Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69d1f7e-a3bf-3f77-af72-ebccfe69232d.roa
File:                     b69d1f7e-a3bf-3f77-af72-ebccfe69232d.roa (raw, json)
Hash identifier:          drpymp/3dEZc2ydnfB7w+dzNikh6hfmYpHcTOu8TNAM=
Subject key identifier:   C4:EE:C9:39:1D:90:FD:8A:AB:FC:C2:2C:5E:76:BB:A7:59:05:6D:8A
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584CD4077BDB68C2CCBBF1EDBE80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69d1f7e-a3bf-3f77-af72-ebccfe69232d.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     396582
IP address blocks:        192.153.247.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:7b:db:68:c2:cc:bb:f1:ed:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=75103e48-89bf-43f8-ab40-cacb1b7d8485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b0:a0:28:a8:7b:5c:0e:f6:31:31:93:98:02:
                    91:8c:1f:35:c8:a3:87:d5:8a:3d:78:04:60:ec:f9:
                    3b:f2:37:5e:f4:dd:03:91:f1:26:fc:7b:ce:2b:41:
                    d7:55:8d:29:21:23:0d:35:cd:01:f3:33:0b:fd:ed:
                    56:26:f4:84:44:5d:e0:0a:0b:b9:f2:21:e5:a8:30:
                    da:6e:7b:a6:93:71:a8:fd:d2:6c:e7:4a:bd:ca:44:
                    0d:b5:c7:e6:ac:8b:aa:24:61:6b:b9:38:be:f8:7b:
                    04:92:ae:c4:a6:1c:64:d2:e8:7a:11:ad:27:17:c4:
                    f1:c3:4c:90:e9:ec:df:4f:cc:f7:44:30:1a:1d:b9:
                    73:93:df:bd:ee:c8:c2:eb:12:fb:fe:85:9c:8a:5b:
                    c4:e9:73:1a:8d:11:68:6e:7f:6a:9d:23:11:8f:a7:
                    d7:d8:d9:ed:9e:60:e2:1d:15:75:46:04:d0:f9:c6:
                    bb:46:ba:93:d5:aa:30:6a:39:53:8b:67:da:78:f4:
                    09:b4:e1:6f:c7:88:a3:14:30:78:51:89:d0:84:3b:
                    b3:c1:b1:51:59:e7:f4:90:c2:d9:49:25:c0:68:eb:
                    29:8f:1d:14:e7:f3:9f:04:d7:ad:8c:2f:19:49:9d:
                    f0:cd:cf:62:fc:a7:cf:b9:b0:bb:c1:5f:50:18:b7:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EE:C9:39:1D:90:FD:8A:AB:FC:C2:2C:5E:76:BB:A7:59:05:6D:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b69d1f7e-a3bf-3f77-af72-ebccfe69232d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.153.247.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:52:64:d4:d8:08:9f:7d:e3:98:a3:68:8f:be:37:14:ff:07:
         dd:44:56:ee:52:39:4f:e2:e9:3f:cd:4a:40:d3:9e:0d:10:34:
         23:38:f6:f8:d0:aa:db:3f:7d:60:bf:c2:3c:92:e9:70:6c:8b:
         49:c0:17:76:43:51:3e:92:94:68:b1:c2:59:31:2e:9b:12:26:
         ed:2b:ef:d6:99:91:e4:54:0e:ef:40:5c:68:55:cb:4a:0f:bb:
         b8:e9:54:ef:61:73:7b:b4:26:9a:d6:87:62:9e:da:eb:8d:dd:
         03:6d:5e:71:2c:2e:aa:aa:98:cb:5e:7e:92:f9:1b:51:50:ca:
         83:4d:69:f1:8f:6d:13:cb:60:1f:8c:99:7d:44:ad:e9:b1:04:
         6d:2d:cc:6d:21:46:56:e9:6d:8d:12:bb:63:0e:3f:67:79:9b:
         d5:6e:28:f2:6f:e5:1e:9c:7c:e4:ea:4a:fd:23:27:8f:9f:f1:
         31:2b:d0:2f:98:c3:47:7e:37:9f:c8:91:aa:eb:63:a3:6d:76:
         d6:9d:48:00:a8:76:49:64:6a:a4:14:0d:f2:d8:4b:2f:81:29:
         a7:9e:0b:a8:76:70:31:15:80:d2:39:7e:b8:44:3d:89:af:62:
         0e:b6:16:7f:81:66:64:5b:88:78:8b:e1:59:f7:13:09:c1:a2:
         3b:6f:56:18
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzUB3vbaMLMu/HtvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
NzUxMDNlNDgtODliZi00M2Y4LWFiNDAtY2FjYjFiN2Q4NDg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrCgKKh7XA72MTGTmAKRjB81yKOH1Yo9eARg
7Pk78jde9N0DkfEm/HvOK0HXVY0pISMNNc0B8zML/e1WJvSERF3gCgu58iHlqDDa
bnumk3Go/dJs50q9ykQNtcfmrIuqJGFruTi++HsEkq7Ephxk0uh6Ea0nF8Txw0yQ
6ezfT8z3RDAaHblzk9+97sjC6xL7/oWcilvE6XMajRFobn9qnSMRj6fX2NntnmDi
HRV1RgTQ+ca7RrqT1aowajlTi2faePQJtOFvx4ijFDB4UYnQhDuzwbFRWef0kMLZ
SSXAaOspjx0U5/OfBNetjC8ZSZ3wzc9i/KfPubC7wV9QGLdWzQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFMTuyTkdkP2Kq/zCLF52u6dZBW2KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjY5ZDFmN2UtYTNiZi0z
Zjc3LWFmNzItZWJjY2ZlNjkyMzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwJn3HjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA8UmTU2AiffeOYo2iPvjcU/wfdRFbuUjlP4uk/zUpA054NEDQjOPb4
0KrbP31gv8I8kulwbItJwBd2Q1E+kpRoscJZMS6bEibtK+/WmZHkVA7vQFxoVctK
D7u46VTvYXN7tCaa1odintrrjd0DbV5xLC6qqpjLXn6S+RtRUMqDTWnxj20Ty2Af
jJl9RK3psQRtLcxtIUZW6W2NErtjDj9neZvVbijyb+UenHzk6kr9IyePn/ExK9Av
mMNHfjefyJGq62OjbXbWnUgAqHZJZGqkFA3y2EsvgSmnnguodnAxFYDSOX64RD2J
r2IOthZ/gWZkW4h4i+FZ9xMJwaI7b1YY
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:57:30 2026 by rpki-client