Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef420dfc-38ef-3cc5-8a20-4b3abf513d97.roa
File:                     ef420dfc-38ef-3cc5-8a20-4b3abf513d97.roa (raw, json)
Hash identifier:          wUkUHIq2tBLoY8iDicWjJyD4SwvDQsy+mKTSQUBFPWw=
Subject key identifier:   98:E1:94:4C:69:29:C4:59:8E:10:4F:BF:F8:36:97:42:1A:FF:A1:34
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707F352AFC0483521A58100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef420dfc-38ef-3cc5-8a20-4b3abf513d97.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     397194
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:f3:52:af:c0:48:35:21:a5:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=bb5f0057-afe6-4025-8991-e8a15793801c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:d2:9c:bd:26:2d:60:95:2a:ee:c4:b4:49:
                    4c:c7:a4:14:bc:9f:48:08:85:53:f8:33:42:b1:f6:
                    4b:a0:12:72:6e:04:b7:4f:58:02:30:eb:69:78:78:
                    65:df:31:91:41:42:af:5e:85:10:e9:76:95:54:fa:
                    20:7b:da:92:99:f2:96:63:32:c7:1f:d8:42:f5:95:
                    2d:52:c0:ad:28:90:0f:2a:b5:73:60:de:4c:0d:95:
                    fe:07:8d:cd:c1:2e:4d:fd:99:c9:c4:8f:b8:34:7b:
                    70:10:f2:18:55:29:5d:e8:39:90:f7:f5:cb:00:1d:
                    b3:e1:90:9f:1d:72:c5:09:c5:3d:40:8c:51:0b:54:
                    72:67:d3:d5:87:08:16:5f:83:f3:20:dc:d6:0b:38:
                    3b:e2:79:81:9f:fa:ca:f4:df:93:05:69:55:1f:7a:
                    ec:35:dd:09:d1:a9:a1:53:af:39:cd:06:36:b9:51:
                    e0:c7:41:2d:7b:81:7a:d5:99:4e:02:57:2c:0f:81:
                    33:97:fd:c7:dd:3b:85:4a:81:61:4e:31:24:b2:ab:
                    38:96:2b:0c:35:b1:4e:3e:47:c2:5a:3e:61:a4:17:
                    2b:a0:e6:61:f4:88:6a:18:f5:db:c2:49:83:e0:68:
                    78:f8:13:40:3c:0d:79:7e:e9:54:b7:b7:da:9e:20:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E1:94:4C:69:29:C4:59:8E:10:4F:BF:F8:36:97:42:1A:FF:A1:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef420dfc-38ef-3cc5-8a20-4b3abf513d97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:21:b0:b7:86:01:61:d8:b0:bc:6e:af:f0:af:88:13:16:b4:
         72:bb:f3:d9:bf:0c:f6:7a:4f:7f:53:7f:6d:3b:5b:6c:47:fa:
         82:b7:b3:3c:ed:d2:71:17:3a:bf:df:31:cf:4d:c2:63:ce:22:
         74:ac:f1:3a:89:ac:bb:d6:2a:25:b5:72:e0:b9:fd:17:01:5f:
         2c:bb:2f:65:83:27:45:3a:98:22:27:2a:b1:1b:d7:ea:22:e3:
         eb:e1:42:ba:d7:e6:7b:af:15:02:f2:c4:4d:a9:09:04:7d:fc:
         83:f0:0a:fc:fa:c4:b0:44:b1:31:6e:38:7d:21:db:ea:94:11:
         94:15:b1:d2:21:dd:79:7d:05:8d:d5:db:a5:c0:0b:8f:2d:cc:
         1c:85:6f:18:e3:80:3c:4a:4a:a6:43:9c:f7:f5:95:1a:93:6b:
         a8:91:fa:d8:e0:b2:9e:e0:e8:29:90:4d:3f:ee:f8:f4:65:15:
         77:2f:14:94:9b:0b:9f:c4:20:d8:c2:8c:d3:02:16:84:99:41:
         76:b9:bf:f0:24:49:76:fe:ac:25:51:32:de:f3:35:47:6e:76:
         b9:f9:fa:26:03:e1:a8:e5:5e:30:06:ef:75:41:a2:8b:26:18:
         3f:1b:d8:81:37:39:01:cb:d9:57:64:a0:8f:92:b5:e9:52:e6:
         15:dd:6e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:47 2026 by rpki-client