0cyRHMXvyfJRWeDNTzTL4r9NJ6KnwDmA=
Subject key identifier:   50:4F:8B:B9:E0:CD:D2:07:25:C0:85:3D:20:96:C6:B1:F7:3D:F5:AF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D94AE97AC05445501F9A123C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba273105-c788-3e90-932a-29d90afefb9c.roa
Signing time:             Tue 21 Apr 2026 14:13:00 +0000
ROA not before:           Tue 21 Apr 2026 14:13:00 +0000
ROA not after:            Mon 20 Jul 2026 14:13:00 +0000
asID:                     396572
IP address blocks:        192.52.178.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:94:ae:97:ac:05:44:55:01:f9:a1:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 21 14:13:00 2026 GMT
            Not After : Jul 20 14:13:00 2026 GMT
        Subject: CN=2e1c9eaf-cb16-4407-87f8-459d5bc43d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:1e:2b:0f:84:c2:ce:ab:f2:59:4d:c7:a6:
                    6f:37:b1:56:ee:94:11:72:97:4c:ba:ab:1f:dd:92:
                    e3:d9:59:cd:0a:6d:19:a9:1e:6b:61:fd:9d:6b:ed:
                    b7:cf:ae:8c:a0:61:b1:3c:a6:51:de:db:bd:49:62:
                    37:5c:95:ed:d4:73:91:b9:00:43:25:0a:04:fa:21:
                    88:2f:a3:b8:74:44:87:11:04:0f:b9:b6:35:71:03:
                    3f:fb:e7:48:d7:9b:30:2a:64:ef:e3:97:1d:d3:ee:
                    59:fd:ff:bc:cf:64:d2:95:51:38:c3:ba:eb:18:64:
                    e6:2c:97:87:6a:19:90:02:39:e5:02:ea:60:c5:6b:
                    54:43:50:f2:1c:b9:58:fc:e4:27:9b:82:56:b0:d4:
                    23:1e:b4:21:eb:b6:12:7d:7a:8e:f2:af:29:6b:d5:
                    68:1c:82:df:af:34:e6:7c:d7:3d:e0:2d:76:34:76:
                    33:55:d5:53:bc:2c:7b:4f:79:80:a4:0d:53:f6:15:
                    53:77:7d:28:ea:8a:6f:d2:ec:64:8b:ef:79:09:b7:
                    a4:1a:39:f2:a6:9b:66:ba:1a:bb:17:f0:c4:dd:75:
                    ab:df:0d:d9:34:9b:4f:62:da:df:bb:f3:51:29:10:
                    ec:bd:63:93:4f:39:99:18:3d:fc:22:b9:76:9a:9a:
                    a7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4F:8B:B9:E0:CD:D2:07:25:C0:85:3D:20:96:C6:B1:F7:3D:F5:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba273105-c788-3e90-932a-29d90afefb9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.178.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c6:25:47:0a:c5:f4:22:b6:90:21:0a:bf:e5:d9:11:dd:37:
         9b:5e:8e:f8:d1:3a:38:0b:4e:d6:64:4d:cd:62:ed:c5:47:b5:
         6a:82:3e:2a:cc:55:9c:d8:cd:84:ac:56:af:d0:5f:66:9a:09:
         34:3a:2d:39:cf:c1:9f:be:4f:56:2a:82:0d:f0:fd:3c:62:c4:
         f8:25:5b:af:cd:42:59:78:b2:d0:09:2c:dc:88:a4:eb:5b:34:
         1e:e2:95:ac:62:81:6f:61:4a:41:e3:ec:e1:eb:68:6d:73:a2:
         ad:0e:a0:a3:cc:46:4c:75:ec:ee:ed:03:08:2e:9e:42:78:b6:
         ce:fb:f1:4c:25:bf:32:ac:bf:fb:be:75:28:3c:44:cc:30:a8:
         5c:ef:16:43:58:62:44:bf:26:f2:5c:a2:13:9a:be:fe:c4:e6:
         f2:11:21:3d:5b:e9:1d:8a:57:69:61:2a:0e:6a:4e:95:7d:54:
         7c:65:d1:b9:a5:16:75:ec:6c:87:cf:e7:50:44:55:f7:b0:50:
         fd:c5:8e:3d:cd:f9:73:46:77:78:35:e7:53:27:8b:25:38:8b:
         ac:5d:ab:8e:0b:62:7a:74:22:e8:0d:ad:8e:02:26:5c:de:1e:
         a3:15:b0:26:78:e6:56:e9:2f:07:5d:62:73:e7:8b:c9:ee:44:
         e1:7d:f4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:44 2026 by rpki-client