Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd5cb8a6-b212-3785-bc86-ff47e97e78bd.roa
File:                     bd5cb8a6-b212-3785-bc86-ff47e97e78bd.roa (raw, json)
Hash identifier:          v+zsVZmvghhuKdaQHIgoDrnPI6fkYj2Q++NU3N7hLio=
Subject key identifier:   58:F2:1B:00:EB:7B:F3:0B:7C:24:9C:27:22:19:02:8C:9A:D9:E7:D9
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A700A58D93E91A9B82D4B80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd5cb8a6-b212-3785-bc86-ff47e97e78bd.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     396608
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:70:0a:58:d9:3e:91:a9:b8:2d:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=9cbcf2cb-945a-4cb0-9d3d-bc39ac5f3f15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:67:39:89:e7:2b:8c:70:aa:aa:f7:33:d7:2a:
                    58:5a:ba:18:27:bc:fa:b1:b5:9a:dc:be:94:32:62:
                    35:c8:6f:ad:e3:c5:44:eb:4d:89:73:43:28:b0:16:
                    41:2a:53:ec:7d:02:e2:10:8f:98:06:50:53:24:a4:
                    60:88:6d:81:86:f1:c6:0a:9d:50:72:9b:6d:91:e6:
                    17:27:84:d8:5a:fb:ba:48:54:df:81:9a:cc:20:ef:
                    51:c6:99:17:bb:d4:8c:a1:c7:e7:e4:4b:20:14:3b:
                    87:0f:ee:1e:2b:29:e6:47:4d:76:18:a6:6b:ec:84:
                    db:09:2f:0c:a1:1b:5a:d1:e8:82:40:c5:57:a0:0a:
                    4b:d6:6b:15:19:ea:56:b7:b1:fc:fb:17:58:4a:fa:
                    43:da:8b:6b:c0:9b:20:99:df:3b:cf:3f:5f:11:6d:
                    59:0c:bc:cb:2c:c0:96:15:44:f0:03:36:41:79:b8:
                    a5:f2:5c:a2:13:fd:83:fd:ac:70:8a:d6:e4:7a:32:
                    24:52:5b:4d:f1:ab:ac:74:eb:c9:4e:3a:a5:3e:cb:
                    a0:2e:11:ba:3e:2c:9a:7c:18:18:22:cb:fd:98:ca:
                    50:68:92:bb:c9:94:25:d3:21:61:18:d3:c2:69:c8:
                    91:98:f5:5f:de:1a:27:3a:58:b9:ee:01:df:ac:53:
                    5e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F2:1B:00:EB:7B:F3:0B:7C:24:9C:27:22:19:02:8C:9A:D9:E7:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bd5cb8a6-b212-3785-bc86-ff47e97e78bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:fd:1e:3f:c6:be:59:32:52:b9:21:4e:66:c7:29:4d:23:8f:
         d7:b9:c9:87:41:11:52:e4:77:fc:da:0f:1d:4e:85:30:7c:95:
         75:ec:2b:b2:ea:af:d3:59:81:d7:a0:64:5c:2b:b3:ba:33:e2:
         9a:82:45:2f:a3:ea:23:fd:d9:2f:37:30:ed:eb:73:bc:29:fa:
         34:17:3e:e4:4a:a6:db:c3:75:1a:c1:80:a8:f7:b5:8a:91:0c:
         d3:86:d3:14:29:b3:77:4a:3f:60:eb:26:fc:93:89:1a:2c:78:
         3d:18:bf:a9:96:81:a0:66:a3:f8:f2:33:16:08:b3:fd:41:64:
         2f:34:11:37:0d:c2:46:ca:49:a3:34:0c:39:02:ea:8d:7e:04:
         53:ee:c0:0c:c7:9e:6e:ac:3b:cd:ca:9e:4b:85:97:64:c4:b0:
         83:d2:b7:9f:69:d1:25:8d:88:cc:01:0f:6a:fa:ef:78:46:d6:
         b3:43:27:a4:ff:ae:70:fb:6f:1c:18:f3:b3:ba:1d:de:9a:af:
         71:c2:52:4e:04:a9:f0:27:7f:ba:57:10:e0:65:98:b1:27:5b:
         06:c0:e2:a0:3b:4a:b7:e1:89:e0:72:22:e9:8f:3f:ff:eb:f8:
         72:0d:fb:e2:9d:5f:06:19:02:43:ce:80:b6:a0:dc:cc:e5:d3:
         9e:98:a0:0e
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4KcApY2T6RqbgtS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI2MDYwMjE4MzIwM1oXDTI2MDgzMTE4MzIwM1owLzEtMCsGA1UEAxMk
OWNiY2YyY2ItOTQ1YS00Y2IwLTlkM2QtYmMzOWFjNWYzZjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmc5iecrjHCqqvcz1ypYWroYJ7z6sbWa3L6U
MmI1yG+t48VE602Jc0MosBZBKlPsfQLiEI+YBlBTJKRgiG2BhvHGCp1QcpttkeYX
J4TYWvu6SFTfgZrMIO9RxpkXu9SMocfn5EsgFDuHD+4eKynmR012GKZr7ITbCS8M
oRta0eiCQMVXoApL1msVGepWt7H8+xdYSvpD2otrwJsgmd87zz9fEW1ZDLzLLMCW
FUTwAzZBebil8lyiE/2D/axwitbkejIkUltN8ausdOvJTjqlPsugLhG6PiyafBgY
Isv9mMpQaJK7yZQl0yFhGNPCaciRmPVf3honOli57gHfrFNexQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFjyGwDre/MLfCScJyIZAoya2efZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmQ1Y2I4YTYtYjIxMi0z
Nzg1LWJjODYtZmY0N2U5N2U3OGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAwDqAHjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAq/R4/xr5ZMlK5IU5mxylNI4/XucmHQRFS5Hf82g8dToUwfJV17Cuy
6q/TWYHXoGRcK7O6M+KagkUvo+oj/dkvNzDt63O8Kfo0Fz7kSqbbw3UawYCo97WK
kQzThtMUKbN3Sj9g6yb8k4kaLHg9GL+ploGgZqP48jMWCLP9QWQvNBE3DcJGykmj
NAw5AuqNfgRT7sAMx55urDvNyp5LhZdkxLCD0refadEljYjMAQ9q+u94RtazQyek
/65w+28cGPOzuh3emq9xwlJOBKnwJ3+6VxDgZZixJ1sGwOKgO0q34YngciLpjz//
6/hyDfvinV8GGQJDzoC2oNzM5dOemKAO
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:15:40 2026 by rpki-client