Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94006a7b-d90c-30dd-9297-a91c2a0c7537.roa
File:                     94006a7b-d90c-30dd-9297-a91c2a0c7537.roa (raw, json)
Hash identifier:          dbarJXr86+qnGLGefvqn7VnNgpPewJFyUkPvXYEqCfY=
Subject key identifier:   BC:9A:13:45:22:1E:0A:C0:E6:DA:15:83:34:51:50:13:7A:8B:EE:C2
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DE86C3DAE4E86EC51861717C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94006a7b-d90c-30dd-9297-a91c2a0c7537.roa
Signing time:             Thu 21 May 2026 14:07:12 +0000
ROA not before:           Thu 21 May 2026 14:07:12 +0000
ROA not after:            Wed 19 Aug 2026 14:07:12 +0000
asID:                     396605
IP address blocks:        192.68.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:6c:3d:ae:4e:86:ec:51:86:17:17:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 21 14:07:12 2026 GMT
            Not After : Aug 19 14:07:12 2026 GMT
        Subject: CN=a471be87-e914-4e1f-8498-73a83eb8549d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7d:0e:52:0b:98:97:01:ae:d3:a9:2c:4b:e2:
                    c4:09:8e:21:fb:1d:bf:d6:32:9e:6f:e5:00:f7:08:
                    06:14:c5:89:4f:fa:08:f4:7c:41:8a:f7:05:3f:30:
                    c2:84:fe:38:ae:34:8d:d9:b1:af:45:50:b5:39:03:
                    68:2c:49:be:f0:e6:00:0e:a3:ba:47:2b:6c:36:e5:
                    6b:cc:23:72:6f:36:7c:c1:c6:13:98:90:f7:47:da:
                    6c:dc:ec:62:dc:d2:ef:3b:5c:52:0d:5f:e3:64:68:
                    51:45:fd:d1:ab:b2:10:a6:c8:ce:80:4d:05:ab:23:
                    1a:6e:73:fb:32:3f:7a:22:14:c9:a9:77:35:02:62:
                    06:36:5d:db:b3:5c:a9:bd:a8:3b:f6:5d:0a:b6:78:
                    c6:57:0a:0a:fa:86:0a:83:88:81:a5:72:93:a5:04:
                    df:47:44:e2:cd:c9:f2:79:0f:37:62:2d:5a:7c:3b:
                    b6:8d:06:54:ca:e7:18:4c:f7:5e:5c:3a:f7:de:27:
                    55:d9:47:4c:10:e7:54:7f:70:9c:d7:81:d9:ff:4e:
                    ef:03:ea:c7:52:8f:eb:da:15:c3:75:d5:e2:08:f9:
                    33:d6:2e:c1:b0:54:35:1e:21:ad:67:51:b2:6a:17:
                    14:86:77:48:04:42:54:3a:a6:56:6b:22:62:cc:13:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9A:13:45:22:1E:0A:C0:E6:DA:15:83:34:51:50:13:7A:8B:EE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/94006a7b-d90c-30dd-9297-a91c2a0c7537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2b:24:73:7a:46:4a:bb:80:7a:fe:c9:81:c9:47:b1:84:e7:
         7a:58:d7:57:f8:74:cd:33:8b:72:65:2a:59:dd:d8:2c:93:b9:
         06:5f:e4:2e:bf:78:00:29:34:b5:29:36:64:07:8d:5b:64:a5:
         69:f2:fe:3e:3a:45:d9:8f:78:f7:bc:79:b5:3c:e4:0c:1b:09:
         5f:ad:36:2a:4a:bf:7d:26:f0:bf:22:77:ee:e9:81:1c:eb:d5:
         b5:56:e1:ed:a9:3f:5f:1d:40:61:70:e6:9b:53:d0:d2:ea:62:
         b3:8d:14:ad:06:ee:82:7b:b0:c2:3b:94:05:58:a6:a2:30:b4:
         0b:40:13:10:1d:60:49:11:f4:7a:f2:32:7e:bd:5b:8c:f5:41:
         f0:07:7f:f9:cf:47:49:0b:21:e0:47:28:f8:bd:d2:c2:4e:5e:
         5c:05:12:3f:bb:c5:23:a5:32:08:55:38:35:4a:e4:86:9d:05:
         68:cd:3b:36:e5:f7:85:5e:03:e9:3a:26:8d:34:8d:73:7e:93:
         14:57:ed:de:a6:70:d7:83:c5:b0:8f:d9:74:94:04:fe:58:f5:
         a7:7c:7c:40:9a:52:63:0b:45:5c:b3:aa:2c:97:78:a0:a2:79:
         dc:d7:f3:0f:f8:66:c9:b1:c8:cc:2f:79:ec:5f:5e:2b:70:15:
         dd:09:38:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:04:20 2026 by rpki-client