Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/5e5288b2-4ae8-31b4-b2dc-ba24d8933aa4.roa
File:                     5e5288b2-4ae8-31b4-b2dc-ba24d8933aa4.roa (raw, json)
Hash identifier:          MLecC16acLkww76TJZ6JdDlHGjtNMYXMT3woFC0u+5k=
Subject key identifier:   59:00:60:EC:E7:FF:2C:9B:BA:6C:BF:41:60:C0:D1:91:14:26:20:4F
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584E0D8421876CC2C1E4D5CD8030
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/5e5288b2-4ae8-31b4-b2dc-ba24d8933aa4.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     20055
IP address blocks:        15.211.0.0/16 maxlen: 16
                          15.218.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:21:87:6c:c2:c1:e4:d5:cd:80:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=d391bc07-25e0-4970-9089-ddd4cd1c08a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:04:c2:be:fd:ce:10:a7:b2:b7:59:b7:20:
                    db:db:a8:46:f4:f0:e8:83:ff:77:40:56:6b:51:fe:
                    b0:e1:d0:01:c6:1a:c6:c0:ca:27:4a:d3:c9:31:57:
                    46:aa:43:9a:1c:c1:64:cb:4c:e2:ee:fa:85:07:58:
                    14:ad:6d:8e:26:7d:1c:55:4f:91:6d:3b:44:08:e6:
                    05:22:a3:1a:b9:31:3a:cc:e9:cf:b2:cc:6c:2a:6b:
                    27:05:8a:42:1f:9c:08:5e:39:28:22:d2:01:d7:e0:
                    33:43:3f:66:80:dc:9e:59:04:63:2e:07:1d:d6:4d:
                    66:0c:f4:ef:a3:94:85:c8:10:34:7c:ee:1a:7a:a3:
                    f6:d6:92:14:26:4a:1b:e6:fa:95:d8:57:98:28:22:
                    bd:fe:67:fa:a2:50:0a:86:84:9f:5e:f6:1c:5c:27:
                    9e:f6:86:66:79:80:87:c0:c5:31:c6:3b:3b:59:80:
                    6a:ee:ea:60:75:86:c4:f3:78:4d:f0:99:5b:06:1e:
                    b6:4e:3e:70:24:62:80:28:63:0f:69:c6:4c:a3:8f:
                    26:94:46:b1:08:3b:9e:79:d8:86:76:48:cd:27:04:
                    d0:91:e5:63:93:f9:c0:1b:81:68:fd:d4:cc:84:f3:
                    24:27:e2:bd:4b:ad:f0:33:31:b4:ba:8f:32:c1:af:
                    60:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:00:60:EC:E7:FF:2C:9B:BA:6C:BF:41:60:C0:D1:91:14:26:20:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/5e5288b2-4ae8-31b4-b2dc-ba24d8933aa4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  15.211.0.0/16
                  15.218.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:70:e0:85:f9:fe:92:5c:8b:18:78:5f:53:95:23:38:8c:00:
         13:0f:02:70:b7:b0:23:c8:ad:1b:02:ab:67:6e:47:aa:2d:15:
         b0:0d:79:0d:d4:64:73:01:81:0c:c1:05:8e:b8:b7:70:b6:72:
         6e:c1:e1:28:43:74:98:26:9a:70:63:fe:51:6d:d4:9b:6a:c0:
         a5:6b:c9:51:d7:79:e1:4d:7b:11:da:b4:cc:41:f1:75:9a:67:
         78:b9:97:2d:b3:ea:41:04:6e:f8:b8:be:06:5c:9f:d5:8e:89:
         48:c1:a7:d9:a7:e8:84:7f:81:4e:50:ee:2d:42:bc:9a:93:1e:
         38:cd:46:ff:8d:dd:2e:37:ca:5c:e7:cc:9e:bd:e4:d6:10:a6:
         d6:58:63:8f:e4:81:2a:63:42:d7:6e:70:d8:7b:bf:de:1a:f6:
         40:fa:80:8b:38:47:69:66:39:68:fb:36:6e:fd:a3:6f:6e:79:
         ad:3c:d1:46:f9:3e:3f:65:6b:96:55:53:95:11:cd:ad:53:59:
         a7:bb:60:b8:05:98:ab:a5:96:8b:7a:5c:0c:b7:17:f9:a2:79:
         20:0f:72:26:41:88:9a:24:b1:5b:32:5b:bc:bd:6c:25:59:d9:
         a7:26:6a:96:f3:76:ba:5c:54:3e:b4:99:84:62:e3:12:6e:cf:
         8d:a7:50:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:08:23 2026 by rpki-client