Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/991cf70e-362f-3d84-afc7-74ab49a12348.roa
File:                     991cf70e-362f-3d84-afc7-74ab49a12348.roa (raw, json)
Hash identifier:          xL1oWrRTEBEaLVjgXSZKq5p8obiB38hWFfBror8ip7A=
Subject key identifier:   1A:6B:21:0F:A0:1A:57:FF:50:F0:19:50:B5:2D:A6:94:5A:1C:82:09
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DE1509C62CB6E47E964099900
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/991cf70e-362f-3d84-afc7-74ab49a12348.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     393249
IP address blocks:        128.189.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:9c:62:cb:6e:47:e9:64:09:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=318311c6-06b2-4f09-82a6-e44cd231c178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:31:bb:af:7e:24:84:f8:91:23:9c:a9:79:12:
                    6e:9c:ab:51:c1:ee:3f:f2:e5:69:59:c6:ee:d2:35:
                    92:3b:a6:94:b5:94:cb:69:5a:73:06:c0:89:27:76:
                    c2:64:7d:b3:3c:58:5a:89:20:26:c4:ea:61:14:d1:
                    d4:8b:a1:b3:25:2d:4d:c8:2e:4d:da:2d:0c:dd:5c:
                    65:83:9c:51:77:98:70:17:8c:6c:c6:a0:83:7b:aa:
                    a8:89:40:ff:8a:e4:c6:79:06:b4:36:eb:32:ea:dc:
                    66:47:c2:bb:f0:b2:ac:69:35:19:e7:3e:4a:90:fa:
                    4b:d4:37:5d:50:7e:d8:8d:c3:5f:4b:b6:c2:b6:b1:
                    15:23:19:3e:24:da:ce:ab:12:40:98:3f:5f:13:5b:
                    8b:2b:50:15:2d:2f:f7:5f:24:48:b6:38:80:3f:ec:
                    c1:41:06:f4:c0:b4:c0:78:4e:e3:98:69:f4:05:ff:
                    8a:ee:6f:3f:7b:e4:2b:7a:77:0a:a2:c4:ad:5d:9b:
                    88:0a:c4:44:d8:bf:54:d5:23:b1:3e:b7:d1:48:4a:
                    12:7c:50:25:c5:26:1e:09:09:ba:73:7b:f2:09:0e:
                    51:b1:51:ae:a4:2c:80:de:34:18:c6:a8:19:de:6a:
                    f9:3a:31:c5:4a:8c:ae:60:c4:0c:09:50:90:2f:62:
                    48:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6B:21:0F:A0:1A:57:FF:50:F0:19:50:B5:2D:A6:94:5A:1C:82:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/991cf70e-362f-3d84-afc7-74ab49a12348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.189.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:fb:9e:fe:bf:c4:ae:95:57:22:c0:59:ce:57:68:6d:a7:
         44:dc:88:0f:50:cc:86:ea:cd:30:a2:5d:42:90:f4:d0:cb:d1:
         0d:d7:8a:83:00:ba:a8:55:0d:bf:c0:85:85:34:ba:24:e8:b5:
         14:4e:bd:1d:e5:10:47:e3:72:39:5e:c5:11:75:09:88:02:f0:
         72:8b:b2:55:9a:4b:3e:3d:5e:a8:00:33:ae:a0:72:1a:dd:c9:
         98:9e:11:e6:99:8a:2d:19:0f:07:9f:95:a6:9e:3f:61:ec:d8:
         56:20:62:08:8d:69:4d:28:52:88:9e:46:d3:49:c3:a7:d4:3a:
         f0:f7:44:f6:a0:66:60:1f:7c:b3:ab:78:8c:67:f5:1d:e0:1d:
         5a:8b:d9:da:8c:e2:c8:0f:59:b1:26:83:02:ae:be:e2:70:ac:
         82:c4:ee:15:e8:7e:8b:a5:ae:da:df:97:c3:7b:86:42:7d:8c:
         af:b4:6c:86:b1:ce:28:2a:6e:30:3e:bd:10:27:82:7a:3f:57:
         a3:48:3b:bf:57:46:d1:1a:ba:02:d4:47:57:f4:c6:49:11:6f:
         0e:98:c0:de:6f:f2:dc:dc:32:52:1f:b7:e3:56:9c:14:89:42:
         e5:74:ba:ad:a4:d4:7a:36:1c:ac:88:2f:07:0a:84:41:1f:02:
         b0:6c:bd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:11:48 2026 by rpki-client