Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a611df5-8353-333a-ae83-f7504237545d.roa
File:                     7a611df5-8353-333a-ae83-f7504237545d.roa (raw, json)
Hash identifier:          GwKq8giEHPb6YlwkmX3jsqucYGmM1NStaGNksIT5cBA=
Subject key identifier:   9C:F7:0F:7A:0D:83:A2:AF:01:4E:B3:09:90:17:7C:52:F6:7C:79:C9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E1E4494646905719BA8433680
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a611df5-8353-333a-ae83-f7504237545d.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     396590
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:94:64:69:05:71:9b:a8:43:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=c35c825c-f4ba-4807-8151-77a061156e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:5c:1c:c3:35:04:e3:1f:84:46:14:75:dc:
                    02:3b:46:73:f2:84:e4:7d:45:7a:ef:16:ef:41:10:
                    a1:d9:2e:94:bd:22:81:4d:6c:0e:53:c7:5f:05:71:
                    6c:d5:18:cf:56:38:aa:bd:b3:7d:69:dd:14:ff:db:
                    91:7a:a4:f7:c4:e4:ae:cb:d8:98:28:0f:37:8c:4e:
                    82:2c:d6:9a:17:3a:95:22:ad:23:12:07:d2:f7:0d:
                    70:f8:58:6e:63:7b:11:c1:a9:88:8e:06:0a:04:68:
                    1e:e0:1f:f3:47:64:5f:c1:5e:20:9e:a4:be:ef:df:
                    cb:fb:fb:21:14:4e:41:b9:8e:95:3f:63:5e:93:56:
                    36:79:5f:72:3e:ee:42:a6:eb:97:42:a9:04:e1:51:
                    d4:8a:f2:6a:2c:44:d7:5b:f0:c7:be:53:83:2d:ec:
                    d1:e1:cf:bd:07:19:9b:47:bc:e2:6f:8a:66:25:af:
                    cf:32:f6:77:37:b6:5e:8f:32:ef:15:c5:77:bc:e0:
                    37:9c:2f:d7:93:81:1a:6b:13:37:59:d9:99:6c:c9:
                    ca:06:3b:0a:e9:16:e4:39:7b:a8:4b:82:97:ee:79:
                    a1:84:fb:d8:a0:c4:32:aa:63:7a:42:59:0c:02:36:
                    b6:7e:09:64:2c:9f:c9:7c:6b:2f:a2:28:d6:b4:e7:
                    46:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:F7:0F:7A:0D:83:A2:AF:01:4E:B3:09:90:17:7C:52:F6:7C:79:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7a611df5-8353-333a-ae83-f7504237545d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:9a:7d:3e:1b:ec:31:d0:73:66:ac:e0:f0:0a:1f:59:19:41:
         1f:78:ce:5b:34:74:6f:8d:99:a9:c7:15:2a:6b:d1:60:fd:65:
         f9:12:db:78:14:ab:3d:e3:78:eb:2f:00:d5:48:2f:b7:48:9f:
         65:0a:11:b2:04:94:8a:f9:58:06:e7:1a:a4:55:03:cd:4e:4e:
         3a:1a:ae:ed:c0:9c:74:93:b1:c5:51:39:4d:12:2b:3b:f3:74:
         80:f8:d4:7c:8f:21:35:87:4d:59:1d:94:e6:a4:74:15:60:a1:
         20:74:8c:f2:f1:86:2b:04:bd:68:b3:c0:45:b2:dd:3c:73:e8:
         09:fb:f0:1f:85:ee:4d:68:73:dd:0b:46:92:e4:ad:9d:4a:46:
         86:93:b6:b9:f6:a2:9f:47:0d:48:0e:1b:80:33:0b:4b:32:a6:
         a2:ef:f0:55:f0:73:1f:76:dd:57:74:fd:c1:6c:0d:4d:47:af:
         de:61:44:82:47:21:39:50:3d:66:6a:3a:b7:e1:36:ac:62:8b:
         c9:ea:cd:b2:3f:d5:a5:91:13:2f:91:60:1d:bd:c4:75:99:0d:
         9a:d0:19:cf:37:de:7e:a5:91:23:a1:5c:72:7d:c7:e4:4c:d4:
         0e:f0:6f:94:15:68:04:5a:7b:a8:6a:69:92:13:d5:fe:55:2e:
         3c:b8:3c:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4eRJRkaQVxm6hDNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwOTIxMDAxMloXDTI2MDkwNzIxMDAxMlowLzEtMCsGA1UEAxMk
YzM1YzgyNWMtZjRiYS00ODA3LTgxNTEtNzdhMDYxMTU2ZTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKZcHMM1BOMfhEYUddwCO0Zz8oTkfUV67xbv
QRCh2S6UvSKBTWwOU8dfBXFs1RjPVjiqvbN9ad0U/9uReqT3xOSuy9iYKA83jE6C
LNaaFzqVIq0jEgfS9w1w+FhuY3sRwamIjgYKBGge4B/zR2RfwV4gnqS+79/L+/sh
FE5BuY6VP2Nek1Y2eV9yPu5CpuuXQqkE4VHUivJqLETXW/DHvlODLezR4c+9Bxmb
R7zib4pmJa/PMvZ3N7ZejzLvFcV3vOA3nC/Xk4EaaxM3WdmZbMnKBjsK6RbkOXuo
S4KX7nmhhPvYoMQyqmN6QlkMAja2fglkLJ/JfGsvoijWtOdGUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJz3D3oNg6KvAU6zCZAXfFL2fHnJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2E2MTFkZjUtODM1My0z
MzNhLWFlODMtZjc1MDQyMzc1NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL+afT4b7DHQc2as4PAKH1kZQR94zls0dG+NmanHFSpr0WD9ZfkS23gU
qz3jeOsvANVIL7dIn2UKEbIElIr5WAbnGqRVA81OTjoaru3AnHSTscVROU0SKzvz
dID41HyPITWHTVkdlOakdBVgoSB0jPLxhisEvWizwEWy3Txz6An78B+F7k1oc90L
RpLkrZ1KRoaTtrn2op9HDUgOG4AzC0sypqLv8FXwcx923Vd0/cFsDU1Hr95hRIJH
ITlQPWZqOrfhNqxii8nqzbI/1aWREy+RYB29xHWZDZrQGc833n6lkSOhXHJ9x+RM
1A7wb5QVaARae6hqaZIT1f5VLjy4PL0=
-----END CERTIFICATE-----
Generated at Sun Jun 14 04:06:14 2026 by rpki-client