Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aee4edd5-bcae-3b65-875c-4b9f46b79747.roa
File:                     aee4edd5-bcae-3b65-875c-4b9f46b79747.roa (raw, json)
Hash identifier:          XOo+9or9wuOH85VnAIlca2+ALw3uMi7uRdLksw+5nZs=
Subject key identifier:   3A:A2:D0:3C:7A:E3:4A:00:AA:BB:EE:ED:AA:A2:AE:BE:5A:DB:9F:B3
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A6FEF002609501586DAD800
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aee4edd5-bcae-3b65-875c-4b9f46b79747.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     396593
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:ef:00:26:09:50:15:86:da:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=1fc65925-12a7-4973-a882-a0b26bcf2d66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:3b:0f:86:d4:5f:3e:6d:7c:7e:18:c3:b1:
                    fe:e0:af:66:43:55:99:36:cd:d3:4b:99:39:6d:06:
                    03:6e:3a:b3:4c:5d:bf:6f:8d:cc:a4:ae:8b:5c:60:
                    4c:de:80:f4:3a:ec:ca:69:41:10:59:1c:a4:36:a3:
                    d9:80:73:9f:d3:bf:7c:6e:10:57:c5:ec:15:0c:c0:
                    7b:ab:8f:92:88:eb:2a:47:4a:24:32:98:b8:d5:aa:
                    52:ac:ce:79:40:98:ea:70:f3:50:c2:0c:7f:6e:c3:
                    35:d0:65:62:bc:12:9b:b4:11:d0:da:a4:4d:8f:2f:
                    42:15:09:79:d8:f7:97:f9:9f:a2:e8:c3:cd:18:b7:
                    ae:68:3a:51:e7:18:60:43:c8:50:55:32:e2:5b:77:
                    c9:aa:53:1c:fb:4f:d2:69:43:b3:74:e4:8b:81:fc:
                    da:3a:03:aa:28:93:fd:42:2f:e7:c8:13:dd:0b:0c:
                    0e:11:11:9d:4c:92:d3:9a:ed:64:31:23:14:2b:6f:
                    bd:db:0c:9f:b3:c0:27:72:71:ef:13:8b:2f:04:bb:
                    4e:18:c6:cc:f6:d4:79:12:1f:e4:ec:b5:f5:bf:58:
                    74:f6:a5:d8:be:62:4d:ec:3c:01:29:4e:96:81:c0:
                    ac:0c:b1:a5:b1:1c:87:4f:30:ac:ce:eb:f4:8d:69:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A2:D0:3C:7A:E3:4A:00:AA:BB:EE:ED:AA:A2:AE:BE:5A:DB:9F:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aee4edd5-bcae-3b65-875c-4b9f46b79747.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:2d:1f:a4:08:85:7b:a0:95:ac:c7:77:43:f5:c1:32:d0:00:
         d0:e0:d3:43:27:3a:89:bd:e9:e6:c1:9e:1f:17:88:e1:75:8a:
         a2:73:c2:01:c7:75:22:94:a3:48:2c:38:e0:4d:d5:0b:92:da:
         c1:50:3e:46:98:04:2b:6f:fe:af:ce:bc:92:6d:6d:95:f3:94:
         51:6e:7b:8b:80:97:71:da:9e:ce:d4:7f:84:c4:97:97:55:b7:
         58:be:bb:8c:00:4d:d8:58:03:77:54:6d:0d:f2:a9:3f:97:5e:
         46:47:48:0b:9f:58:37:b0:1b:be:07:11:03:b7:08:52:6a:aa:
         b5:0e:3c:c6:8c:20:f4:04:eb:53:3e:62:0a:2e:5b:bb:45:9f:
         31:fb:c8:f5:80:38:f4:c1:40:d6:88:6d:d6:ec:d3:59:09:d9:
         e1:77:26:a5:5b:98:47:0d:b6:38:ab:25:6b:12:d4:82:dc:7e:
         da:05:00:02:01:ca:ee:43:d8:48:49:37:1c:2d:b3:da:47:dd:
         f0:59:7c:66:c8:b6:36:a8:30:53:50:cc:8b:89:5b:0d:16:f1:
         94:4f:05:36:b2:29:3a:42:31:12:49:49:61:42:be:51:4b:7d:
         e7:6e:ba:2f:94:24:03:28:29:5e:ee:4a:ef:18:e4:58:74:78:
         d4:eb:3b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:08:34 2026 by rpki-client