Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8217bb1-d378-3d30-ad02-54e297e23bcb.roa
File:                     a8217bb1-d378-3d30-ad02-54e297e23bcb.roa (raw, json)
Hash identifier:          X3EiuN9/Ar8qYg+S5Vt5zTc/K6/Zyy57j7q+fp8sbNE=
Subject key identifier:   5D:DA:4B:B7:C1:6C:FC:C5:48:6C:BE:6E:A3:07:82:F0:0B:BE:70:E4
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E26A44E29BF7FE7E776AE85C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8217bb1-d378-3d30-ad02-54e297e23bcb.roa
Signing time:             Fri 12 Jun 2026 21:00:11 +0000
ROA not before:           Fri 12 Jun 2026 21:00:11 +0000
ROA not after:            Thu 10 Sep 2026 21:00:11 +0000
asID:                     396588
IP address blocks:        192.35.51.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:26:a4:4e:29:bf:7f:e7:e7:76:ae:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 21:00:11 2026 GMT
            Not After : Sep 10 21:00:11 2026 GMT
        Subject: CN=77f57597-ed5c-4e47-9e9f-3bc807ca5e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5b:6b:79:66:9a:32:bf:c9:2b:06:08:d6:63:
                    e3:b5:12:9a:14:14:b7:00:84:35:87:d5:6d:46:d3:
                    dc:34:e5:48:d4:f4:48:37:dc:4f:cf:d8:33:45:eb:
                    7d:20:a3:03:0a:c3:05:87:cd:01:a6:39:33:2b:eb:
                    5f:d2:b5:bb:6a:56:60:52:b5:80:d4:5d:f8:01:85:
                    ac:ed:d1:d9:8f:d0:ee:7d:da:a1:76:e2:ad:13:38:
                    5e:47:2c:e1:c5:c2:19:31:97:e2:cb:c8:52:b4:1d:
                    3c:3d:27:0a:b0:cd:29:b1:e8:c4:ce:66:2d:86:a3:
                    22:75:9e:51:91:1c:99:06:f9:89:22:d8:ae:90:05:
                    76:26:21:b2:58:96:f7:00:c2:e5:38:8b:40:8e:da:
                    04:1d:52:74:fc:ed:30:a4:2d:b1:38:04:e4:cb:aa:
                    98:78:0c:1d:b0:56:f8:f5:65:d7:f1:10:fe:89:96:
                    90:35:ff:b7:06:2e:38:6c:58:e4:d2:85:d5:a3:7e:
                    24:db:2b:aa:60:0b:2c:8d:dd:d8:19:e9:01:f1:a8:
                    3a:93:ba:b1:be:41:50:2d:45:c0:15:fa:91:82:ed:
                    da:52:95:09:80:4d:a0:dd:5a:76:c8:ea:f0:21:9c:
                    c5:35:eb:da:ae:e1:fb:a9:63:8a:91:73:13:6a:84:
                    3d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DA:4B:B7:C1:6C:FC:C5:48:6C:BE:6E:A3:07:82:F0:0B:BE:70:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8217bb1-d378-3d30-ad02-54e297e23bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:eb:26:62:4e:b2:51:59:33:6c:57:f4:e6:d2:4c:04:1e:88:
         1d:4f:2e:b0:a7:78:c5:4a:d3:80:f7:0f:10:77:a6:37:84:bc:
         05:8d:56:39:eb:94:1d:03:00:29:2e:ef:93:a3:4c:4e:f0:5e:
         6d:bb:fe:16:c9:7d:0c:ee:73:1f:d6:b0:d2:9b:2d:33:b9:84:
         2b:e8:72:79:53:93:52:bd:f9:ee:c3:f4:60:a4:fc:51:66:2c:
         01:17:cb:58:12:bd:a7:fe:c5:24:f3:d5:f6:2f:9b:02:7f:eb:
         7c:a8:d5:63:35:ed:f7:aa:bb:4f:6e:62:d2:10:1c:aa:b4:05:
         bd:6f:02:14:46:f9:f6:79:d8:96:33:19:eb:ba:1c:aa:ef:25:
         5c:7b:cb:2c:13:b1:c9:6f:79:a6:25:fc:77:af:91:8b:6b:4b:
         51:d1:bf:5e:df:4c:41:3b:05:c7:2d:f8:07:b0:24:87:23:5e:
         1b:ab:43:b6:a3:39:77:0e:e0:81:a8:d6:7a:f2:5c:00:ce:87:
         2f:c5:f8:8b:c3:dc:49:52:9a:72:ed:d8:de:6a:4c:8f:ce:3c:
         23:5d:2d:9e:4d:8b:d8:4c:3b:ed:11:c4:0d:8a:ce:49:30:62:
         d4:6f:b6:13:c7:b6:13:ff:47:df:94:2d:74:ad:e5:a5:db:18:
         cf:74:db:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:23:20 2026 by rpki-client