Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/19d91b24-5f58-3895-8d0b-aa994c2eaabf.roa
File:                     19d91b24-5f58-3895-8d0b-aa994c2eaabf.roa (raw, json)
Hash identifier:          zQKdwla0gxP8SXXMvJ4TAM71kuqwkKWd0qTrZIgI4oI=
Subject key identifier:   69:C5:61:62:BC:5E:B7:BA:75:C5:D3:E4:B4:60:E9:B3:F6:01:6C:85
Certificate issuer:       /CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22
Certificate serial:       010D0C9F4328584DA85E8A2A75C0B3AC318AB080
Authority key identifier: 2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/19d91b24-5f58-3895-8d0b-aa994c2eaabf.roa
Signing time:             Tue 28 Apr 2026 15:27:52 +0000
ROA not before:           Tue 28 Apr 2026 15:27:52 +0000
ROA not after:            Mon 27 Jul 2026 15:26:05 +0000
asID:                     393669
IP address blocks:        192.234.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:5e:8a:2a:75:c0:b3:ac:31:8a:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22
        Validity
            Not Before: Apr 28 15:27:52 2026 GMT
            Not After : Jul 27 15:26:05 2026 GMT
        Subject: CN=cca76e41-58f2-421c-a86c-2712f46fa135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:67:30:96:eb:5a:a2:b6:0c:ff:29:dc:e0:f1:
                    29:64:21:83:6a:a6:7b:82:9b:e0:e7:42:f3:2b:d4:
                    59:b7:3e:1c:82:c4:fc:fb:49:c6:cd:e3:7b:f5:49:
                    aa:a8:0c:20:6e:ee:a3:6a:df:18:45:b1:ca:6b:7e:
                    80:1e:5d:31:9e:df:a5:ea:93:ab:56:be:a0:15:4d:
                    47:09:23:f1:96:f0:b7:9c:96:6c:b1:59:57:6a:19:
                    2c:f7:77:b7:75:8e:b7:97:2b:5b:e3:88:b2:ab:82:
                    8a:da:48:e2:e4:af:66:f9:d3:0e:08:6e:a1:a6:62:
                    cc:1c:e9:01:03:98:5e:b4:f9:ba:a8:e7:e8:39:d5:
                    b9:11:a4:ff:15:a5:de:05:2b:90:b1:8e:44:f5:b7:
                    a2:fc:ec:b3:fa:3d:ac:62:1e:6b:28:5f:6f:43:f6:
                    20:73:e1:d8:d6:5b:12:7e:65:85:8b:0f:4d:93:28:
                    26:b6:fe:ce:e9:7e:80:bb:9f:40:3f:67:37:ab:dd:
                    75:78:2f:c7:0a:c9:85:be:da:08:95:9f:78:7e:1d:
                    6d:2e:4a:7a:80:32:fd:61:4a:f3:3f:70:e0:ac:e2:
                    11:5e:8f:ad:f6:bc:15:7a:40:93:c3:4c:ac:7e:bf:
                    cc:63:04:19:68:0e:a5:04:cd:86:28:ef:12:33:b3:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C5:61:62:BC:5E:B7:BA:75:C5:D3:E4:B4:60:E9:B3:F6:01:6C:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/19d91b24-5f58-3895-8d0b-aa994c2eaabf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl

            X509v3 Authority Key Identifier:
                keyid:2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:3a:07:4e:0b:4d:ab:be:39:d5:e2:ee:1e:d2:6f:bc:0a:73:
         a0:71:83:ea:3e:8d:bd:90:a3:2c:a0:00:d0:d4:44:3a:d3:69:
         ba:84:1b:31:1f:eb:52:ac:e7:b2:2d:5e:e3:72:9c:c3:81:fe:
         4f:40:50:20:a2:8a:fe:a5:39:69:28:09:1e:c2:5e:9b:61:9f:
         5a:e8:83:1c:f9:2b:a1:71:e4:a5:a0:c9:a0:e3:d1:dd:6c:d4:
         ee:00:d5:c1:6d:ac:f6:c7:ba:c3:bb:98:f6:25:b6:5c:3f:64:
         14:2e:4a:44:49:e2:08:53:e2:10:ed:c2:d9:51:5e:bf:d2:38:
         51:11:5a:11:72:21:76:fa:44:75:98:59:9c:e0:70:5b:2c:f1:
         dd:47:d2:8a:95:97:a3:66:72:60:d0:de:a7:b8:be:b9:99:9c:
         5d:f9:e8:50:7c:40:f1:fc:aa:87:c4:d1:bc:9a:9c:d5:ca:27:
         f3:0c:9d:fd:97:c8:fd:7d:61:4e:4a:35:e3:1f:5d:c4:9c:49:
         e1:77:b2:54:e5:ca:7b:04:ac:97:82:12:89:7c:f5:c1:33:37:
         94:a6:30:39:92:a2:f2:b3:a3:40:85:f8:10:34:b5:84:af:dc:
         d8:98:88:be:8a:fc:fd:40:fa:ee:1d:a4:7f:f6:ba:86:84:a8:
         4f:65:8a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:36:06 2026 by rpki-client