Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06c8f791-42a2-3e28-8044-418f42370982.roa
File:                     06c8f791-42a2-3e28-8044-418f42370982.roa (raw, json)
Hash identifier:          V0YThM4lZRVygJ2ve6LCB5rJpSjKmWiAOzdJWK0sh2E=
Subject key identifier:   78:ED:7F:1B:20:97:8D:5D:E8:AC:27:95:83:29:21:40:30:53:AE:FB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A6FEB131B6C4546D744F200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06c8f791-42a2-3e28-8044-418f42370982.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     396546
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:eb:13:1b:6c:45:46:d7:44:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=10cedae0-7b6f-4a22-89a1-7cff66c04591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:a4:5d:27:16:3e:8b:af:ac:5a:69:8a:d2:
                    25:14:ce:4d:6e:d4:d1:6a:d1:0b:4a:a6:c5:b2:5d:
                    22:7b:a7:76:7e:c6:bf:e4:2b:0f:a5:2b:19:c6:7d:
                    91:7b:bd:31:0f:6a:65:ca:36:33:1f:22:cc:cd:16:
                    1b:bc:78:7f:cf:e3:2b:a4:17:3b:fa:4c:16:32:9f:
                    71:18:06:8f:68:f6:6c:80:ea:f0:96:40:01:80:1a:
                    a9:1f:04:be:c4:ae:f8:16:1d:e6:83:d4:df:45:fb:
                    c4:42:24:20:40:ef:7b:1e:a9:42:22:20:68:a1:44:
                    a2:7f:b9:bf:c1:e8:ed:24:7a:1a:74:0b:48:a5:cb:
                    0f:92:f4:3f:81:ee:99:5a:4b:91:c5:87:fe:09:5d:
                    44:b1:83:a1:22:fc:32:05:c4:97:f1:b6:1e:25:55:
                    02:61:32:f0:39:1e:28:4c:1f:06:c1:5d:65:12:48:
                    39:a3:85:89:a9:dd:80:55:c3:28:09:45:d5:74:fc:
                    1f:c2:c6:f0:73:6d:6b:86:91:c9:b7:ee:97:d7:69:
                    dc:97:37:3c:12:d8:18:e7:33:03:55:cc:9e:57:ae:
                    7b:01:f8:4e:39:40:93:55:e1:a4:cc:28:4f:27:e6:
                    68:48:88:b5:cb:62:54:b4:6e:1f:15:ba:38:85:63:
                    37:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:ED:7F:1B:20:97:8D:5D:E8:AC:27:95:83:29:21:40:30:53:AE:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/06c8f791-42a2-3e28-8044-418f42370982.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e7:92:ea:c4:99:7e:1e:1c:ef:93:42:46:e9:ab:22:45:f7:
         6d:62:54:eb:a1:cc:0d:c9:a2:eb:cd:ee:03:77:91:a3:e5:3b:
         a7:4d:fd:dd:62:4e:36:3a:55:a5:2e:ad:6d:2f:db:6b:12:d5:
         20:b1:ab:ca:0c:dc:a5:dc:bb:94:5f:db:a1:3c:de:9f:ed:1b:
         fd:71:a2:e2:08:c7:f7:69:55:c2:a3:26:26:f8:5a:e0:d2:c5:
         9b:f9:22:ca:1b:e4:e9:1f:1a:d7:72:eb:94:e0:a9:72:78:94:
         25:0f:3d:e1:1e:ea:7f:f1:24:e6:a4:4e:df:1b:d0:c7:0b:2a:
         bb:0b:7d:e2:93:a2:71:70:2c:27:5e:92:46:ab:49:ec:a5:dc:
         18:85:3f:72:fc:06:24:c2:00:91:5c:9f:06:50:ae:a2:2d:b4:
         48:5c:3b:5c:ab:bc:db:00:ff:68:6a:60:3d:9f:25:20:5a:70:
         8c:cd:ba:37:09:cd:31:f8:7c:14:3f:11:70:a5:8e:39:28:e8:
         b6:c5:c9:d6:ac:b7:78:77:47:2b:86:d4:6e:65:29:02:f4:81:
         f4:e1:c5:d9:8b:7f:8e:09:08:35:b2:7c:9c:bc:5a:ca:d0:b5:
         3e:3e:d5:32:60:f5:77:d1:f2:cf:6a:39:aa:6d:48:23:8d:5d:
         59:10:ab:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:01:47 2026 by rpki-client