Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/217aeb80-1d1d-3140-8c0b-87919e7f8a31.roa
File:                     217aeb80-1d1d-3140-8c0b-87919e7f8a31.roa (raw, json)
Hash identifier:          ekCJrITBR6o87yNhYAUttbQ7u6SXnqhCjdYRg7ZIM4Y=
Subject key identifier:   C8:BB:1C:62:7E:4A:99:58:07:A4:44:DD:10:D1:8C:26:FC:C7:92:BB
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFC14398FAC98B78F312EBA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/217aeb80-1d1d-3140-8c0b-87919e7f8a31.roa
Signing time:             Thu 28 May 2026 15:06:02 +0000
ROA not before:           Thu 28 May 2026 15:06:02 +0000
ROA not after:            Wed 26 Aug 2026 15:06:02 +0000
asID:                     396571
IP address blocks:        192.35.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:14:39:8f:ac:98:b7:8f:31:2e:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 15:06:02 2026 GMT
            Not After : Aug 26 15:06:02 2026 GMT
        Subject: CN=5e5d495f-2ec0-4574-942c-88bcb8883b48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:cb:bd:aa:bf:f2:1c:4a:f3:1b:94:8c:9a:
                    27:cc:62:87:1e:aa:22:77:bd:de:48:76:75:97:c9:
                    9e:42:b7:c4:4e:77:9e:1d:ce:33:ea:97:12:92:fe:
                    3b:cc:11:04:e2:98:f9:c0:81:09:1e:03:e0:21:28:
                    5c:8a:b1:a9:06:c1:fd:5f:1c:6c:08:f7:05:13:c4:
                    bb:2a:5e:8f:c5:c5:c4:a8:72:1d:e5:cc:76:f1:f2:
                    bd:b3:3b:fc:7e:6b:f4:fe:61:f0:e3:dd:7f:5c:04:
                    56:78:4e:96:76:bf:79:a2:a0:d0:3e:ae:16:60:07:
                    d1:76:d9:9b:70:68:b2:1f:54:70:08:e3:56:73:0c:
                    2f:c2:df:af:95:a7:c5:a5:45:b3:90:07:f8:32:0e:
                    81:32:09:32:02:29:02:1f:da:53:9d:1c:5d:14:60:
                    94:7e:1b:94:cb:1c:ed:bb:74:86:05:fb:2e:cf:d0:
                    cf:e7:ff:bc:aa:47:8c:ba:6d:91:03:77:d9:7e:7e:
                    a9:e2:00:1b:b7:ab:ff:e1:f6:ac:49:0f:d9:64:ad:
                    30:71:09:e2:34:9b:9d:5d:16:45:8e:ef:ca:f0:0a:
                    cb:2c:e4:c0:21:03:c4:42:48:83:d2:7a:fa:e0:a8:
                    8e:27:5b:1f:71:34:79:d2:cb:48:3e:3d:52:84:cc:
                    5b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BB:1C:62:7E:4A:99:58:07:A4:44:DD:10:D1:8C:26:FC:C7:92:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/217aeb80-1d1d-3140-8c0b-87919e7f8a31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:cc:c5:f1:ba:33:b4:41:16:e4:b2:5e:32:2f:42:a8:cd:97:
         8a:49:f6:5f:e4:10:f3:ff:9f:e4:91:79:6c:a5:83:06:e7:33:
         12:15:07:bd:4e:4c:7d:5e:7d:fb:05:0e:99:06:5f:2d:73:03:
         39:08:87:85:69:1e:37:08:bd:a0:56:1c:48:86:d1:ef:76:3a:
         2f:5f:87:86:1a:a1:af:4d:6e:51:65:ae:9e:ee:3d:d3:5b:69:
         8a:89:46:50:c0:dd:b2:8d:7e:8b:fe:83:9a:1c:1c:c9:ed:0d:
         3f:ee:1a:e1:bf:32:a8:97:59:46:0d:cf:34:5a:e9:3a:fb:b9:
         40:30:e7:f1:12:07:17:bf:87:a0:7a:82:d4:c7:f7:37:c2:f0:
         05:8c:f1:bb:61:fa:e0:72:d3:f3:0d:ac:a0:c2:79:9c:b3:57:
         69:13:11:d8:4f:5e:84:d5:04:80:04:02:61:63:3b:b4:78:11:
         e7:6b:f3:92:7e:c4:be:96:1d:e8:5a:4d:cf:60:e2:72:59:31:
         91:9d:02:04:97:f4:dc:44:d4:f3:9e:23:dd:d3:c6:91:38:6c:
         80:57:fd:01:4a:3d:b2:be:eb:a4:04:45:64:b4:e2:08:72:f9:
         1d:f3:96:9f:bc:ef:c3:3a:14:09:7a:f5:a3:d1:e1:7c:01:09:
         78:91:e7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:25:00 2026 by rpki-client