Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7895057c-2af6-35b6-a93a-d54002fad2a8.roa
File:                     7895057c-2af6-35b6-a93a-d54002fad2a8.roa (raw, json)
Hash identifier:          9e3mgGMXfl5UmyGWGvwFBaMDVpvWhNyT7TEKy97jflw=
Subject key identifier:   3D:13:95:E7:87:56:60:BE:69:1B:95:43:48:CE:33:75:2A:78:18:10
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD407773D97CF1BF6CE103EE0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7895057c-2af6-35b6-a93a-d54002fad2a8.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     36616
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:77:3d:97:cf:1b:f6:ce:10:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=4f5709ad-dbb0-4beb-bdc0-83abe5d0dda7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:71:ef:09:31:d3:81:fb:08:78:64:6c:7c:
                    9a:65:f5:51:af:cd:26:ce:12:65:62:ba:bc:fc:83:
                    25:0e:9b:4d:6b:ea:b1:0e:e7:ea:27:56:e6:69:1b:
                    94:b2:1f:8b:10:c7:e4:09:bd:a3:97:32:f8:f5:c9:
                    95:9c:ae:5d:11:ae:b4:b4:2e:67:8f:b5:21:fe:7b:
                    ec:58:38:46:89:7b:e3:9c:14:4c:a2:26:dd:50:fc:
                    df:3b:b1:f7:9b:c7:f8:dc:7d:cc:fe:19:84:17:2a:
                    43:9c:b1:a0:0c:dc:3f:c1:22:2e:75:d8:d0:86:02:
                    ca:a6:5f:ee:b5:4f:eb:07:c8:cf:c0:d4:8f:ef:37:
                    69:5f:08:d2:13:c5:19:08:21:1b:0e:8e:88:09:18:
                    75:3d:15:f5:46:4c:17:66:49:2e:26:c4:14:65:c1:
                    45:ca:74:43:64:a8:10:7e:a3:d3:04:45:98:b7:92:
                    27:b5:bb:46:ca:e6:f4:42:21:72:01:0c:d7:82:70:
                    ac:ac:05:22:7c:4c:9c:66:7b:78:f8:5f:96:59:e4:
                    d5:99:f7:5e:9c:0a:1b:44:fb:b8:43:ef:f9:33:ad:
                    0d:0a:8c:0a:ef:06:09:cc:33:1b:35:43:b3:2a:69:
                    39:86:ce:56:e0:fc:8e:60:6b:1d:f1:a9:c1:e4:d1:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:13:95:E7:87:56:60:BE:69:1B:95:43:48:CE:33:75:2A:78:18:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7895057c-2af6-35b6-a93a-d54002fad2a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:a6:6a:ab:15:62:12:54:9c:05:59:c4:90:a9:39:97:6e:80:
         3b:4f:0d:65:c4:90:cc:b7:f1:ca:c0:45:de:8d:5a:89:94:8d:
         1a:7e:17:a7:00:13:0d:b8:08:78:2d:dc:54:10:6b:3a:e2:59:
         6f:a8:58:55:73:13:ba:10:06:12:64:79:79:e5:fe:0f:69:f2:
         5c:9b:54:0d:ba:bc:6c:e7:80:b8:f2:cc:c4:e4:06:ec:a3:c9:
         66:aa:6c:73:6a:5f:6d:45:d9:24:7b:4c:94:cb:69:e6:e2:4c:
         da:2b:b7:36:79:03:1a:ed:77:79:e4:45:e7:f7:02:7c:1a:22:
         95:47:29:9f:ac:57:c9:96:cd:d5:b3:c7:bc:ff:c7:68:68:1f:
         02:67:76:6d:2b:93:8f:15:43:d0:fe:81:98:3e:60:80:9a:3f:
         0d:b9:38:62:f4:7b:ef:b8:89:76:78:e6:e8:63:87:6c:bf:84:
         86:32:72:4c:0c:54:1f:d8:11:f6:ae:c8:5e:21:d4:7b:af:48:
         06:c1:85:fa:1f:87:c0:09:29:7e:93:73:e8:f5:12:cc:e9:74:
         42:18:40:66:3d:bb:ba:ce:93:34:5a:1c:80:43:49:0a:55:d5:
         bd:67:32:a3:a9:d9:f7:36:cb:73:38:35:54:67:48:ee:8b:41:
         1a:d3:5d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:03 2026 by rpki-client