Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/aeb7d49c-94e5-3a9f-ac87-c96f0ab15439.roa
File:                     aeb7d49c-94e5-3a9f-ac87-c96f0ab15439.roa (raw, json)
Hash identifier:          cJjbdNg8vnzmX+tEJLULjSCbnclJ1bvg/7PoLeoNs9o=
Subject key identifier:   53:33:B1:25:89:E2:FB:E1:44:D7:72:2A:B0:F4:3B:D5:84:69:94:16
Certificate issuer:       /CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
Certificate serial:       010D0C9F4328584E0A3D4BAB6CB934A4D2AABE80
Authority key identifier: 56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/aeb7d49c-94e5-3a9f-ac87-c96f0ab15439.roa
Signing time:             Tue 02 Jun 2026 16:50:06 +0000
ROA not before:           Tue 02 Jun 2026 16:50:06 +0000
ROA not after:            Mon 31 Aug 2026 16:50:06 +0000
asID:                     395035
IP address blocks:        141.224.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:3d:4b:ab:6c:b9:34:a4:d2:aa:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9970d52c-d3a1-4687-a712-212a44ee0fb2
        Validity
            Not Before: Jun  2 16:50:06 2026 GMT
            Not After : Aug 31 16:50:06 2026 GMT
        Subject: CN=9af504cb-bb3d-4009-b45e-af9c8d6a733b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:63:e3:38:31:10:f4:7f:8e:58:23:21:83:52:
                    76:86:b3:8b:7f:39:7f:94:67:f9:b2:ed:33:92:ab:
                    ec:df:8d:0e:25:30:14:5a:29:57:40:17:b0:d6:7d:
                    b5:fc:3b:8a:a5:7c:40:a7:57:ae:1f:8d:30:15:f2:
                    64:8b:99:95:b6:0b:fe:95:9e:86:50:dd:32:5c:ad:
                    fc:e1:5e:3f:74:68:2e:93:06:0f:76:4f:db:a7:5d:
                    f3:58:4a:0a:2d:eb:45:3b:b6:7d:ca:ad:2e:e6:75:
                    2f:c8:8a:61:2d:8e:59:a7:6c:13:ff:86:67:d5:72:
                    17:03:f9:55:80:d0:eb:1b:9f:1f:8e:6b:67:53:85:
                    ea:1d:b0:95:0a:75:66:94:b1:97:cd:a2:9a:d6:5a:
                    9b:0a:19:b0:a6:b6:67:72:80:c7:28:cc:68:ea:8b:
                    4b:f8:10:f4:c4:8d:1a:7d:6d:c8:46:85:58:63:16:
                    99:1c:34:b3:97:5b:e8:44:7a:a4:5c:6f:02:60:ba:
                    64:b6:24:82:aa:5f:a9:0d:ec:ae:c9:4d:2c:97:bc:
                    7c:35:90:83:f8:66:0a:4a:05:b8:38:ce:5f:b0:c4:
                    51:69:8d:35:29:b0:e1:6e:60:92:e7:dd:60:0e:1c:
                    6b:c5:95:f9:73:c5:bd:3f:ed:6b:5d:ce:a7:e1:59:
                    6a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:33:B1:25:89:E2:FB:E1:44:D7:72:2A:B0:F4:3B:D5:84:69:94:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/aeb7d49c-94e5-3a9f-ac87-c96f0ab15439.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2/9970d52c-d3a1-4687-a712-212a44ee0fb2.crl

            X509v3 Authority Key Identifier:
                keyid:56:D1:3C:08:C7:F6:2C:0B:42:A3:CB:3A:17:E8:6B:D9:D8:77:E1:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9970d52c-d3a1-4687-a712-212a44ee0fb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.224.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:77:85:3a:70:39:7c:80:e3:8b:c4:77:1c:3a:1c:36:07:
         10:fb:d7:80:61:23:a7:10:fd:3b:cb:53:34:5b:2b:e4:52:01:
         46:7f:03:0e:be:42:2e:8b:9d:c5:6c:d1:7f:48:24:18:21:10:
         8f:dd:13:59:31:4e:1c:59:ac:73:42:03:a7:58:ab:e9:a0:1a:
         8e:69:cd:3f:54:e3:ac:96:ba:5c:7c:2b:a9:e8:34:62:1c:b8:
         c0:4c:5f:c3:60:50:75:9a:09:63:05:f1:1d:7a:30:8d:8f:0a:
         98:58:a8:a4:d0:ba:ce:5a:c2:30:8e:b7:e6:2c:6c:ba:27:fa:
         cf:2d:a7:cf:80:94:9b:e2:31:ee:99:34:b4:52:99:d8:a6:20:
         46:ae:7a:8e:ac:97:81:08:cd:0a:ed:e4:ce:d3:50:c4:2e:ce:
         16:bc:ac:5b:90:07:f2:e9:a3:ef:5a:03:ca:02:83:d6:ea:c2:
         7e:f3:54:86:f6:58:98:62:0a:33:02:97:08:37:11:04:68:56:
         88:45:31:2b:80:7d:f6:f9:d0:98:f7:fe:00:5b:4f:a3:b8:64:
         b4:7f:10:39:45:4b:42:5c:a1:1a:2b:ff:3f:45:63:ea:a4:18:
         f0:d2:31:bd:29:00:90:b3:7d:30:0f:e8:52:fd:55:ae:85:52:
         9b:60:f6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:59:51 2026 by rpki-client