Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c88816eb-2274-3e30-8128-53a33ab0e7ab.roa
File:                     c88816eb-2274-3e30-8128-53a33ab0e7ab.roa (raw, json)
Hash identifier:          tUDc8Cf6xD6FBVwwSz0WTHlVeikWYv6K5Bj2iRQY4gM=
Subject key identifier:   61:E5:52:1C:BC:2D:A4:F3:57:50:C4:0D:2F:26:9C:21:54:61:8A:42
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E0A6FEB2F4373F9A8C5E735C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c88816eb-2274-3e30-8128-53a33ab0e7ab.roa
Signing time:             Tue 02 Jun 2026 18:32:03 +0000
ROA not before:           Tue 02 Jun 2026 18:32:03 +0000
ROA not after:            Mon 31 Aug 2026 18:32:03 +0000
asID:                     396545
IP address blocks:        192.58.128.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:6f:eb:2f:43:73:f9:a8:c5:e7:35:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun  2 18:32:03 2026 GMT
            Not After : Aug 31 18:32:03 2026 GMT
        Subject: CN=415b522c-dcdd-45fe-8a91-c682acdaece9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:91:db:0d:b5:df:e5:3d:b1:06:11:99:6b:
                    6e:a7:6f:1a:3c:2d:25:62:89:ab:8d:ab:c4:a9:63:
                    05:4a:48:0b:1c:d9:d3:6d:eb:2c:f4:57:7d:fc:c8:
                    ea:ad:1a:9a:96:23:6b:18:e9:96:aa:5f:a6:06:7d:
                    c1:1b:a0:ed:8c:bc:83:f8:96:74:e9:58:64:c7:09:
                    56:92:65:0b:74:c6:80:ee:74:f3:b4:ef:10:20:e2:
                    ba:91:29:b0:6f:60:47:32:86:d6:40:1d:00:e7:33:
                    6c:85:62:d0:76:cf:97:7d:2a:0a:52:33:19:83:17:
                    72:bf:12:1a:d0:b1:2c:21:bc:75:e5:8f:67:ca:fe:
                    bc:81:76:55:84:32:5c:2a:4b:c4:e2:f8:81:ef:46:
                    7f:03:ec:40:a8:ed:30:3b:1d:5c:6e:72:b4:60:e7:
                    42:ec:bd:e6:ff:52:f7:c1:74:87:7a:41:39:33:d2:
                    71:a8:87:26:b7:97:07:57:21:e4:a7:64:bf:14:67:
                    a2:38:66:c5:1c:ce:3c:18:c6:96:13:9e:d6:74:df:
                    ab:e0:e0:34:de:5a:dc:58:ee:2d:c5:bd:97:70:7c:
                    9a:fa:35:ba:13:07:73:c3:ca:0e:ab:e8:55:16:d5:
                    a0:f7:c8:fb:b5:fd:41:fa:6a:92:57:6c:76:e5:74:
                    9e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E5:52:1C:BC:2D:A4:F3:57:50:C4:0D:2F:26:9C:21:54:61:8A:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c88816eb-2274-3e30-8128-53a33ab0e7ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b0:6e:10:49:a4:42:39:24:0a:51:fc:35:1f:db:a8:b5:dc:58:
         2b:6a:fa:9f:65:9d:fc:e9:58:d6:f1:a1:15:06:f3:08:55:3f:
         83:4d:4a:2d:e0:63:80:81:e1:86:14:de:a0:87:70:b5:cd:e9:
         f9:85:d2:7f:ed:da:1e:90:12:54:39:6e:35:ab:d7:a6:78:e2:
         f1:2c:b6:56:8b:f3:b3:64:79:3a:30:c6:ed:5e:76:34:09:05:
         85:5f:e7:cd:94:47:cf:a3:f1:e5:6c:57:2a:b3:b5:25:29:00:
         f7:39:fe:56:0f:ba:48:9e:9e:e1:bf:5a:49:32:04:4f:6c:7b:
         16:17:79:df:c8:43:86:56:18:a5:2c:13:1c:71:0f:90:41:57:
         47:e9:97:4a:e4:c3:15:84:0b:88:59:ea:b1:54:c0:4a:82:0c:
         f0:7a:35:95:df:92:12:64:f4:b6:34:49:29:bc:f8:15:19:e8:
         f8:13:58:89:4c:1f:52:72:c8:eb:93:7a:be:15:33:20:0f:78:
         cd:ad:83:d5:cb:26:4a:04:c4:19:1f:19:75:e1:ed:95:6d:2a:
         d1:5f:1a:6e:e7:0c:28:59:d7:99:a0:6e:44:4f:c6:9b:80:e2:
         0f:68:e1:27:84:b4:bf:da:08:12:dd:eb:4d:a7:0f:85:3d:70:
         7d:c4:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:01:10 2026 by rpki-client