Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/934cf549-851b-32de-a903-69a46baf5efd.roa
File:                     934cf549-851b-32de-a903-69a46baf5efd.roa (raw, json)
Hash identifier:          bY/8l46lAgUnUf7c8L1ZPUMsfFl7MkRW2c+4iChgIec=
Subject key identifier:   92:16:DE:01:78:8C:95:BA:6A:DB:E2:25:B7:23:48:DE:DE:12:A8:BA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD4077AB476F2A9A664924FE8
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/934cf549-851b-32de-a903-69a46baf5efd.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     397195
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:7a:b4:76:f2:a9:a6:64:92:4f:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=0150b079-7e85-4111-b8d4-f4ba4db9f511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:23:83:98:38:8a:0a:c3:9a:a5:2a:a2:b5:86:
                    52:9c:71:03:e8:23:ab:b1:16:35:1b:91:ea:c9:4b:
                    f7:f8:fd:23:73:82:3b:7b:c7:97:df:f7:a2:cc:7c:
                    f3:9b:c3:8e:9a:ef:ff:56:a6:79:42:9d:da:62:f0:
                    b5:22:89:4f:d3:2c:9c:9f:c4:df:a0:b8:18:d7:67:
                    0a:f7:4f:3e:a4:b7:78:28:a1:16:f8:70:14:ef:7a:
                    1b:d9:5c:58:fc:0c:79:de:c6:67:62:d3:87:da:c6:
                    f3:e5:90:f4:cc:e5:9c:d2:b0:af:58:a8:fd:a4:75:
                    55:27:bd:21:1f:24:09:06:c8:11:52:9f:ef:0b:51:
                    b2:60:17:37:13:07:55:a3:91:b4:ef:54:a8:ef:76:
                    bc:8e:ea:da:3d:48:36:c7:08:b0:4d:fd:e6:49:15:
                    86:ce:40:f5:a1:19:11:71:da:2d:f5:46:7d:19:01:
                    f4:75:3e:34:15:7e:ac:5e:8e:c7:56:40:d8:87:7d:
                    11:ff:0c:97:3e:72:26:f9:e9:e4:f6:e3:02:66:3b:
                    be:7d:7b:82:3f:4c:c8:f3:b5:89:22:f4:01:79:5f:
                    8f:55:59:1f:06:17:c4:3b:2f:a3:88:db:99:0f:c7:
                    b0:36:8d:d3:16:c8:ba:f6:e3:2b:49:9a:e3:6b:6a:
                    e6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:16:DE:01:78:8C:95:BA:6A:DB:E2:25:B7:23:48:DE:DE:12:A8:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/934cf549-851b-32de-a903-69a46baf5efd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:a7:f3:d9:d2:b3:62:8c:c0:14:cd:71:04:19:0c:41:18:f6:
         3c:85:55:ba:67:56:61:b2:3f:b3:6b:b8:77:16:20:a9:97:63:
         04:72:d9:08:2b:1a:2d:0d:c8:f6:72:77:1e:3d:82:4d:41:85:
         c0:c1:e2:77:bf:f1:ab:93:b5:b9:3d:8f:38:1c:62:dd:24:97:
         42:96:e5:9d:a8:40:0c:00:38:4f:49:29:91:7f:4f:d6:b8:91:
         bb:f6:e7:11:2f:8f:c9:88:60:f2:21:fb:c4:0c:59:6f:41:16:
         bf:3c:16:1e:65:ba:7c:03:88:25:12:5b:63:ea:03:1b:0c:b6:
         d8:2b:ec:53:41:59:1b:df:16:b7:dc:ad:ae:45:6d:a0:6d:37:
         c2:46:0f:71:17:19:9b:61:f3:a9:4d:40:5b:d1:cb:74:a5:07:
         f9:5f:7b:77:73:ee:12:d9:80:45:c1:79:5e:2c:36:26:63:0e:
         91:70:0f:1a:f5:9d:13:0f:ef:85:46:22:cc:04:a7:cf:f3:70:
         f5:07:61:57:1f:3f:a5:eb:d0:b3:b8:b9:e5:63:51:3e:dd:26:
         e3:55:8f:08:42:bc:70:26:9c:aa:69:fb:75:f3:30:98:74:fa:
         f0:55:de:79:c4:f5:9a:c5:f3:27:eb:42:8d:7c:43:ee:02:96:
         ea:ef:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:55:00 2026 by rpki-client