Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e201660e-4f36-3133-a0dd-28b91f557ba8.roa
File:                     e201660e-4f36-3133-a0dd-28b91f557ba8.roa (raw, json)
Hash identifier:          s9J7IsBN49dGQmGI4m+rFrCVECdQg0RiVybY7WEyf24=
Subject key identifier:   C2:34:7E:DE:AF:77:22:51:B1:8E:C6:04:81:7A:71:A9:80:81:7A:2E
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D46B11591481A715CDA155080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e201660e-4f36-3133-a0dd-28b91f557ba8.roa
Signing time:             Tue 24 Mar 2026 15:44:58 +0000
ROA not before:           Tue 24 Mar 2026 15:44:58 +0000
ROA not after:            Mon 22 Jun 2026 15:44:58 +0000
asID:                     36632
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:b1:15:91:48:1a:71:5c:da:15:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 24 15:44:58 2026 GMT
            Not After : Jun 22 15:44:58 2026 GMT
        Subject: CN=37323c06-1113-4b75-94d6-e9fe9167b20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d5:c1:60:21:c0:fb:d6:c9:28:a0:75:02:03:
                    2a:2b:7c:c5:72:5c:60:67:88:68:d1:83:6a:03:0c:
                    bf:64:5b:23:7b:35:ea:68:b1:17:24:37:d4:4f:66:
                    13:0c:e7:99:d6:21:cb:80:ca:4a:cb:d0:ee:75:4d:
                    d4:29:42:a7:67:dd:6b:c6:3c:22:c8:07:11:ad:11:
                    7d:af:f1:82:37:0d:9a:bc:5e:c7:07:cb:85:7a:7a:
                    e2:74:6d:10:22:e1:5d:83:d3:f3:da:55:a2:27:81:
                    81:38:65:70:de:12:fc:9c:82:38:23:0d:1f:54:88:
                    5c:7e:cf:e9:6f:fb:88:a9:ab:2c:48:97:dc:e2:74:
                    c5:38:31:16:66:ed:1e:c3:5e:d0:c2:21:18:2d:65:
                    5a:1d:3b:2c:00:3c:82:ac:f2:93:58:52:3f:17:df:
                    b8:7f:9b:08:99:92:50:74:6d:11:f7:50:24:2d:0f:
                    b2:a0:30:05:73:7f:11:b2:30:fd:5b:dc:1b:7d:d2:
                    13:8f:0e:a0:e7:7e:d3:15:c8:1e:31:e7:8f:91:e6:
                    43:8f:e5:02:53:85:5d:57:68:54:fd:a6:7c:c6:6a:
                    74:cf:58:dc:6e:ce:74:d1:f0:eb:17:22:22:db:8b:
                    51:61:3d:55:4e:bb:e6:43:6a:06:08:ce:24:85:d3:
                    68:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:34:7E:DE:AF:77:22:51:B1:8E:C6:04:81:7A:71:A9:80:81:7A:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e201660e-4f36-3133-a0dd-28b91f557ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:23:c9:d5:71:c7:b9:f4:75:eb:9e:85:7a:c0:ab:c1:21:2f:
         29:27:e9:74:ff:72:52:18:45:30:fb:b5:df:d7:41:f8:fd:43:
         72:a5:44:c8:f4:b2:3a:17:5a:24:2a:71:16:b0:86:dc:f5:38:
         ca:af:09:45:e7:e1:af:cf:ce:43:fc:cd:c2:d5:be:a0:69:66:
         05:b3:cb:66:90:87:20:66:8b:bb:96:9e:96:11:95:63:d9:aa:
         9c:8f:41:7d:98:c2:0e:f2:50:be:a2:05:fa:77:76:62:41:67:
         c1:13:3d:72:98:c0:d3:b6:47:23:9e:33:46:ac:16:3b:e1:ca:
         3e:96:4b:2e:37:0b:b9:9c:8e:8c:25:64:42:61:70:d0:51:70:
         c7:ff:a0:fc:85:a7:25:1e:59:02:e5:a5:ea:de:1f:bd:10:a4:
         ae:2f:34:51:21:49:29:d4:61:bf:5c:30:a7:b0:40:27:a4:9b:
         2c:33:9f:b6:5d:22:29:c7:6b:22:90:5e:65:58:b2:e7:26:a8:
         1c:b2:42:57:d6:43:88:4f:78:a2:e5:d4:07:a0:67:9f:4c:d4:
         2c:92:5e:db:13:91:1d:d7:a6:e0:70:2d:31:da:cd:d3:97:8a:
         f5:63:8f:e0:5a:02:ba:60:3c:d2:2a:9d:df:52:7a:07:22:c2:
         9b:e9:6b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:39:07 2026 by rpki-client