Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f821755b-5eb8-31a2-8742-24f0a87148c9.roa
File:                     f821755b-5eb8-31a2-8742-24f0a87148c9.roa (raw, json)
Hash identifier:          2EG2nTILi86I8jM1DeNnH3c8IRBr/G3DB21I04ALr/Q=
Subject key identifier:   18:59:64:6D:D2:7F:77:61:D1:B0:72:E2:FD:70:5B:86:C0:B6:67:2C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D1707C9FA2D69C846A959F880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f821755b-5eb8-31a2-8742-24f0a87148c9.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     396591
IP address blocks:        192.55.83.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:c9:fa:2d:69:c8:46:a9:59:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=a02d9373-1d2e-4905-87c0-3c4d6d9fcab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:26:5b:66:4b:60:46:75:8a:17:9b:c8:a0:
                    af:6c:e0:f9:16:00:44:72:90:fe:55:34:84:0b:9f:
                    55:3e:2e:7c:da:ca:74:91:e0:49:6e:68:11:57:2e:
                    3d:13:7e:dd:b1:a9:73:74:90:5b:31:62:be:66:8d:
                    d6:16:12:cf:9f:96:f1:d2:cf:dd:95:dd:da:a9:84:
                    d2:b7:c6:03:bc:dd:23:04:f0:17:cb:ed:13:5a:49:
                    9b:6a:fa:a6:00:f3:7f:86:ed:74:ec:e9:5a:a3:53:
                    11:10:a5:bb:37:7f:5c:9c:e7:9a:80:46:06:db:cc:
                    e9:69:28:61:8b:1d:49:a5:9f:92:71:dd:c1:d7:14:
                    b0:5b:ee:21:a6:9a:c9:cc:81:75:ab:e3:97:af:88:
                    b0:a2:36:85:93:fd:80:41:a9:ff:1d:5e:48:ef:ac:
                    57:a4:ad:a3:26:f0:ac:36:49:86:7f:44:44:f2:74:
                    a0:f8:52:0b:3a:80:1b:ab:be:53:63:57:28:02:13:
                    05:e9:b0:24:ca:30:f5:5d:3a:ae:11:08:fb:14:1d:
                    13:69:54:61:0b:d9:84:58:45:22:95:4c:59:8a:6e:
                    66:13:f1:68:fe:ab:61:ad:38:d3:32:b1:39:17:1a:
                    85:b2:b5:62:26:6f:9c:97:4d:5b:ca:77:12:9c:64:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:59:64:6D:D2:7F:77:61:D1:B0:72:E2:FD:70:5B:86:C0:B6:67:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f821755b-5eb8-31a2-8742-24f0a87148c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:62:a9:ec:c3:dd:f5:cc:89:13:fb:f1:2e:b2:cd:ef:e8:ca:
         95:82:58:85:a4:33:9d:ae:2a:58:21:1d:f4:a1:d7:1e:43:bc:
         00:ba:88:c2:9e:c9:39:cc:7d:c0:ca:cb:ea:dd:52:fc:b6:27:
         69:39:4b:7a:f3:a4:dc:88:6e:5a:7b:3f:c2:80:e6:5b:91:12:
         8d:f0:8b:a0:28:dc:d6:ea:de:2e:cd:9c:5d:b9:74:92:97:9d:
         bb:26:50:3c:07:51:0e:6f:5d:6d:c8:a6:33:63:25:61:40:25:
         62:4c:58:ae:1d:96:11:69:d3:0a:6a:3d:b7:06:5f:83:7e:82:
         5b:4a:58:5a:9d:ca:8d:ed:f4:bc:00:33:7f:9e:10:5d:07:9d:
         57:68:42:67:4f:64:60:32:4d:a7:9c:34:8f:0d:13:cc:51:c7:
         2e:c6:d5:7c:29:43:a2:ca:80:5d:20:fc:1d:86:b5:6e:60:b4:
         5a:5f:1a:85:84:ca:71:92:83:7a:72:b3:fc:91:5c:e7:e2:e5:
         a9:3e:5d:13:96:7a:95:7d:3d:58:7f:30:4a:e7:b7:e9:77:28:
         e5:f5:83:4c:f9:ec:83:5f:92:dc:9d:90:72:30:dc:56:f4:fb:
         1a:92:8b:df:1a:0a:92:88:e9:5b:c2:f5:a1:bb:b1:e5:90:d2:
         a9:6f:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:14 2026 by rpki-client