Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2788be-6abd-36a7-98bd-397f82c136c6.roa
File:                     2e2788be-6abd-36a7-98bd-397f82c136c6.roa (raw, json)
Hash identifier:          gbl8+94dGeoVrrDCd4LHmARXcioSPV7CgeiTtvpCHIk=
Subject key identifier:   87:7A:13:2E:72:A8:83:E9:2E:B5:BA:C8:37:5C:08:86:A4:5F:63:F2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A6FEC6D81138ECA147FEA80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2788be-6abd-36a7-98bd-397f82c136c6.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     25485
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:ec:6d:81:13:8e:ca:14:7f:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=03d67ac8-3593-43c3-b88d-a05380738c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:17:ee:36:0d:5b:dd:d0:ae:74:21:6c:9a:c0:
                    88:1d:24:e6:a4:ac:a0:a9:4b:fc:cb:bc:99:43:c9:
                    9c:e4:f3:3e:8d:a9:e7:ea:d8:d9:60:f4:9b:c6:a1:
                    80:70:ed:74:4d:50:f4:61:4e:87:9a:c8:fc:23:0c:
                    f5:55:28:06:2b:2b:a7:4f:25:f1:bd:ba:80:10:90:
                    99:fc:65:1d:ee:61:12:df:29:9d:2b:50:86:c6:2e:
                    64:42:d1:37:db:72:ed:7e:6f:bb:4d:02:56:79:b1:
                    f1:af:af:1e:bb:73:bb:da:05:2e:80:f0:a8:c6:6d:
                    32:42:33:ab:2d:dd:11:10:f3:61:e8:ac:d3:85:22:
                    db:a2:24:ca:3b:9a:8c:f6:8a:c9:5f:b2:0e:f0:4a:
                    ba:a0:82:43:94:dc:80:a7:11:fb:94:fb:0e:6f:8b:
                    13:9b:76:6d:be:06:df:85:54:0a:68:11:04:72:f3:
                    80:db:db:de:5d:af:5c:f3:da:02:cf:c1:07:46:e9:
                    c8:a5:66:5a:3f:ee:8e:6b:8d:a6:e8:07:08:03:22:
                    ea:d2:12:6d:b6:ab:ff:7c:dc:ed:05:7b:44:c6:ae:
                    d1:fd:45:33:35:89:fa:75:39:6b:aa:4d:11:e1:7f:
                    f1:34:7f:26:ae:d5:1c:c9:31:c8:e2:61:21:d2:9f:
                    fb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:7A:13:2E:72:A8:83:E9:2E:B5:BA:C8:37:5C:08:86:A4:5F:63:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2e2788be-6abd-36a7-98bd-397f82c136c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:8a:87:3a:0f:a3:31:c1:3f:bd:64:7c:0a:da:51:91:d5:a8:
         8e:3f:10:3d:e1:c4:f6:c7:60:76:71:33:5f:bd:8a:33:64:5e:
         b7:25:7e:62:50:4f:58:fe:c6:fc:1a:ed:b4:3f:74:94:73:2a:
         16:78:9c:6e:ec:0d:6f:94:45:e2:8d:dc:c1:7c:0e:cb:2b:8f:
         c5:0d:03:3c:ba:ef:74:ac:df:ab:34:81:65:1e:86:9b:57:d1:
         fb:5c:2d:e8:db:18:2b:3f:26:2f:2b:f5:2f:6f:0a:ae:96:d5:
         e4:0d:70:48:4c:46:3b:da:45:68:ba:f0:1f:fb:42:ee:94:ce:
         20:c5:d5:fe:6d:ad:4a:47:52:e5:61:ff:20:46:71:86:e1:fa:
         96:6a:a1:42:ad:7d:c5:51:42:51:be:72:8b:8b:94:1d:75:06:
         ff:7b:b9:46:49:57:30:22:cd:35:b1:d8:dc:ea:f7:75:c3:c2:
         3f:10:20:92:6c:fa:aa:ac:a6:1a:70:eb:79:b7:79:cf:4a:f0:
         62:c3:8c:b5:c0:a8:85:e4:44:22:01:13:04:17:b1:50:f3:18:
         40:96:0d:0a:15:c1:95:36:b6:fb:95:35:2b:15:be:b4:dc:6f:
         44:58:d3:8a:b2:36:4d:60:a8:a6:88:39:50:1e:e1:1d:fd:32:
         c6:46:da:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:52 2026 by rpki-client