Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/c1efe701-2c01-363b-86bd-799c8315eab8.roa
File:                     c1efe701-2c01-363b-86bd-799c8315eab8.roa (raw, json)
Hash identifier:          RqLSs946algZ9czsRhMVRUvRcqrxYWIa+FiO2hLmOyo=
Subject key identifier:   92:EF:C4:96:8D:45:7A:4A:A9:15:66:2F:6D:2F:FD:F5:F6:C8:9B:B3
Certificate issuer:       /CN=b60fd368-cb50-418b-8840-57c8491066b3
Certificate serial:       010D0C9F4328584DBCA47B66B1CC7ACB18E28088
Authority key identifier: 8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/c1efe701-2c01-363b-86bd-799c8315eab8.roa
Signing time:             Tue 05 May 2026 21:44:57 +0000
ROA not before:           Tue 05 May 2026 21:44:57 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     398754
IP address blocks:        130.250.64.0/19 maxlen: 24
                          134.231.16.0/20 maxlen: 24
                          140.106.128.0/19 maxlen: 24
                          152.36.128.0/18 maxlen: 24
                          2605:eec0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:a4:7b:66:b1:cc:7a:cb:18:e2:80:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60fd368-cb50-418b-8840-57c8491066b3
        Validity
            Not Before: May  5 21:44:57 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=c086a1d2-1342-4c34-8c48-377a5ea8453c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:64:be:7e:b9:fd:4d:eb:8f:55:76:45:63:1c:
                    99:50:39:e1:8d:83:46:59:63:51:c4:ca:19:a2:12:
                    83:2f:1d:2e:cb:41:c9:09:82:92:3a:50:0f:88:43:
                    f6:2d:3e:bc:c7:43:65:8c:5d:ee:99:b2:8e:d1:8f:
                    04:ce:d2:e1:c2:db:ad:54:38:13:e1:75:20:6f:1b:
                    55:26:2c:cf:b7:10:e7:e6:0d:9a:32:3f:df:83:fd:
                    35:e6:d0:c7:16:99:4e:d3:22:e4:07:da:2b:c4:e0:
                    d4:81:b1:1c:d4:89:a4:4f:bd:27:b6:0f:f9:e5:fe:
                    b3:33:1f:b9:a3:ab:2d:53:6a:39:be:56:0b:4f:23:
                    d4:8a:6f:af:60:6e:f5:52:85:bc:c8:d4:3b:13:77:
                    7f:b6:06:22:b0:c5:61:fa:e8:ad:8a:83:ca:03:c7:
                    f0:06:76:2e:52:e2:bb:6b:0a:b4:79:cb:e8:4a:27:
                    5d:1f:c7:ee:c0:47:0e:8f:1f:29:54:f3:35:82:ea:
                    30:27:3c:90:ba:d6:e7:58:df:9e:31:b0:11:b8:7d:
                    94:20:7e:46:ec:31:42:ec:d1:68:7a:96:74:2c:93:
                    65:74:dc:5e:83:18:c3:36:2a:96:5f:5a:c5:49:ba:
                    dc:fd:31:e7:cb:81:43:02:a8:78:44:62:a0:1d:a8:
                    f7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EF:C4:96:8D:45:7A:4A:A9:15:66:2F:6D:2F:FD:F5:F6:C8:9B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/c1efe701-2c01-363b-86bd-799c8315eab8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl

            X509v3 Authority Key Identifier:
                keyid:8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.64.0/19
                  134.231.16.0/20
                  140.106.128.0/19
                  152.36.128.0/18
                IPv6:
                  2605:eec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:83:a4:8d:96:15:af:8c:07:39:a3:10:2f:9f:e4:ae:d9:58:
         49:e4:6c:e1:07:da:f9:e8:20:52:ec:f5:b3:7b:cb:b6:57:f9:
         75:25:9c:3c:88:d5:55:c9:1e:d4:de:40:8b:5e:7a:73:e4:ae:
         56:f8:cb:ee:f5:cc:78:95:7e:d9:f3:9b:ce:3b:d2:97:3b:05:
         40:eb:aa:b8:22:bd:95:84:e0:fb:86:0a:24:0f:32:63:3b:d7:
         ef:35:d5:4e:87:32:ef:25:4e:cb:86:68:55:1f:2e:ff:37:7e:
         90:8b:65:e1:fc:00:50:a0:e1:08:9d:92:41:f5:37:78:06:3a:
         ac:c1:fe:b6:66:b7:5e:1f:c3:31:b7:7e:7d:74:16:93:13:ec:
         c0:7c:59:af:20:55:1e:5f:00:1e:28:0c:78:b3:7a:70:69:ba:
         95:92:9d:7a:38:ea:95:a7:52:9c:c9:d6:8e:03:ad:6e:a9:7f:
         61:fa:16:d0:4a:76:0d:df:2a:9f:90:e3:a2:54:42:9a:40:ce:
         f3:33:07:10:64:be:37:7c:d9:9a:59:8b:74:08:64:7b:dc:ac:
         87:de:09:93:48:4f:e0:5b:ce:07:27:85:a6:60:0f:13:0f:82:
         ca:77:06:7e:3a:97:9f:32:fe:52:fa:0c:96:8d:ac:ee:b0:6c:
         3e:9c:1c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:53:28 2026 by rpki-client