Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa
File:                     9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa (raw, json)
Hash identifier:          LDY09cwzjgH9GnDi3v416bN7eGD//kzNyGx43o8DOQk=
Subject key identifier:   CF:28:5A:AE:B1:5B:B3:1D:DE:66:42:B7:73:1D:0C:FC:75:FB:13:CA
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584DFA707E02443282CF5A643E80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     11090
IP address blocks:        185.30.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:7e:02:44:32:82:cf:5a:64:3e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=6e5601cb-38e2-4f33-b4a4-9eed3592ea04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:84:48:84:63:e0:5b:8b:fe:0b:bd:45:7d:
                    74:47:c0:ca:07:85:46:3b:da:b7:15:43:36:16:8f:
                    e4:a9:76:4c:23:20:d7:3f:0c:c8:a9:38:6c:d4:ad:
                    1a:b9:6e:b7:83:98:42:ed:e1:c4:10:ad:93:8a:15:
                    69:83:b1:98:a2:e1:17:87:9e:f2:86:06:44:69:9b:
                    cd:cf:fb:58:dd:8d:9f:c6:a3:d3:49:9c:00:73:13:
                    cf:e0:35:b3:02:01:6d:59:99:40:6b:34:9f:74:57:
                    fa:c8:47:2d:af:ba:d2:dd:cb:ca:7c:c2:3a:86:3a:
                    65:0e:63:3a:c4:29:54:7a:a4:bf:d0:52:b4:7e:3b:
                    1e:3c:81:1e:bc:36:41:af:ff:22:05:72:00:65:d2:
                    51:86:f8:1c:04:a3:3c:9e:2f:5e:6c:b0:f2:68:99:
                    ab:ef:9a:3e:70:53:7d:1c:91:45:c7:30:4c:2e:61:
                    36:81:ad:75:f3:e5:79:b3:68:fb:b7:97:2d:a1:69:
                    64:4e:aa:0d:e6:c2:91:44:51:57:df:af:b9:bd:39:
                    6c:26:4f:c0:89:53:e6:35:de:2d:ba:bc:b7:73:ac:
                    8c:34:43:e3:02:f6:05:a8:1c:a0:5e:4e:8f:34:45:
                    bc:41:2b:62:26:f4:61:e3:f7:41:66:3c:2c:97:d4:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:28:5A:AE:B1:5B:B3:1D:DE:66:42:B7:73:1D:0C:FC:75:FB:13:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/9078c15a-7e99-334f-8e93-4ff3d23c92e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.30.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:45:f8:4f:6f:51:79:57:ae:5e:3e:0d:82:94:c1:f6:0e:69:
         21:62:64:a4:12:b3:b1:d0:f8:cb:16:47:74:99:85:f7:b8:f7:
         ca:12:80:9d:7e:68:2c:c6:c2:35:f3:58:23:3a:f3:5f:c1:63:
         2d:4b:78:84:ed:c0:b5:7e:3e:ce:2e:51:6b:3d:b0:9d:15:f4:
         e6:cd:8f:b5:b5:17:36:f2:99:e8:a4:ce:18:c8:94:bb:72:fd:
         61:2e:25:cb:99:38:db:d3:35:c0:30:c5:0c:37:32:16:cd:6e:
         a8:61:4c:ed:a6:19:56:d3:cd:dd:a5:2f:9e:22:07:8a:7a:dc:
         61:03:e2:78:84:44:c9:90:5f:8a:8e:31:2a:54:c7:1f:c2:25:
         19:a1:fd:25:40:89:f8:f6:0c:7e:7d:10:6c:41:bf:8c:6e:85:
         a7:dc:19:0f:e9:9c:87:d2:84:de:fb:81:de:a3:43:a8:23:ed:
         11:33:59:3a:0b:58:89:b5:e2:1b:14:41:86:19:79:f9:27:b4:
         85:f0:5c:74:95:92:c6:42:14:49:c4:65:fd:1f:a3:5b:49:86:
         f5:fc:72:17:01:09:3c:90:b7:e2:17:1f:ff:ac:cf:6b:5b:21:
         5b:d4:88:da:67:4d:0a:06:40:69:f8:72:c2:5b:a8:a9:f8:b7:
         0c:7e:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:54:32 2026 by rpki-client