Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd219ffc-3fab-32f2-ae9c-ec589295cbc9.roa
File:                     dd219ffc-3fab-32f2-ae9c-ec589295cbc9.roa (raw, json)
Hash identifier:          2t5EHvOx0Nbsl/jN7bfIen2q8NFVagWQ8ARB0RUcdWQ=
Subject key identifier:   09:03:81:BB:58:AE:A5:29:75:B5:5E:56:E9:60:CE:EB:44:E9:8A:DC
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584D97555A171C0AC73688239480
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd219ffc-3fab-32f2-ae9c-ec589295cbc9.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     396590
IP address blocks:        192.34.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:5a:17:1c:0a:c7:36:88:23:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=638de502-6244-4662-b90d-70be922d5ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:cf:64:95:f6:d6:29:bc:b0:4c:67:56:b3:93:
                    78:49:d1:32:90:03:f4:52:9a:31:9e:55:f6:77:89:
                    b6:41:f9:27:9b:d5:44:1d:31:7f:07:15:54:2a:b5:
                    92:be:f4:a7:5b:a9:42:c9:f8:30:cb:34:ea:7d:0e:
                    6a:7e:3e:a1:4b:07:17:95:34:e3:fb:33:4c:3f:5a:
                    5e:d9:8c:a7:a8:77:ba:ac:16:53:30:ba:31:26:08:
                    9f:41:e7:30:dd:65:2d:64:56:55:97:3e:13:87:3a:
                    30:ad:de:73:18:da:92:22:2e:bc:ea:ef:28:66:a0:
                    e2:92:96:2f:66:6d:9d:11:34:ce:dc:24:30:4c:67:
                    40:09:0d:fe:7c:90:2a:dc:90:22:2f:b4:11:9e:23:
                    4c:21:1f:82:a6:23:ba:41:bb:b3:11:c4:59:34:ae:
                    1e:88:e0:c3:55:de:3c:69:a8:7c:0d:40:13:52:cd:
                    4d:cc:b6:cc:97:ec:b4:5e:f6:d1:04:74:e2:ab:61:
                    0c:04:f5:57:b8:07:39:73:64:54:fb:34:bb:fd:b7:
                    9a:da:46:fd:5a:ac:ff:b2:50:da:cc:bd:6d:5b:93:
                    db:3b:d9:22:05:c2:57:f5:e7:6f:11:69:7a:55:4b:
                    1a:c9:68:d7:72:d8:f3:5e:c6:e0:05:a2:9e:bb:d0:
                    08:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:03:81:BB:58:AE:A5:29:75:B5:5E:56:E9:60:CE:EB:44:E9:8A:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd219ffc-3fab-32f2-ae9c-ec589295cbc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.34.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:d9:8f:8a:13:e4:68:2f:9d:96:c6:ad:21:63:44:6a:73:
         e5:3b:f8:2c:54:34:3d:7f:bf:ba:ba:4e:76:69:85:2b:b6:82:
         9e:8c:e0:21:0b:c7:e2:66:7c:f7:01:30:14:a9:3a:c6:a2:50:
         ef:52:4a:2e:50:83:fb:4f:b4:e0:67:f3:f7:2c:8d:24:f7:c3:
         2a:14:08:0b:75:1a:e1:88:91:be:83:f6:3c:d4:8b:4a:e4:42:
         ba:9a:e3:4a:c3:dc:5c:b5:38:ee:88:1c:1e:68:34:82:50:d9:
         1a:b8:1e:a4:86:96:f6:97:37:07:d0:e2:c1:46:07:ff:fc:72:
         40:19:66:39:01:02:5f:99:9e:b9:e4:74:23:94:0c:87:bd:0e:
         2f:03:4e:41:a4:bc:81:06:c7:19:f4:4e:86:6a:e1:bf:d6:cc:
         9c:fc:45:92:03:4e:d8:8d:96:44:d2:74:80:58:53:e1:4d:05:
         c3:3c:39:41:8b:28:12:7c:b3:68:df:50:30:1d:c1:d8:38:9b:
         0c:da:8f:2c:b4:6b:ba:ca:1b:81:27:98:7d:ce:c5:61:ce:92:
         6b:f3:cc:48:49:93:9c:d7:a9:c2:0e:9d:03:c9:c6:9e:fa:35:
         d8:c8:1c:cc:f3:6d:80:6c:37:f6:b6:19:fc:66:a0:82:c8:a3:
         ea:89:ac:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:28 2026 by rpki-client