Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/490daa8c-ea91-37d6-b82e-a69a64329684.roa
File:                     490daa8c-ea91-37d6-b82e-a69a64329684.roa (raw, json)
Hash identifier:          y3/BEMw+qhq9Evel+p3GB6SbR2tFJxHSBQwGcxS+HUQ=
Subject key identifier:   D4:E2:1C:3D:91:DF:A9:ED:B6:A2:0C:A8:F5:71:A5:9E:98:B8:17:10
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584DFFF9EFC9887907AC3D7E8B80
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/490daa8c-ea91-37d6-b82e-a69a64329684.roa
Signing time:             Sat 30 May 2026 00:36:18 +0000
ROA not before:           Sat 30 May 2026 00:36:18 +0000
ROA not after:            Fri 28 Aug 2026 00:36:18 +0000
asID:                     33355
IP address blocks:        192.25.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ff:f9:ef:c9:88:79:07:ac:3d:7e:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: May 30 00:36:18 2026 GMT
            Not After : Aug 28 00:36:18 2026 GMT
        Subject: CN=3210a260-a543-424a-b861-33104f454ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:af:b7:fa:35:46:c4:b9:9a:61:81:47:2d:d5:
                    08:96:91:a7:e4:5c:8e:e6:89:d2:63:0a:f3:40:82:
                    f4:b3:2d:cc:a5:36:45:0b:7d:aa:7d:cb:cc:95:d6:
                    a1:0f:96:18:b0:b8:3c:51:47:a4:7f:36:99:07:64:
                    0f:f9:3b:45:ec:7c:cc:04:b2:03:20:e4:7a:01:ab:
                    c2:cd:d2:e2:6f:62:e8:01:79:4a:6a:a1:60:ee:38:
                    85:20:98:22:23:5c:6a:0c:d6:4b:22:6f:38:98:3f:
                    c7:eb:27:9f:18:bd:77:c2:90:1c:b4:f6:a7:df:73:
                    f2:0f:b0:b9:fe:bc:4b:3a:67:16:c4:6a:6d:e7:61:
                    ff:06:5a:4c:4d:6b:5a:10:9d:46:9e:27:14:d1:3d:
                    09:d4:c2:b9:6c:ca:a9:44:e6:08:ec:6b:51:54:93:
                    6b:92:a2:48:97:f8:e6:4f:7c:cd:0f:95:19:53:f7:
                    b9:81:ff:91:78:6a:e1:f2:50:87:63:96:ab:fc:33:
                    b2:23:44:6b:86:98:11:36:08:0b:dd:b2:fe:1e:43:
                    ce:ef:de:6b:2d:d8:68:6b:30:bb:6c:f4:4d:5f:31:
                    22:2d:6f:09:be:7f:54:bb:a1:61:18:c0:d3:7c:5c:
                    71:56:af:4f:15:de:7f:bc:60:13:30:ca:e9:54:11:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E2:1C:3D:91:DF:A9:ED:B6:A2:0C:A8:F5:71:A5:9E:98:B8:17:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/490daa8c-ea91-37d6-b82e-a69a64329684.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.25.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e3:49:ba:88:4a:f4:c6:e5:4c:9f:f5:30:ec:e9:4a:48:61:
         03:85:ae:cf:58:2d:c2:48:25:6b:53:98:93:50:58:fd:2b:b8:
         ac:0b:50:e7:84:87:cf:dd:04:5b:4f:e9:c5:6e:7e:54:12:69:
         86:bc:c4:ee:e1:f1:03:d9:ab:d7:26:da:c5:b2:c2:c1:70:ac:
         d5:48:c4:38:83:1a:ce:65:69:32:62:44:80:86:e7:b2:35:61:
         f8:77:f8:94:fa:f5:ed:9c:09:8a:28:bb:60:e6:74:c6:9c:23:
         f6:44:38:59:4b:f9:69:a6:be:9f:5d:d6:53:82:4f:5b:4e:75:
         e5:6a:2c:5a:02:5c:ae:df:67:b2:76:59:83:8b:6a:3f:58:a2:
         19:cf:18:1c:32:1f:ae:d3:eb:87:02:e4:14:e3:f5:30:72:d5:
         5b:8d:01:af:e1:9c:33:e2:34:c9:3a:d3:7d:49:b1:80:c8:ba:
         3e:0a:cd:61:15:c4:97:00:86:bd:45:29:3f:d1:a6:d6:e7:13:
         8f:8d:70:45:13:08:b3:73:cd:b4:54:01:90:f2:7e:17:08:fc:
         b7:7a:cc:6f:a6:2a:e3:80:da:bf:6b:02:de:0d:d2:31:07:69:
         d1:6d:db:d5:1a:a6:72:5b:f0:ab:7e:d2:05:38:b2:85:a8:d0:
         cb:ec:5e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:09:12 2026 by rpki-client