Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c7b6ce-76f0-3f47-8c93-75e97bfe45e9.roa
File:                     a3c7b6ce-76f0-3f47-8c93-75e97bfe45e9.roa (raw, json)
Hash identifier:          uKROJFJbe3aseYjWt/3G4YOWwkxj34FSSQ7zAx4bmkw=
Subject key identifier:   21:D3:AF:D1:82:8E:C2:D9:48:E0:59:CA:F4:7A:5B:D5:3B:39:37:2B
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D83CAE1952F047A3727AD2B00
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c7b6ce-76f0-3f47-8c93-75e97bfe45e9.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     396553
IP address blocks:        192.82.133.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:e1:95:2f:04:7a:37:27:ad:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=97ec29ab-6f0e-4ff4-b5f4-f01f64ae38c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:f6:8d:3d:f2:34:cf:91:ac:39:7c:d4:9c:
                    a7:79:e0:d0:79:18:8a:bf:28:31:93:0b:52:f6:10:
                    22:5a:6f:ee:35:51:54:16:c7:49:0d:0c:8d:d9:e9:
                    26:d3:9b:06:57:47:2b:fb:e9:22:6c:ac:6c:ad:3f:
                    2b:b9:48:ee:a2:4f:02:6a:c4:35:36:81:f4:2d:fd:
                    2b:05:e0:b5:64:81:39:88:72:8d:9f:4d:c2:6d:f1:
                    8e:94:fb:93:ab:33:84:c9:d2:56:dc:a1:71:85:59:
                    b0:b6:55:e5:09:d6:6d:73:5d:38:6b:0a:75:06:66:
                    82:7e:7f:33:fb:87:c7:11:0b:67:08:2c:6e:bb:ed:
                    42:1d:de:a6:b1:4f:7f:54:1d:22:51:c1:1d:9f:ed:
                    1b:b5:b6:98:d8:31:0f:ad:20:b6:90:ca:95:82:ff:
                    d7:5e:19:52:6b:23:6d:23:cc:40:d6:6a:6b:a6:14:
                    f4:5b:a2:0e:89:65:0c:2a:1a:0c:d9:0d:32:d6:0d:
                    a7:89:be:4e:76:c8:aa:3b:90:c5:19:e8:9b:bf:cd:
                    c4:c1:3e:a8:c4:4f:36:c0:50:0b:27:cd:14:b5:2d:
                    ea:94:d6:e4:24:f0:63:d1:cf:b5:8a:0f:93:df:5f:
                    47:4d:86:f2:a4:f5:f5:ce:a7:b9:e8:ea:c0:56:ae:
                    cf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D3:AF:D1:82:8E:C2:D9:48:E0:59:CA:F4:7A:5B:D5:3B:39:37:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a3c7b6ce-76f0-3f47-8c93-75e97bfe45e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.133.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0f:75:06:20:4c:a6:46:b1:e4:31:ca:2c:ce:24:c0:f4:84:
         d9:e7:0d:55:8f:94:54:7a:ae:2f:aa:34:7d:a9:2e:38:6f:05:
         04:a1:d0:67:ce:c0:7d:cc:2e:f5:eb:c0:ec:f2:7b:fa:74:f2:
         d6:59:88:c8:ea:02:7e:e3:a2:d0:d8:4b:d4:14:8f:0b:87:50:
         ab:66:88:33:9a:2e:8d:25:c9:b5:d1:38:15:19:e8:cf:c7:8c:
         05:39:95:09:f4:6c:94:5a:24:47:e0:5a:52:72:56:fa:1b:2b:
         17:67:96:89:ec:5a:a3:c0:c3:91:7f:32:16:ee:70:5e:f1:83:
         6f:a6:bd:f2:47:32:c0:11:5b:c5:8c:01:f4:bb:d0:28:e9:48:
         20:39:f0:41:b6:7c:d8:70:96:7f:c4:4e:88:ce:d4:22:3c:26:
         52:e1:de:fa:20:58:0a:6b:34:b5:83:7a:56:fd:95:b2:b4:bd:
         3e:ae:d1:ce:00:5c:43:b4:3c:fa:90:4a:47:e6:00:26:a5:49:
         ad:fa:47:74:e2:0a:08:2d:95:a7:89:dd:20:ce:5d:da:b7:1b:
         0b:ef:6b:15:5a:cd:6e:27:57:f6:81:a9:cc:27:03:e5:af:38:
         44:a9:b7:61:92:61:71:ad:a9:59:d2:9c:1b:c4:8c:1c:b8:4a:
         5f:99:67:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:58 2026 by rpki-client