Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa
File:                     1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa (raw, json)
Hash identifier:          g7jWZmh4jKcfKnGyqC5DRyKm8M6642UGCidL+SB7lyQ=
Subject key identifier:   E0:18:00:D2:83:A7:51:63:37:96:0F:92:56:93:D2:97:68:79:15:60
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD1035DCA38744E6DE0000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396560
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:10:35:dc:a3:87:44:e6:de:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=4921efb1-f460-4a2c-82fa-4023122e0477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:21:3e:fe:fc:fd:d9:e0:4f:db:d9:98:e9:56:
                    c3:16:2b:ce:89:6b:48:ec:8c:df:15:6d:59:fe:fd:
                    b0:16:c6:bf:a0:28:87:77:0e:2f:10:eb:5d:47:be:
                    8b:26:ec:c2:7b:40:4f:d9:fa:bc:30:d7:24:3b:2a:
                    2b:45:a4:87:05:8f:79:36:47:09:be:1a:ed:99:1a:
                    2c:be:24:8b:5f:25:ce:ea:29:91:94:a1:4a:5d:18:
                    1e:15:6c:c8:00:0a:84:3c:5c:a6:bf:b7:f6:a2:69:
                    0e:38:bd:1d:f2:49:b4:7a:db:91:c7:b0:6d:9a:f0:
                    b9:04:7e:ff:04:61:84:ce:c9:f5:4a:10:77:65:e1:
                    bf:29:59:34:8b:ea:ec:2b:6a:d1:51:cd:67:83:70:
                    3a:a8:3d:db:de:e3:5f:ff:94:14:21:f1:fe:c1:02:
                    97:83:ba:50:7f:17:c8:49:7f:38:c2:18:ec:7c:de:
                    9b:6b:57:4f:70:82:04:2b:3f:54:78:bb:1c:54:36:
                    09:c3:9d:50:4a:b7:a0:c3:5b:2a:ca:fe:a7:b7:a4:
                    9d:b7:1a:08:50:3f:b2:74:af:b5:36:cc:0a:17:10:
                    b9:d4:c9:a9:7e:56:a0:f3:25:77:93:86:00:8e:e5:
                    7a:3f:2d:60:77:7a:6f:7d:aa:00:90:0f:2c:c0:cf:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:18:00:D2:83:A7:51:63:37:96:0F:92:56:93:D2:97:68:79:15:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1ac04fdb-04ff-323f-ac1b-71a5909082cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:d4:3b:8f:2f:7d:81:67:d8:56:0f:62:c1:7d:96:a1:ec:77:
         f7:0c:29:9e:a6:13:58:dd:6d:a4:7d:20:be:0c:07:00:4f:ff:
         72:87:4a:d5:57:e7:62:57:aa:9f:9f:72:a7:c7:c5:f3:c4:57:
         b8:d9:ef:67:da:07:eb:8d:ab:f3:61:1c:75:a9:16:f7:ed:c7:
         01:6b:76:23:6b:ae:3f:b5:67:cf:f6:55:91:64:46:2b:4d:64:
         89:3d:01:57:a1:ba:f5:5b:e1:bf:34:2f:14:e2:63:b1:4e:bf:
         ff:13:e5:22:82:f0:a7:d7:f6:04:b9:ea:81:89:33:a9:8e:8c:
         3d:bc:6e:11:d3:45:00:d0:50:4e:75:1b:bf:62:33:1f:a4:84:
         e1:ef:4f:71:f0:08:3b:a9:d9:fd:f4:1c:f8:ac:3c:6e:6e:e7:
         b4:f8:02:e4:6d:7c:b8:a1:4f:24:c3:d7:80:2b:11:cd:51:2a:
         79:e0:ac:ce:36:ab:0e:72:97:47:bc:b7:75:78:c8:ff:3a:5d:
         ee:ce:10:5e:c6:c5:0f:e8:d9:64:12:86:e0:e7:ea:90:ff:8e:
         70:27:ac:cb:d9:e2:c9:54:91:40:18:8e:8a:1a:0f:9c:6b:29:
         78:b2:3f:fb:f4:a6:38:0f:a3:77:de:41:6a:ce:34:7e:fd:1c:
         ad:4d:72:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:47:00 2026 by rpki-client