Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a4e7c1-226c-398d-b857-557de6defc6d.roa
File:                     b4a4e7c1-226c-398d-b857-557de6defc6d.roa (raw, json)
Hash identifier:          SQeJNR18peYdRfUbEscLx41OotA+2UNyirGWwtJaqVA=
Subject key identifier:   F1:E7:30:59:31:77:7D:E4:9D:7F:9F:25:29:6C:04:9D:57:C8:99:FF
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A6FEFDDE434C988163C4F80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a4e7c1-226c-398d-b857-557de6defc6d.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     396609
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:ef:dd:e4:34:c9:88:16:3c:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=dc597ab2-d1b0-4ac1-aac6-2bf3ce9df115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:0b:ff:24:df:fd:bf:97:bb:9c:9c:3c:e9:
                    99:46:0e:f4:46:e3:18:30:d1:70:54:1b:1e:29:13:
                    71:fc:dc:f7:17:26:2b:cd:d7:3b:38:b1:f0:1c:14:
                    27:93:68:ae:77:e7:7b:4c:f8:bf:68:e4:5c:e2:75:
                    1f:be:26:90:bb:74:c1:22:2b:ec:74:47:fe:02:fb:
                    2c:3d:e5:02:c1:55:05:da:fb:a1:54:fa:cf:42:b1:
                    ac:a3:f6:76:7f:0b:8e:d6:7c:98:8a:7a:7b:f3:44:
                    f7:90:23:5a:00:af:c7:50:2f:e2:4b:4c:02:cd:36:
                    1a:31:f4:98:66:d1:e1:e0:1a:96:e5:bb:c4:fe:73:
                    a3:5f:53:b4:1d:c1:6c:cd:3d:ba:92:7b:31:a5:68:
                    27:25:c8:46:72:99:19:6a:7e:42:51:6e:fb:a4:10:
                    fa:86:3a:f3:b2:e5:93:0c:0d:a7:61:34:e0:ae:6b:
                    ee:bb:0a:47:1e:24:3c:69:d5:a2:76:9b:8c:a9:e3:
                    0f:df:3a:f2:86:e2:1c:d7:04:e0:5f:55:04:04:36:
                    22:cb:bc:fc:fe:28:68:b9:7e:86:d8:e0:24:f3:9a:
                    be:ec:79:c0:0a:db:c7:4e:95:b7:78:09:e7:a7:b2:
                    80:e4:f6:d4:22:3b:c2:b6:1c:a8:58:98:5b:e8:4b:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E7:30:59:31:77:7D:E4:9D:7F:9F:25:29:6C:04:9D:57:C8:99:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b4a4e7c1-226c-398d-b857-557de6defc6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ce:5c:7d:14:a3:8e:e1:05:8c:f8:d8:9a:38:41:59:22:b1:
         28:2a:3b:bf:6a:b6:30:8b:c3:5b:fe:76:e9:69:d3:a7:0f:76:
         64:f0:34:aa:4d:a3:bf:4e:aa:96:19:4a:51:ba:7e:cc:b4:b9:
         60:53:99:88:f7:19:5c:53:1c:d6:43:0d:da:80:74:94:8a:38:
         fa:51:13:30:17:d7:a3:b7:ca:99:73:49:5d:1f:8d:2b:1b:d3:
         62:aa:33:c0:95:a0:d1:03:f6:4e:4d:77:bf:a5:fc:07:57:30:
         2e:49:26:8a:aa:b2:38:9c:80:3f:82:9d:fd:2f:06:11:a1:69:
         18:0a:64:91:e1:20:05:66:aa:f8:d9:76:f8:2f:29:17:ec:37:
         53:51:a7:6c:77:46:dd:dd:6f:89:7b:23:c8:52:90:95:29:59:
         5d:47:11:9b:c9:bc:0a:86:2a:1a:55:dd:bb:01:c3:6c:0c:1c:
         3a:38:88:9b:08:08:3c:61:4e:04:ef:14:e1:65:67:22:5a:13:
         90:74:48:20:50:a9:c4:ee:4b:ad:51:52:49:46:6e:0b:cf:80:
         d6:52:75:9c:2d:da:b8:42:dc:0b:90:48:0e:2f:ee:14:91:d6:
         4d:16:c8:f5:65:3c:69:0e:81:74:06:d8:75:88:34:d0:63:c8:
         98:2e:b6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:37 2026 by rpki-client