Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa
File:                     c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa (raw, json)
Hash identifier:          5dmt0yb/cEyhoPC8XiHK8jGSiYH53p7Nizc6x5CGPOY=
Subject key identifier:   B8:1E:6C:95:B8:28:0B:28:D8:76:61:41:52:44:03:9F:13:1B:F1:37
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD0D467FB83C4BB3F8ED80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     36618
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:0d:46:7f:b8:3c:4b:b3:f8:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=9181dd34-9721-4ce8-9d29-e3a5ad0723f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:cb:7e:f5:37:0b:2a:a9:fd:16:3a:53:5f:
                    ba:95:2d:29:c5:3c:c3:7a:ba:8f:fe:33:c3:04:6b:
                    41:c6:ba:99:fa:eb:fb:04:40:80:bd:f5:49:91:98:
                    98:ec:77:49:55:a6:d5:6b:e0:e8:c3:f6:38:9a:64:
                    f5:65:62:f4:cc:97:86:f7:34:c0:22:ab:f7:92:37:
                    08:6b:7b:e9:d7:5d:91:01:55:df:81:a4:ac:8f:43:
                    b6:9b:18:1e:68:30:56:05:5c:c0:ad:2c:3d:f0:32:
                    e9:a3:01:f9:02:c5:42:b2:25:06:63:6f:06:45:50:
                    5a:5a:81:25:77:97:89:db:62:60:03:a0:a8:2e:d2:
                    75:f0:75:63:79:9a:53:83:85:0b:83:3f:45:1c:16:
                    5b:08:5a:b2:ab:34:df:75:99:37:53:b3:e0:b0:1e:
                    9f:eb:a7:db:4a:94:1a:17:8a:43:38:bb:71:a8:07:
                    db:6f:d4:3c:b3:e7:8c:cd:52:ae:8f:a9:57:d7:dc:
                    50:7c:28:51:a1:a4:a6:1c:a8:53:2d:40:21:6b:43:
                    8e:4b:42:1e:44:e7:76:ab:18:e7:5e:b2:9b:3f:af:
                    11:ca:1e:ea:0f:f8:dc:c4:e0:00:6f:20:40:93:c6:
                    e3:6c:12:b6:be:16:a0:8a:e5:2f:09:61:c6:8c:a6:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1E:6C:95:B8:28:0B:28:D8:76:61:41:52:44:03:9F:13:1B:F1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e3ef25-90fd-39ef-a743-9b44ea655c95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:4b:c9:83:84:23:b7:61:b6:c6:18:60:4c:48:55:99:27:3d:
         b2:b8:5b:e0:a4:22:76:fe:7b:36:e6:03:e8:4a:0c:20:3f:29:
         40:c6:c8:d3:5c:3a:c2:b0:91:23:64:e5:38:e8:56:87:b8:b3:
         a3:f2:20:f4:be:de:37:f0:71:bf:01:31:ee:e2:93:a8:0e:3a:
         74:a9:8f:8a:6d:c5:99:05:3a:db:a4:61:90:29:3f:a2:ab:04:
         a7:ff:ec:70:70:1b:bc:04:9a:5b:26:77:ab:d5:13:52:a0:0e:
         af:29:45:69:5a:36:fb:3d:cd:3a:f2:6e:53:d4:9c:a0:35:28:
         a7:4b:49:81:6d:4f:29:16:ce:cf:e0:c7:d4:c0:ab:c9:79:4e:
         ed:70:05:d4:91:43:f0:7d:5d:6c:0c:00:5a:ec:20:61:0d:d2:
         74:a5:37:65:c1:0a:2a:9d:ff:12:4a:9f:c7:83:30:c7:ad:5e:
         b0:28:7e:28:25:51:fc:98:5d:26:cb:85:b2:0c:b6:f1:14:d4:
         28:ad:e0:5b:a0:c0:3e:08:d5:a1:68:ce:1c:2a:6d:72:ec:d3:
         57:a1:e1:5a:cb:20:99:73:c5:e5:75:76:a1:59:7b:3c:a3:00:
         ed:a6:64:64:bf:f6:46:a0:4b:f6:b5:cd:81:ed:f8:c0:79:63:
         35:c4:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:57:05 2026 by rpki-client