Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98419fd1-bc36-3c14-87d4-f5edff80cc66.roa
File:                     98419fd1-bc36-3c14-87d4-f5edff80cc66.roa (raw, json)
Hash identifier:          fRNZx1HVdzpyVgDWDHH1fSLIy/HClARRVFsaMBsqD1U=
Subject key identifier:   52:A6:B4:54:B6:F4:B1:BA:28:16:82:D4:BF:05:B8:F5:20:5E:A8:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A6FEE825CEC697345453E60
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98419fd1-bc36-3c14-87d4-f5edff80cc66.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     20362
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:ee:82:5c:ec:69:73:45:45:3e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=999c0641-7ef0-4250-9fe9-a3f2fe5b7db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:c2:46:ab:c0:59:c7:7e:da:ad:9a:6f:2f:
                    ae:38:ce:20:67:e6:b0:7a:7d:2b:c3:5d:f2:17:31:
                    1f:fa:f9:a9:5d:e8:fe:1c:9b:4d:c1:d4:96:4c:c8:
                    e3:90:8f:f6:04:7a:c3:f0:0c:01:19:7a:87:b1:70:
                    67:ee:9d:ae:fb:90:e7:eb:0a:85:ab:41:3a:26:7f:
                    80:b6:24:ba:f6:a5:bf:0e:99:32:1c:df:bf:40:02:
                    3a:40:7d:db:cf:31:e1:56:4e:5e:81:ac:5e:92:5f:
                    d2:ba:84:99:aa:6a:30:26:5f:c4:6f:4c:2b:d2:d8:
                    93:01:98:cf:b1:c0:36:74:cb:b7:a2:a4:cb:87:2b:
                    c8:e3:f9:0b:e8:92:ed:3e:99:ff:6c:82:fd:1e:f4:
                    b1:5c:58:bf:37:c8:e0:45:72:69:af:70:8f:44:d5:
                    81:ff:aa:be:56:0c:be:9a:51:d6:d3:76:d0:46:83:
                    8a:78:c8:e6:3e:97:be:b0:96:32:80:41:33:77:13:
                    8b:2e:a2:34:fe:ea:b4:29:20:20:7a:17:3c:24:dc:
                    c5:9f:db:29:fd:21:aa:5e:83:c3:4e:34:79:74:bd:
                    d5:cc:a4:38:82:bb:02:b7:32:a9:9e:b4:a9:26:c8:
                    63:21:69:3c:42:70:90:30:08:66:02:1d:70:4a:70:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A6:B4:54:B6:F4:B1:BA:28:16:82:D4:BF:05:B8:F5:20:5E:A8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/98419fd1-bc36-3c14-87d4-f5edff80cc66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b6:43:4a:5f:dc:53:96:e1:0e:6b:ef:4a:49:16:14:50:7e:8d:
         16:87:4b:80:ee:0c:9f:e7:b2:5e:75:ec:eb:39:eb:d5:c2:f5:
         bc:32:c7:e9:dc:3c:07:29:df:e2:60:b5:5e:a8:33:ad:37:8b:
         39:28:5d:fa:17:0e:21:20:3a:8a:31:e0:f5:44:d8:5e:88:07:
         bd:c3:04:4f:41:91:74:d0:df:53:57:29:04:c4:93:a3:eb:23:
         04:b0:11:ff:71:4d:0f:4b:d0:51:5b:c4:f6:2e:8b:30:f9:43:
         e2:36:4f:97:1c:91:f3:2c:60:61:e5:3d:03:3e:0e:0a:9c:a9:
         7f:5c:b6:3f:f4:43:dc:43:25:e4:5e:2c:7f:6f:83:6b:9e:fc:
         63:e6:67:20:e1:52:39:b2:2b:8f:f2:a8:08:96:df:6c:5a:9a:
         62:17:41:12:d4:77:2a:a1:5a:50:f1:34:77:32:fa:06:c0:8b:
         0d:87:c4:39:84:0e:fb:98:51:05:db:cc:f4:ad:2d:c2:ce:4c:
         c3:a2:b2:db:27:77:2a:13:75:61:4f:fd:4e:ba:ba:ac:ce:f5:
         5c:de:e5:34:3c:1e:16:56:7b:46:21:ea:6f:e4:86:9d:67:59:
         45:77:88:8a:1d:77:5c:ba:a9:46:48:c9:cf:00:82:73:76:d0:
         45:e1:ba:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:39:11 2026 by rpki-client