Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34a32b99-51b5-3ed7-b114-613f2ef38dfc.roa
File:                     34a32b99-51b5-3ed7-b114-613f2ef38dfc.roa (raw, json)
Hash identifier:          1YnsvejFvhyM/H/ye5ay5+JHtqONTMRP+7Q05ccGR/A=
Subject key identifier:   88:F5:3F:78:73:55:FE:75:6A:77:03:64:B2:F9:DC:4D:97:74:BF:F1
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D4C1B14E1D256E495A4919000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34a32b99-51b5-3ed7-b114-613f2ef38dfc.roa
Signing time:             Thu 26 Mar 2026 14:17:35 +0000
ROA not before:           Thu 26 Mar 2026 14:17:35 +0000
ROA not after:            Wed 24 Jun 2026 14:17:35 +0000
asID:                     396573
IP address blocks:        192.41.162.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 01 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4c:1b:14:e1:d2:56:e4:95:a4:91:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 26 14:17:35 2026 GMT
            Not After : Jun 24 14:17:35 2026 GMT
        Subject: CN=8cdb9fd6-2bb8-400b-857e-c21987437c11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:45:a3:13:cc:02:42:20:9d:94:e1:9b:34:
                    1f:e0:7c:a5:14:b3:46:fc:8d:73:59:a7:1b:33:23:
                    63:d3:b8:5a:1a:4f:07:c3:d6:18:37:1c:99:70:b6:
                    6d:34:09:e5:b7:a3:e6:40:28:29:40:70:c9:fe:ce:
                    51:75:df:d4:cb:7f:bd:e2:66:ad:14:54:37:17:99:
                    7b:05:73:34:5c:f3:d7:3b:0c:4a:85:bc:b9:ee:c3:
                    33:a9:63:a4:6d:84:dd:a5:12:93:a7:9f:7c:f3:e5:
                    2d:45:b1:cc:b2:62:98:a9:b2:82:f5:0b:50:dd:76:
                    68:02:9d:81:25:8a:3d:e8:fe:1f:27:5c:ea:54:f6:
                    ea:d3:44:e1:d5:55:f2:1a:ac:c0:5d:ca:46:ca:55:
                    5f:f9:62:fb:12:78:2d:1b:e9:1d:a0:b8:5d:f9:20:
                    2d:5b:6d:57:f6:26:4c:00:1b:15:e5:9a:4a:a5:f5:
                    82:4d:08:d0:93:e5:fa:5e:02:1a:10:b9:8f:44:cc:
                    74:4f:9b:9e:b0:ce:83:cd:14:7e:36:5c:25:65:6b:
                    2e:12:99:e4:ee:18:13:ee:59:69:d8:76:b4:93:de:
                    42:2a:b8:11:83:7f:31:66:ae:35:9e:49:e9:29:28:
                    ef:b5:7c:d4:a1:1d:99:ac:b4:24:db:93:a8:08:29:
                    21:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F5:3F:78:73:55:FE:75:6A:77:03:64:B2:F9:DC:4D:97:74:BF:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34a32b99-51b5-3ed7-b114-613f2ef38dfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.162.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4c:0f:be:6d:91:0a:3f:c6:f0:a7:21:82:ba:a2:81:8a:06:
         ef:16:87:67:c3:8c:8d:6d:61:76:f2:5d:94:d0:2c:4f:c2:e5:
         fa:fb:a5:0a:06:e4:90:0d:ff:5a:58:69:17:df:2a:48:eb:52:
         8f:7d:e2:4c:70:ad:a1:cc:5d:39:a3:40:98:c2:5f:00:4e:54:
         94:d6:ba:f3:46:ee:39:be:b6:24:69:69:33:a4:4f:bc:ab:c3:
         ef:d5:42:a8:d5:50:26:8d:3a:55:60:2c:9b:c5:c8:0e:39:5d:
         9e:c9:b6:2d:9b:64:cf:bc:25:d7:03:2c:c1:c0:79:28:d6:6e:
         ef:12:85:39:48:c6:fb:92:a7:f3:2b:59:aa:56:6b:8b:16:54:
         e5:97:53:a1:54:1f:e7:71:73:a4:7d:f2:70:c7:df:16:f6:69:
         b3:f0:ba:c7:83:68:39:73:c4:45:e2:dd:10:7b:5a:ab:48:8a:
         65:63:aa:49:ca:c9:bb:6e:d0:de:a0:43:87:ac:30:34:42:a9:
         b3:c9:21:79:2a:55:6e:05:0b:72:18:5d:52:15:f6:e5:f4:c8:
         29:98:0a:dd:ef:f5:a1:00:27:52:7c:d1:0c:8a:a4:44:c0:65:
         17:80:75:91:33:38:9d:af:30:9f:d9:16:91:50:90:95:4f:f6:
         04:b5:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 23:39:13 2026 by rpki-client