Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55c6e37d-055f-38a6-9118-186fd69faafa.roa
File:                     55c6e37d-055f-38a6-9118-186fd69faafa.roa (raw, json)
Hash identifier:          B4eBS8bwkP6ocPh5bvyc/Xd/M7BVYelUhW7RCGAlhTo=
Subject key identifier:   13:3E:EA:8C:A3:4A:98:A1:8E:54:09:39:25:61:FE:D0:2F:F3:03:5B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D07AD13886AD0D0EFEA833D00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55c6e37d-055f-38a6-9118-186fd69faafa.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     396592
IP address blocks:        192.68.126.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:13:88:6a:d0:d0:ef:ea:83:3d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=d6e23cdb-84b5-4a81-84bd-ee5a4107c36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5d:c1:1a:8c:59:8e:cb:1c:16:3f:79:ad:ce:
                    34:35:c4:3f:12:8b:5c:0a:dc:61:6e:11:29:6d:2e:
                    96:d4:58:9f:e1:57:a6:e5:85:96:0f:9e:b5:d8:b5:
                    ef:42:90:13:d0:0d:0a:05:4d:c5:eb:0c:a6:8c:97:
                    a2:9c:ac:02:93:95:60:58:6c:f9:50:04:44:42:b6:
                    3b:21:bc:c7:d5:38:05:83:dd:2b:02:36:1d:ef:d7:
                    49:a4:2f:4a:ed:20:8c:7c:02:47:2a:51:90:11:db:
                    45:75:3e:5c:51:69:98:ff:27:a8:cc:2b:28:33:86:
                    6f:5a:c9:54:82:e2:30:08:61:33:7c:13:af:1b:af:
                    ff:b9:ab:f1:7d:b2:62:7b:b6:c3:1d:6f:a4:cf:4c:
                    db:55:12:ff:2c:fb:4c:b2:c5:6a:f0:03:47:ed:60:
                    c1:8e:0b:a2:c9:94:f4:97:20:62:03:69:30:d4:b2:
                    3b:b4:67:f9:6f:43:d6:74:28:29:f0:f7:e9:a8:9e:
                    56:41:2a:a0:b6:82:76:f8:dd:f3:a1:85:7d:14:cc:
                    72:5d:bf:34:18:ab:ac:95:64:53:70:9c:eb:2d:23:
                    07:1b:2d:bf:90:da:e1:af:d6:03:a8:63:4d:ba:94:
                    3d:06:98:6d:f1:6a:05:ba:c2:df:e4:cb:ae:82:16:
                    87:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3E:EA:8C:A3:4A:98:A1:8E:54:09:39:25:61:FE:D0:2F:F3:03:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/55c6e37d-055f-38a6-9118-186fd69faafa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.126.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:34:98:54:7a:d2:72:fd:60:9f:be:37:ba:d6:f9:75:79:90:
         7e:15:30:78:cd:d9:20:b5:8c:cb:1d:fe:cc:ba:d0:5b:1f:76:
         43:23:dc:9f:0f:34:6a:18:d7:b2:89:37:03:64:7c:40:c8:2e:
         bd:a7:8c:1b:70:21:bb:31:1f:52:41:c2:a3:aa:5f:ff:85:76:
         80:91:04:3b:d4:b4:81:74:25:97:8b:b4:00:cf:a7:e1:8f:ed:
         b7:31:71:88:a0:8a:1c:98:b1:0e:72:ff:05:25:ed:d9:13:e5:
         63:2e:ed:dd:b6:f8:05:40:44:a1:22:06:34:e2:ff:7f:5b:1d:
         46:37:2a:eb:73:69:91:da:f9:a7:6e:bc:66:b9:20:ae:1e:66:
         af:fd:7f:8a:47:f0:b4:81:70:11:a0:36:bb:30:cc:37:75:e7:
         4d:bc:47:b3:58:2c:86:8f:eb:1f:b5:ee:b4:68:c7:17:07:f0:
         62:2c:d6:72:ac:64:8e:e1:9e:ea:9f:eb:a0:86:39:93:81:60:
         f1:6e:e6:b3:af:fe:87:ce:24:e2:e8:a1:04:af:ec:79:f2:1b:
         d2:b8:6d:fd:5b:b6:57:bf:85:32:d3:3f:cf:ea:2d:58:70:2d:
         2d:db:a1:39:e0:41:b4:da:42:67:00:66:46:bd:96:f5:ba:89:
         49:4a:4b:0a
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0HrROIatDQ7+qDPQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk
ZDZlMjNjZGItODRiNS00YTgxLTg0YmQtZWU1YTQxMDdjMzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV3BGoxZjsscFj95rc40NcQ/EotcCtxhbhEp
bS6W1Fif4Vem5YWWD5612LXvQpAT0A0KBU3F6wymjJeinKwCk5VgWGz5UAREQrY7
IbzH1TgFg90rAjYd79dJpC9K7SCMfAJHKlGQEdtFdT5cUWmY/yeozCsoM4ZvWslU
guIwCGEzfBOvG6//uavxfbJie7bDHW+kz0zbVRL/LPtMssVq8ANH7WDBjguiyZT0
lyBiA2kw1LI7tGf5b0PWdCgp8PfpqJ5WQSqgtoJ2+N3zoYV9FMxyXb80GKuslWRT
cJzrLSMHGy2/kNrhr9YDqGNNupQ9Bpht8WoFusLf5MuughaHOQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBM+6oyjSpihjlQJOSVh/tAv8wNbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTVjNmUzN2QtMDU1Zi0z
OGE2LTkxMTgtMTg2ZmQ2OWZhYWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwER+HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCsNJhUetJy/WCfvje61vl1eZB+FTB4zdkgtYzLHf7MutBbH3ZDI9yf
DzRqGNeyiTcDZHxAyC69p4wbcCG7MR9SQcKjql//hXaAkQQ71LSBdCWXi7QAz6fh
j+23MXGIoIocmLEOcv8FJe3ZE+VjLu3dtvgFQEShIgY04v9/Wx1GNyrrc2mR2vmn
brxmuSCuHmav/X+KR/C0gXARoDa7MMw3dedNvEezWCyGj+sfte60aMcXB/BiLNZy
rGSO4Z7qn+ughjmTgWDxbuazr/6HziTi6KEEr+x58hvSuG39W7ZXv4Uy0z/P6i1Y
cC0t26E54EG02kJnAGZGvZb1uolJSksK
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:23:32 2026 by rpki-client