Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34e26c15-b90f-3ca0-8a99-c038c2fef067.roa
File:                     34e26c15-b90f-3ca0-8a99-c038c2fef067.roa (raw, json)
Hash identifier:          ifak1FOM8JMsij77O6IsgjvYvyoXTCUjLKNQDUxuX3U=
Subject key identifier:   7E:A9:8D:1A:D0:D5:0F:08:93:67:34:C9:5B:B2:C6:3F:13:63:E1:71
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D5A2437661830E30537677C00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34e26c15-b90f-3ca0-8a99-c038c2fef067.roa
Signing time:             Tue 31 Mar 2026 14:57:18 +0000
ROA not before:           Tue 31 Mar 2026 14:57:18 +0000
ROA not after:            Mon 29 Jun 2026 14:57:18 +0000
asID:                     396603
IP address blocks:        192.31.80.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5a:24:37:66:18:30:e3:05:37:67:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar 31 14:57:18 2026 GMT
            Not After : Jun 29 14:57:18 2026 GMT
        Subject: CN=28b98132-68c5-4752-8400-4764150a31b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:b2:f2:8a:e8:4c:38:83:d8:ef:62:44:cc:
                    dc:39:32:ab:36:ea:1a:fe:fd:89:4a:1c:f9:59:2a:
                    7d:71:27:b6:d9:2b:5c:e8:7d:14:f3:5d:b8:fe:2f:
                    bb:16:16:b6:c0:6b:90:c6:8d:32:ab:88:f8:97:0b:
                    71:54:0f:a2:cf:26:f3:eb:37:27:e4:a3:67:cb:01:
                    db:24:7a:e2:34:23:72:51:de:32:56:3a:d4:92:fc:
                    d3:4f:5b:4c:6a:a8:84:93:16:ba:08:46:00:32:7c:
                    7e:ce:45:f7:0f:79:0e:fa:fb:22:bb:2b:d5:5c:44:
                    fc:63:fa:18:0d:93:09:80:f3:c0:a0:77:8f:02:5d:
                    bf:a8:d1:e1:1a:45:71:1b:0d:da:53:eb:6d:21:31:
                    d4:1f:d6:ce:9f:7f:03:a7:44:a4:78:b4:4b:b0:af:
                    1e:0f:54:c4:3a:ce:63:d5:b2:89:ea:f4:ee:a8:a8:
                    28:b5:36:07:af:c2:6a:4b:d8:3d:9f:94:9d:05:bc:
                    5b:9d:6b:53:68:1a:0b:e7:c3:4c:01:99:3c:2c:e4:
                    ed:5a:73:37:72:f7:a5:1b:00:00:a0:8d:a2:89:b0:
                    a2:53:d2:7f:29:ea:70:11:34:00:46:8a:8e:7c:c3:
                    3f:4f:18:46:1a:ff:9a:f8:5d:a6:f3:87:ac:15:45:
                    1f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A9:8D:1A:D0:D5:0F:08:93:67:34:C9:5B:B2:C6:3F:13:63:E1:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/34e26c15-b90f-3ca0-8a99-c038c2fef067.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.80.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:30:68:74:dd:05:9a:25:1f:fb:20:8a:fd:c5:01:d8:47:bb:
         29:0b:2c:dd:7a:72:e6:4f:be:c3:3b:05:89:7a:ca:ec:36:4e:
         b8:b3:04:30:02:f5:6b:fd:7a:04:ff:22:d5:b5:e6:77:b3:ff:
         5d:23:f6:bf:ce:2e:89:87:27:dd:2b:dc:29:ab:59:42:36:89:
         bc:df:12:89:d8:33:e1:96:cd:ee:f0:12:56:6f:29:00:14:cb:
         a6:d2:19:f8:c0:51:d4:92:6d:fe:a4:a7:65:65:cc:fe:9b:cf:
         d5:2a:2b:d8:a2:c2:fb:a0:d1:73:ac:79:f4:3a:ea:d9:ea:49:
         4a:cb:8c:dc:da:4d:c3:0c:cb:be:df:26:fc:05:37:2c:96:6a:
         60:ac:fc:3e:ba:ac:a0:e1:f4:2b:f3:67:9c:7e:ed:1b:f6:db:
         22:f9:c6:00:90:3b:d3:71:b6:72:b2:97:e9:b8:a9:11:2e:07:
         a2:38:1b:f5:a3:72:20:06:1c:b4:af:9c:a2:14:23:14:62:b1:
         8d:86:46:4d:bf:75:b3:70:00:5e:84:6e:37:bf:ca:a4:a0:a6:
         f0:a3:aa:e8:ea:6f:12:e9:d0:50:11:c9:34:59:12:e0:80:63:
         b5:a7:db:34:e7:1f:01:1c:44:29:59:9e:a5:75:b6:5a:1f:d7:
         45:c9:de:28
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1aJDdmGDDjBTdnfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMzMTE0NTcxOFoXDTI2MDYyOTE0NTcxOFowLzEtMCsGA1UEAxMk
MjhiOTgxMzItNjhjNS00NzUyLTg0MDAtNDc2NDE1MGEzMWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQay8oroTDiD2O9iRMzcOTKrNuoa/v2JShz5
WSp9cSe22Stc6H0U8124/i+7Fha2wGuQxo0yq4j4lwtxVA+izybz6zcn5KNnywHb
JHriNCNyUd4yVjrUkvzTT1tMaqiEkxa6CEYAMnx+zkX3D3kO+vsiuyvVXET8Y/oY
DZMJgPPAoHePAl2/qNHhGkVxGw3aU+ttITHUH9bOn38Dp0SkeLRLsK8eD1TEOs5j
1bKJ6vTuqKgotTYHr8JqS9g9n5SdBbxbnWtTaBoL58NMAZk8LOTtWnM3cvelGwAA
oI2iibCiU9J/KepwETQARoqOfMM/TxhGGv+a+F2m84esFUUfuQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFH6pjRrQ1Q8Ik2c0yVuyxj8TY+FxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzRlMjZjMTUtYjkwZi0z
Y2EwLThhOTktYzAzOGMyZmVmMDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwB9QHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCRMGh03QWaJR/7IIr9xQHYR7spCyzdenLmT77DOwWJesrsNk64swQw
AvVr/XoE/yLVteZ3s/9dI/a/zi6JhyfdK9wpq1lCNom83xKJ2DPhls3u8BJWbykA
FMum0hn4wFHUkm3+pKdlZcz+m8/VKivYosL7oNFzrHn0OurZ6klKy4zc2k3DDMu+
3yb8BTcslmpgrPw+uqyg4fQr82ecfu0b9tsi+cYAkDvTcbZyspfpuKkRLgeiOBv1
o3IgBhy0r5yiFCMUYrGNhkZNv3WzcABehG43v8qkoKbwo6ro6m8S6dBQEck0WRLg
gGO1p9s05x8BHEQpWZ6ldbZaH9dFyd4o
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:11:53 2026 by rpki-client