Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c76a560-6c98-4f09-8ee1-7a872b2f719f/5e0188f1-b08f-345a-bd69-04be4b0f26d9.roa
File:                     5e0188f1-b08f-345a-bd69-04be4b0f26d9.roa (raw, json)
Hash identifier:          WC2lzZ8kdj5K0fXTxThRHSGF6l3JR8PBVtK1WcSWB1k=
Subject key identifier:   30:42:29:D5:02:DB:77:36:76:83:63:C5:90:96:79:CD:B8:4C:F6:57
Certificate issuer:       /CN=2c76a560-6c98-4f09-8ee1-7a872b2f719f
Certificate serial:       010D0C9F4328584C768166CC5DA956B04603C880
Authority key identifier: 2A:A2:DA:5D:90:7D:27:94:1A:66:97:00:1D:BA:41:C9:F7:3E:39:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c76a560-6c98-4f09-8ee1-7a872b2f719f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c76a560-6c98-4f09-8ee1-7a872b2f719f/5e0188f1-b08f-345a-bd69-04be4b0f26d9.roa
Signing time:             Fri 09 Jan 2026 02:00:31 +0000
ROA not before:           Fri 09 Jan 2026 02:00:31 +0000
ROA not after:            Thu 09 Apr 2026 01:00:31 +0000
asID:                     396982
IP address blocks:        192.30.54.0/24 maxlen: 24
                          192.30.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c76a560-6c98-4f09-8ee1-7a872b2f719f/2c76a560-6c98-4f09-8ee1-7a872b2f719f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c76a560-6c98-4f09-8ee1-7a872b2f719f/2c76a560-6c98-4f09-8ee1-7a872b2f719f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c76a560-6c98-4f09-8ee1-7a872b2f719f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:76:81:66:cc:5d:a9:56:b0:46:03:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c76a560-6c98-4f09-8ee1-7a872b2f719f
        Validity
            Not Before: Jan  9 02:00:31 2026 GMT
            Not After : Apr  9 01:00:31 2026 GMT
        Subject: CN=9f8d0c9a-59d2-49fd-86f6-581b36e92dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b1:46:95:9b:10:62:7f:23:a9:ee:80:9a:25:
                    ee:4c:4c:93:d3:a0:db:9b:67:53:ac:5d:e0:b5:60:
                    ed:f4:19:52:11:f0:c8:af:23:ef:62:84:d4:ad:25:
                    a5:ac:46:51:65:c9:07:92:84:ae:f9:ad:3a:89:a6:
                    51:a5:eb:bb:02:6f:e7:00:eb:05:fc:0a:90:94:0d:
                    15:fd:32:ab:99:33:f0:5c:34:fa:4c:a4:95:e0:9b:
                    6c:bd:85:a2:16:e1:b9:08:f4:ec:5d:13:d4:65:52:
                    8d:30:2f:94:ad:80:2e:11:8b:bf:91:c4:a9:53:78:
                    79:73:b6:28:d8:13:40:ab:c3:90:91:08:02:7e:a6:
                    3c:39:42:ef:cb:97:38:f4:c8:fc:a4:1a:4b:9b:2b:
                    31:60:95:ca:c2:14:b1:e9:d4:0e:82:04:eb:82:06:
                    88:66:d4:3c:6a:75:55:44:8f:ea:eb:70:aa:dd:21:
                    b7:65:25:9d:9a:53:1e:c5:75:28:7c:6d:9c:21:66:
                    32:af:d2:0c:13:b1:6e:b0:3f:82:27:26:f1:e1:72:
                    53:b6:22:25:5e:35:6c:35:07:55:61:95:85:0a:1a:
                    cc:17:3f:b2:5a:e7:a6:f2:2a:bc:51:e5:9c:18:36:
                    3b:5f:64:03:13:35:9a:79:cc:ab:f0:d0:bc:20:b8:
                    11:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:42:29:D5:02:DB:77:36:76:83:63:C5:90:96:79:CD:B8:4C:F6:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c76a560-6c98-4f09-8ee1-7a872b2f719f/5e0188f1-b08f-345a-bd69-04be4b0f26d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c76a560-6c98-4f09-8ee1-7a872b2f719f/2c76a560-6c98-4f09-8ee1-7a872b2f719f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:A2:DA:5D:90:7D:27:94:1A:66:97:00:1D:BA:41:C9:F7:3E:39:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2c76a560-6c98-4f09-8ee1-7a872b2f719f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b9:30:ec:8c:cc:c0:0a:17:a7:9c:a6:c4:32:72:40:ff:e8:
         a8:e8:f0:3d:4e:56:e1:02:b0:94:1a:ce:fb:f7:e7:f0:10:64:
         4f:ee:1f:05:8f:9d:a0:73:24:3c:c9:a5:5e:75:42:cf:c4:1e:
         30:02:09:fa:bb:ba:28:b7:70:6e:db:79:70:8e:1c:57:6c:72:
         e6:65:8c:4b:1d:62:60:5c:5e:1f:53:39:b4:91:7a:bc:d7:24:
         fa:b2:bf:a0:71:dc:54:f6:6c:55:f7:e6:a0:3f:91:2f:29:4e:
         6f:14:64:76:30:72:04:33:7f:b2:c1:ab:52:d5:36:e8:65:d7:
         da:8d:72:19:1a:06:04:40:40:f7:e5:24:8a:3b:f7:14:ef:4e:
         02:09:c9:6c:72:07:22:21:78:1e:45:2d:bf:71:00:8d:3f:58:
         f5:4c:b5:3a:fe:5a:f0:b7:e2:1b:6a:39:c2:57:02:ef:94:f5:
         56:e1:e8:0e:26:4f:4d:dc:c4:94:37:cb:2b:58:81:1d:91:34:
         d9:0f:68:d4:9a:44:6e:45:21:b3:8d:b6:7c:85:c2:70:0d:a0:
         76:6c:3c:b6:3c:63:79:9c:ee:73:4c:87:79:ea:73:83:cc:77:
         1d:52:5e:43:74:e8:c0:ea:c8:0d:cb:c3:22:4a:c3:02:b3:28:
         a2:08:bb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:04:23 2026 by rpki-client