Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6887c286-3669-3ba0-b44a-a2b3d61df617.roa
File:                     6887c286-3669-3ba0-b44a-a2b3d61df617.roa (raw, json)
Hash identifier:          7IrMQp1cc/zzNFSmyIPuU1MS5IyB4SjWNxOatVi0vYM=
Subject key identifier:   48:DB:5E:23:AB:3B:57:24:14:AB:BF:9D:ED:6F:2A:6C:39:60:84:6C
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97556C41C19F40CF852781CE
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6887c286-3669-3ba0-b44a-a2b3d61df617.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     396608
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:6c:41:c1:9f:40:cf:85:27:81:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=66371dc7-8eab-4b10-8896-f7a27a3db6e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:53:51:d3:46:68:38:84:9d:7e:31:45:28:
                    81:29:1f:4a:be:9c:90:7f:4d:6f:2a:51:6b:d4:aa:
                    22:72:6a:c9:c0:8f:b5:9d:c6:fd:93:16:d6:3c:e6:
                    b1:68:e2:83:5a:a0:0e:d7:49:6a:e5:11:5e:a6:8a:
                    a2:01:10:55:99:4d:9f:c8:ab:f8:54:86:88:75:c8:
                    64:0e:5d:27:f4:32:ef:99:24:e3:1d:e3:e5:54:f9:
                    f6:af:e9:4e:4d:66:3a:af:ed:f8:a4:85:9d:da:5b:
                    70:71:4b:40:97:3d:d8:fe:bd:b0:76:26:e5:a6:05:
                    ef:bb:45:1f:47:4a:46:39:59:7b:cb:21:c0:40:a5:
                    4b:7d:87:8e:ae:f1:ff:93:fd:35:1b:30:c9:b3:88:
                    a9:97:61:ba:48:a7:15:29:ae:85:e7:cf:08:98:69:
                    b8:4f:f0:7e:68:82:53:14:fe:45:07:42:61:49:a9:
                    2e:c3:20:5f:94:ee:32:af:dd:c3:b0:db:62:b4:ba:
                    43:ee:dd:f5:5f:a5:54:94:a9:ef:37:06:53:25:10:
                    de:70:f7:5c:bb:a4:c4:4b:d1:88:d1:a7:74:a7:cc:
                    bc:a2:aa:ce:12:c1:db:fe:9c:c0:20:01:1d:a0:6d:
                    fe:a3:4c:4a:d4:cd:3e:a3:e3:7d:ce:f4:69:a9:a6:
                    19:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:DB:5E:23:AB:3B:57:24:14:AB:BF:9D:ED:6F:2A:6C:39:60:84:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6887c286-3669-3ba0-b44a-a2b3d61df617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:b3:2f:21:53:31:38:d7:13:8a:db:a3:41:44:00:75:7a:4a:
         4e:d5:a1:c8:68:cf:dc:5d:68:f6:eb:73:ba:1c:ce:39:18:0c:
         40:d2:be:14:2c:02:aa:c0:aa:c7:af:86:1b:82:c6:a7:e9:a9:
         d3:bf:2c:31:88:c9:d1:83:7b:55:9e:a3:8d:34:ad:6b:6b:79:
         29:eb:d5:ab:25:22:7a:0f:d2:fb:7a:d7:b2:4a:5c:31:dd:cc:
         c8:41:82:51:e4:04:8f:6e:0f:d8:72:06:fb:c3:01:2c:04:ab:
         2b:82:47:f7:36:59:0d:0a:10:40:db:fc:c5:ff:93:4d:05:a6:
         0f:0b:5e:dc:dd:b4:9b:27:2f:bf:97:fa:d3:32:e3:de:29:91:
         2b:d6:b1:00:6b:5b:32:44:e0:4d:ed:70:b2:cd:83:2e:62:13:
         eb:b9:1e:7d:b4:94:38:6f:38:fd:ee:98:54:13:5f:0c:9f:49:
         64:d4:c9:2d:5e:4a:bb:62:88:fa:93:0a:a1:3f:02:0f:24:61:
         33:c8:c6:0f:5f:02:6d:6d:41:61:7a:6d:ca:55:71:11:37:82:
         ad:fb:bb:8a:a0:5b:93:12:e4:76:c4:b0:27:e7:59:c5:8b:99:
         80:30:cb:63:92:94:9e:8b:83:5c:e6:c4:67:c1:ec:6e:35:77:
         ce:df:e7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:48:25 2026 by rpki-client