Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e37c559-189c-361c-a120-094db031afae.roa
File:                     8e37c559-189c-361c-a120-094db031afae.roa (raw, json)
Hash identifier:          bCXO8/++0utkZPLNwzdltSxfBcs9lLHuPMZDee1LgPs=
Subject key identifier:   36:51:70:28:C0:1F:CA:60:C9:D9:3F:D2:EB:9B:58:DB:B2:76:23:EB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD4077AA43A701753CB51A940
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e37c559-189c-361c-a120-094db031afae.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     396590
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:7a:a4:3a:70:17:53:cb:51:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=9e2b9630-99b5-490e-b464-d06fbba497e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:55:83:fd:01:50:a9:fd:68:46:ba:fc:7e:a3:
                    0a:0f:21:b4:0b:1c:56:c5:a7:23:54:3c:ce:3d:0a:
                    85:2a:2a:30:18:ed:60:ca:6b:d4:1a:29:71:00:ff:
                    20:31:d8:e3:58:2d:32:d1:f1:bf:c9:35:32:d9:91:
                    c5:00:6e:09:de:20:1b:58:b8:4c:d9:2e:71:78:bc:
                    08:2f:33:f3:45:bf:ad:b1:02:ae:ae:6e:af:ea:76:
                    83:11:bb:d7:ae:11:9d:95:f2:90:8a:e1:25:15:9d:
                    9e:12:2a:75:d6:ad:87:2b:45:11:b4:f7:05:ec:ba:
                    cb:95:63:0a:d7:7e:bd:b9:2d:54:e4:1b:74:1b:3c:
                    27:c9:a7:fe:f9:d8:bf:44:f8:b5:79:7d:61:28:db:
                    3b:56:8a:72:d0:f7:28:23:56:00:c2:d6:77:d6:e1:
                    d2:f3:18:86:3a:20:3b:91:57:77:5c:89:e8:7b:af:
                    fb:a5:e6:c4:26:b4:48:92:a2:d7:45:b1:57:71:ad:
                    e5:6d:70:ac:8a:b8:8e:48:d7:a4:7c:93:c7:63:ed:
                    d7:21:fb:31:cd:2e:09:eb:26:92:0b:1e:bf:e4:98:
                    34:7f:4e:e7:c8:ae:1e:a5:cd:dc:85:cb:a6:42:2a:
                    27:3f:11:d1:20:43:b9:a9:26:b3:4c:45:c3:bf:d9:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:51:70:28:C0:1F:CA:60:C9:D9:3F:D2:EB:9B:58:DB:B2:76:23:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8e37c559-189c-361c-a120-094db031afae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:70:6b:bf:37:af:18:40:6f:81:4b:af:8c:3c:3b:ec:4b:
         4a:c0:60:a5:14:d5:21:ab:19:d7:4b:16:d2:df:7d:e6:7f:7e:
         29:e4:96:87:7d:4b:d6:f5:9f:c1:fd:b6:76:a1:4b:e7:99:82:
         2e:57:65:a8:37:a0:89:d2:42:ab:5a:99:db:64:19:d4:d0:97:
         92:01:2b:3e:7e:40:94:fa:c4:03:66:45:0a:d1:65:88:45:fc:
         58:92:3f:aa:36:0a:b9:3d:44:02:50:4a:7f:d0:d5:59:15:81:
         26:b9:99:bf:62:04:4e:2f:6e:e1:9a:e4:9f:af:fa:d3:73:de:
         99:7c:4e:0e:89:cb:b4:71:b9:95:4f:b9:cc:00:18:e1:5e:58:
         33:93:f6:4d:3f:eb:9f:60:5f:86:4f:e0:24:03:87:2b:1d:05:
         36:66:f3:b7:1f:43:cb:84:c2:33:28:f6:79:93:a9:8f:99:94:
         c8:2f:db:9b:16:b1:64:4e:2b:f7:ce:f1:48:c3:df:d3:1f:9f:
         4d:c6:87:11:1c:2b:7a:79:e0:cd:2e:8f:7b:51:cb:d0:1f:9c:
         ba:7b:d6:2f:69:1c:ba:0f:9b:cc:ae:c2:03:2e:11:da:57:75:
         3b:c8:9c:11:fd:db:f0:79:e4:63:6f:9c:06:0f:da:28:3f:c3:
         3e:8e:88:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:40:13 2026 by rpki-client