Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba84f184-6ec0-3515-a89f-c5ca019c0cd5.roa
File:                     ba84f184-6ec0-3515-a89f-c5ca019c0cd5.roa (raw, json)
Hash identifier:          Suwm0wu6/LnFng/plCKheMUEl/4vcP+Hce1XAvXuh88=
Subject key identifier:   65:8B:61:2C:65:71:F4:60:07:28:BD:15:0C:03:22:6C:C7:C4:72:0F
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584DFC14358D79E974B9E6A74D80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba84f184-6ec0-3515-a89f-c5ca019c0cd5.roa
Signing time:             Thu 28 May 2026 15:06:00 +0000
ROA not before:           Thu 28 May 2026 15:06:00 +0000
ROA not after:            Wed 26 Aug 2026 15:06:00 +0000
asID:                     396617
IP address blocks:        192.35.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fc:14:35:8d:79:e9:74:b9:e6:a7:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May 28 15:06:00 2026 GMT
            Not After : Aug 26 15:06:00 2026 GMT
        Subject: CN=a93bfdb9-3087-4aba-9647-24b5a9a1aaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:47:85:1f:3e:00:d3:7c:8c:3e:44:a6:45:a0:
                    ba:e5:a3:bf:4b:87:d1:9e:d3:52:0c:bf:28:48:69:
                    2d:72:dd:1c:af:14:57:e5:69:02:f4:8b:6e:79:cc:
                    c6:55:2c:3c:a1:5e:88:03:e6:ad:2a:2c:b6:1f:09:
                    f8:12:c1:ff:ac:1e:82:ba:1b:6b:77:41:69:13:31:
                    84:b5:13:2c:ce:4b:ee:c8:02:87:53:fc:db:39:03:
                    f1:0d:31:84:d2:ff:0a:f9:d1:2d:a6:3c:83:d1:6d:
                    5f:3a:e1:f1:a3:4f:7b:ef:4c:47:94:5b:32:a4:fe:
                    d3:bc:82:3b:e5:c5:60:95:a4:6d:de:f3:a7:41:3d:
                    3d:c2:0a:44:b5:ca:18:3d:e7:01:df:41:07:61:0a:
                    51:d1:02:b5:6e:6b:be:d1:31:13:b1:07:b2:58:e5:
                    35:e6:4b:dd:b7:40:f1:b9:c0:01:74:87:b1:d6:94:
                    95:2a:f0:44:a9:a8:de:8c:ce:32:21:56:43:e6:d2:
                    43:fc:4f:62:f2:d6:16:8e:4b:1e:74:d4:9f:62:b7:
                    a7:03:dd:6c:55:90:a8:28:bc:db:d3:ea:04:97:af:
                    f5:65:a8:4f:15:37:6d:d5:3d:cf:bb:0e:a3:dd:71:
                    48:b2:e2:2c:c8:36:24:1f:ac:b5:1c:5b:8b:61:19:
                    14:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:8B:61:2C:65:71:F4:60:07:28:BD:15:0C:03:22:6C:C7:C4:72:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba84f184-6ec0-3515-a89f-c5ca019c0cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.35.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:e7:5e:25:78:3d:96:95:b9:a1:8b:a4:29:74:dc:0c:75:ea:
         84:42:5a:dd:dc:ab:e4:77:e1:56:07:d2:81:c8:9a:23:31:c0:
         cb:78:9c:1b:02:64:b7:42:be:e3:4d:39:c6:c0:48:e0:1c:be:
         18:9d:bc:7e:e0:69:61:5f:02:bd:b7:f5:d8:a6:59:45:00:ad:
         c7:f2:38:de:b9:e1:0f:12:f7:a2:bc:01:79:16:0c:b7:86:81:
         e7:60:98:2f:6b:00:7c:f5:f9:54:79:ab:f3:c8:bb:5b:47:04:
         ba:4c:c9:be:ac:23:57:fb:76:47:3b:81:a9:3f:93:29:46:63:
         61:f2:e0:96:64:07:07:0a:6b:4a:b4:f5:a0:2a:a2:98:cc:05:
         09:e0:11:b6:5b:a9:57:d4:ad:31:00:8b:2d:be:4b:d7:7a:2e:
         6e:c7:20:e4:76:61:68:1f:1f:19:ac:2a:a7:c0:f4:52:e9:13:
         40:7d:de:c4:e3:4b:31:88:66:2a:9c:27:76:c9:00:ff:bd:5c:
         2f:b1:d9:3d:91:34:49:24:70:cd:c0:50:ae:92:5b:00:22:b4:
         84:0d:88:18:7d:4c:ec:95:84:15:b5:c5:be:f0:cf:8d:9a:84:
         33:73:32:72:e8:a0:50:d4:87:f9:53:4a:78:c1:5d:aa:55:0b:
         c1:06:bd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:38:57 2026 by rpki-client