Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/503a6471-1c73-35f3-9fdf-f109a390dbec.roa
File:                     503a6471-1c73-35f3-9fdf-f109a390dbec.roa (raw, json)
Hash identifier:          Gh1QUspDTpOw+RLJFIBe8a7/ZHVvLpnG2bWusXvI9oQ=
Subject key identifier:   BF:ED:88:DC:40:4A:78:2E:97:69:C9:AD:C9:4A:BE:DB:F4:71:F5:7F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A700ED953C088821AC1F0C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/503a6471-1c73-35f3-9fdf-f109a390dbec.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     396567
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:0e:d9:53:c0:88:82:1a:c1:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=4f7ffa66-5d1f-4296-b584-d6c20321cfa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9e:6e:52:11:43:a4:d0:9f:64:6e:a4:50:49:
                    b7:d7:af:a9:0e:a3:a2:c9:ab:ae:59:bd:21:58:a0:
                    ee:b9:ca:15:e5:f8:2f:28:3e:69:38:1b:f9:a5:6e:
                    55:6d:0f:af:18:91:55:c7:a5:17:88:89:a5:4b:82:
                    c0:5f:c2:2c:b4:3e:de:d8:2e:d6:4a:bb:98:b8:f1:
                    2f:2d:d8:90:96:de:34:67:b8:91:19:7c:e4:e9:ae:
                    de:b4:02:e2:bc:ed:d2:c7:b9:29:c4:bc:60:94:5b:
                    c7:f2:ec:b9:77:3a:ac:9e:48:49:70:73:7f:37:ab:
                    c1:ae:6e:50:c8:c7:0f:e1:ec:0d:8a:f7:bc:15:fc:
                    b3:55:98:f3:74:f0:5b:07:bf:7c:20:cd:1b:ad:02:
                    a8:0d:2f:67:8e:7e:20:61:74:6a:cb:6b:1a:79:83:
                    91:b0:18:cd:11:0b:4a:df:08:cf:f4:18:f7:00:89:
                    90:32:d0:2b:67:07:ae:cc:c5:d8:3f:e2:24:81:b7:
                    ce:ee:fa:f6:b0:f3:b7:b1:c9:f0:96:d3:aa:77:e2:
                    b1:28:7d:41:89:d9:28:d4:1c:78:bd:cf:49:2e:cd:
                    86:cf:65:5f:5b:f8:1b:ec:3d:f1:f3:ce:eb:d8:9d:
                    6f:af:ef:5d:5f:5e:c2:44:8b:5f:59:dd:ef:94:bf:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:ED:88:DC:40:4A:78:2E:97:69:C9:AD:C9:4A:BE:DB:F4:71:F5:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/503a6471-1c73-35f3-9fdf-f109a390dbec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:eb:17:d2:f2:3c:c3:be:74:37:dc:23:e4:11:40:3a:d7:e5:
         f5:14:c1:50:6c:80:95:5c:6d:d0:53:42:9f:74:0c:97:b9:4f:
         75:6b:7b:f3:15:f3:45:4c:a5:23:8a:76:2d:d8:ba:e7:32:ff:
         cd:15:3a:67:bf:2b:9e:e0:05:48:d8:33:35:c1:5e:b3:eb:93:
         3c:3c:27:be:12:99:ad:9c:66:7c:6a:7a:fc:42:94:1d:1e:5d:
         a5:f3:0a:d7:7c:d5:ef:5d:47:71:25:86:f8:6f:43:8a:a4:15:
         0e:df:e3:97:ec:7a:16:01:94:0d:ed:51:d3:d6:87:67:66:cd:
         18:aa:1c:99:06:31:d1:84:7e:99:73:a7:a3:f4:e0:41:a7:02:
         bf:48:1a:5f:a1:37:1c:4a:8f:9e:55:b4:65:b5:ff:47:65:1b:
         2e:c0:38:7c:77:d2:66:f2:26:d9:54:d9:55:da:69:c5:ee:21:
         31:07:5c:db:39:51:00:98:71:2d:62:ed:48:29:97:84:46:ae:
         4e:34:a5:66:54:35:92:9b:80:ec:fb:28:36:f7:8d:bf:b6:c6:
         e1:aa:be:e4:e3:48:9d:cd:93:71:45:e8:e8:4e:d8:37:fa:59:
         a8:a1:7c:7b:78:dc:a0:c3:dd:22:d2:90:1f:59:90:99:49:1e:
         bc:82:5d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:04:27 2026 by rpki-client