Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa
File:                     41e19a7e-8f36-383d-904b-62952b216c8e.roa (raw, json)
Hash identifier:          ek1sKAdMcwrZ4sNedDUpPmt3aSRKO/ze+YXYIb/f0ZI=
Subject key identifier:   7C:69:5C:FE:4A:96:FB:1E:FD:DE:24:0B:FB:84:4A:3D:1C:43:CE:86
Certificate issuer:       /CN=ae9833c8-8b19-48ba-8b98-e74734094959
Certificate serial:       010D0C9F4328584DF4DB631EF6983CEA4EC06C80
Authority key identifier: A9:E3:62:18:70:29:FB:B7:9C:D7:BC:7C:22:FE:C3:55:C7:43:50:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     1252
IP address blocks:        137.197.0.0/16 maxlen: 24
                          192.94.102.0/24 maxlen: 24
                          192.94.103.0/24 maxlen: 24
                          192.94.104.0/24 maxlen: 24
                          192.94.105.0/24 maxlen: 24
                          192.94.106.0/24 maxlen: 24
                          192.94.107.0/24 maxlen: 24
                          192.94.108.0/24 maxlen: 24
                          192.198.32.0/20 maxlen: 24
                          192.198.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:63:1e:f6:98:3c:ea:4e:c0:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae9833c8-8b19-48ba-8b98-e74734094959
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=cdaf440b-99d8-47ad-a079-341c7204b3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:30:33:01:9e:60:aa:9b:ab:2f:ef:57:f5:
                    3e:ee:da:3e:76:88:f9:55:fb:f0:34:ee:f5:c3:3b:
                    35:e9:d6:ed:fb:3a:c8:78:6a:3a:74:25:27:9e:08:
                    d6:71:7c:f4:69:6e:6b:a9:f0:d8:71:3d:18:3d:b6:
                    e9:63:2b:a9:82:fb:72:28:ab:b6:29:1d:ed:b8:27:
                    de:94:17:bd:88:92:e4:aa:76:67:69:54:c8:60:16:
                    75:d3:eb:55:d2:66:3b:7e:50:3f:d9:18:3b:6d:cc:
                    9d:89:73:c2:df:8e:fb:b1:2a:58:b6:f4:6b:b0:c5:
                    2a:28:94:97:2a:8e:78:f2:09:9b:64:67:50:26:83:
                    1b:df:1a:3d:7f:a9:b2:52:27:d7:f9:f3:e4:d1:ba:
                    05:f3:9f:5a:04:12:d2:7d:a5:dc:35:a2:d4:16:ee:
                    0a:6d:59:53:d0:54:30:13:49:0d:ac:dc:dc:91:fa:
                    5c:d7:33:e4:ce:cf:7f:09:64:0a:8b:7c:a9:4c:b5:
                    54:12:a3:53:54:f1:e3:ae:8a:4a:3a:56:5b:ec:0e:
                    6f:f2:b4:ef:78:15:f7:0a:86:2b:4e:e4:f1:f4:a6:
                    92:43:c1:78:b0:da:28:96:8a:00:8d:0d:4f:42:c5:
                    17:9a:95:51:6f:b3:4a:2a:90:fb:80:85:a2:65:b5:
                    7d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:69:5C:FE:4A:96:FB:1E:FD:DE:24:0B:FB:84:4A:3D:1C:43:CE:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/41e19a7e-8f36-383d-904b-62952b216c8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959/ae9833c8-8b19-48ba-8b98-e74734094959.crl

            X509v3 Authority Key Identifier:
                keyid:A9:E3:62:18:70:29:FB:B7:9C:D7:BC:7C:22:FE:C3:55:C7:43:50:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae9833c8-8b19-48ba-8b98-e74734094959.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.197.0.0/16
                  192.94.102.0-192.94.108.255
                  192.198.32.0-192.198.55.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:1a:ec:b1:bc:53:ac:7c:96:48:5d:76:14:2a:6e:d0:82:56:
         d3:2a:0c:e4:c7:5e:ec:99:a5:57:82:56:e8:89:11:b1:44:67:
         39:5b:c1:b1:26:b5:71:e2:e3:67:17:a0:25:73:5b:c0:f6:ae:
         94:64:ae:86:1c:95:9c:df:97:59:06:a1:d5:9d:ae:2f:b8:2c:
         41:5a:c3:0f:26:94:a8:f5:c4:da:50:a8:4e:42:c3:ee:69:5c:
         c5:c6:8a:c9:f2:06:7a:9e:94:c3:7b:58:7f:15:52:98:0e:c3:
         b9:9c:29:91:d9:94:0b:dd:81:67:37:21:e9:e9:d3:e3:c5:c9:
         e4:78:03:c9:c5:08:45:0e:12:8e:a3:15:5e:e2:d2:c9:62:97:
         fa:0f:49:82:9f:f7:84:b5:98:fd:05:b4:c0:8a:e7:53:18:2a:
         14:8e:91:a0:d8:50:02:73:49:23:b7:b8:16:6f:f7:ff:e0:fa:
         ee:ce:79:fa:80:b0:71:6f:7b:0b:77:3b:07:e3:66:cf:b5:00:
         54:76:0d:ca:64:54:a0:a8:96:1f:de:1a:95:d4:42:a1:41:9b:
         d2:05:31:7f:39:df:d9:e2:ca:80:f1:a5:5e:09:f7:f1:0f:6b:
         e7:ce:8a:b0:33:f9:da:09:c9:83:5d:37:fb:71:71:72:c7:96:
         68:ed:75:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:45:05 2026 by rpki-client