Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3c495b4e-a3a1-3d63-9ff5-97ed967e21e1.roa
File:                     3c495b4e-a3a1-3d63-9ff5-97ed967e21e1.roa (raw, json)
Hash identifier:          pFHs0uo8HsdR8fhoswasZ+xL+ei+DV3Qr2dx2lGugbU=
Subject key identifier:   BD:D9:7F:29:98:4A:A0:F7:EA:7A:AE:66:39:C5:04:42:2C:0F:39:29
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584E5A4A0667BBEC8255F27C8300
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3c495b4e-a3a1-3d63-9ff5-97ed967e21e1.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     376
IP address blocks:        132.219.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:06:67:bb:ec:82:55:f2:7c:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=88f30c15-5188-4f74-b23e-7d6b318a2ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:13:28:32:e4:cb:27:5c:89:4e:2a:a8:53:f2:
                    d0:1e:a5:89:43:65:25:a5:57:51:3e:94:21:26:9f:
                    7d:96:88:8a:41:e4:42:36:b1:14:5e:d1:22:10:09:
                    3e:02:5c:ed:f0:d8:fb:70:3f:02:aa:3f:4d:eb:3c:
                    e7:d2:95:bb:94:21:4d:1d:0d:56:98:cc:53:a7:8f:
                    b6:cf:d4:b8:3c:80:de:b5:16:fd:1c:9f:0f:a3:9f:
                    00:2c:a1:e2:32:55:5e:0c:cf:d8:9a:e5:7d:12:c8:
                    7b:d4:d8:e9:30:6e:08:4f:2e:e2:6d:d0:06:70:a3:
                    69:8c:6d:b5:91:7b:89:99:f7:f6:ca:00:20:48:c6:
                    5e:f1:37:94:3d:87:cc:a1:7f:86:dc:39:23:5c:3d:
                    cd:92:a6:d6:54:0d:7d:eb:97:34:19:87:f8:c5:78:
                    d4:2d:4f:f7:02:7b:26:80:0c:de:e8:20:34:eb:a8:
                    00:66:f8:ab:3d:3c:5d:99:f3:3b:5a:7d:97:ae:5f:
                    37:ae:ff:a5:2c:59:9c:35:54:2d:d4:eb:a2:cc:06:
                    d2:95:6f:27:85:7b:33:08:cc:95:7b:df:66:0a:06:
                    af:bd:1c:0c:0f:24:e7:f2:9f:c6:25:63:8b:78:eb:
                    54:89:ca:21:60:bd:ed:ee:81:78:10:09:2d:6b:36:
                    2f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D9:7F:29:98:4A:A0:F7:EA:7A:AE:66:39:C5:04:42:2C:0F:39:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3c495b4e-a3a1-3d63-9ff5-97ed967e21e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:38:18:36:66:b9:6b:7a:ad:84:1b:01:9b:e3:81:9e:e8:df:
         a7:e5:ed:16:61:a7:92:32:06:12:81:a7:e7:c8:89:e2:e4:bb:
         f6:97:62:24:61:78:1b:01:25:da:7b:27:b1:71:68:d6:df:dc:
         c9:d8:45:38:15:31:d5:39:18:cc:40:06:08:d8:1d:33:71:08:
         55:9d:5f:a7:c5:db:df:30:41:e2:b9:c5:c3:83:72:2e:c9:b2:
         47:7e:75:28:29:d5:d9:bf:e7:7b:36:3c:ce:0a:cc:73:ae:d5:
         ed:48:a3:de:91:ad:a3:ff:cf:98:fb:38:dc:37:de:2f:33:1f:
         be:f7:cc:91:e0:76:57:f0:64:f4:bd:50:72:ae:ff:02:9b:a2:
         52:fd:2d:19:8e:c2:c1:b2:52:af:66:ac:3b:e7:d3:06:fb:2f:
         b7:ff:ea:ca:d7:be:25:7e:c4:cb:a4:d8:2c:bf:08:85:f6:63:
         19:e1:cb:6c:f1:b4:47:66:6e:d8:c1:98:18:d0:83:d0:da:3f:
         6b:0c:6e:59:e8:ad:89:41:31:56:20:87:34:d3:5b:bc:ad:dd:
         bd:d8:01:26:40:95:80:99:64:2d:91:f4:e1:1e:59:dc:e0:14:
         46:dd:7d:cd:bb:31:b9:80:08:a7:d5:27:7c:d5:94:7a:2e:1e:
         92:df:ec:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:47:25 2026 by rpki-client