Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa
File:                     7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa (raw, json)
Hash identifier:          FomcCTpfkhphO1vv2fncvM34lvl0Ha8K5k2gpR9uBF4=
Subject key identifier:   34:FA:DD:00:F0:15:BB:2C:84:F9:FE:2A:5C:73:98:F0:A3:2E:F1:AC
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584DBD05A0295A9012E77C6B7640
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     393249
IP address blocks:        128.189.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:a0:29:5a:90:12:e7:7c:6b:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=292f0adb-2b64-4176-abad-b77c2276dd51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1b:22:d2:1c:7a:8f:67:38:94:7e:cf:fb:db:
                    e3:3f:2c:dd:96:74:11:c4:67:bd:d6:f7:ef:3b:c6:
                    31:bf:00:28:1a:fe:b7:e9:3b:5e:4e:95:8b:0d:2d:
                    34:ce:96:1f:9a:87:1e:3c:55:31:11:fb:9b:62:e4:
                    45:91:b4:27:ba:50:f1:87:c1:29:82:5b:34:79:b7:
                    16:6f:2d:f2:62:bd:48:df:a0:ba:89:c9:32:bd:8e:
                    ed:97:36:06:d7:b8:42:8c:77:be:48:cc:81:71:05:
                    1d:a4:1a:d3:7f:3b:4c:11:a9:8b:e5:5e:c4:37:db:
                    a5:27:62:f4:50:80:56:83:5c:fe:17:23:f5:e2:6e:
                    f1:92:61:a0:cc:0b:38:61:e3:16:60:ea:59:b6:5c:
                    0e:27:6e:41:04:97:cd:b7:ca:f5:a4:0d:72:a1:e6:
                    0d:39:e9:54:d4:33:dd:19:ba:e4:e5:b5:62:38:d9:
                    e0:3c:80:40:df:08:6b:16:b6:92:6a:41:19:8d:1e:
                    07:cd:c9:47:71:1e:66:72:39:ef:b5:a2:ae:7f:60:
                    a1:c8:42:43:94:54:18:a2:ae:9f:ad:64:a1:c1:48:
                    0f:31:9e:2b:30:b6:d4:98:e6:fa:0f:93:96:ef:72:
                    82:9b:65:ef:e6:44:f0:eb:e1:3c:f5:48:89:67:e2:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:FA:DD:00:F0:15:BB:2C:84:F9:FE:2A:5C:73:98:F0:A3:2E:F1:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/7ed13295-9fa0-3a0d-8af0-6919933f3c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.189.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:b3:ed:8e:ea:cf:87:d7:51:01:d4:f7:58:ae:6c:7a:b0:37:
         23:42:84:f5:9c:85:c1:54:cf:e7:31:0d:79:f8:49:be:56:dc:
         c7:3e:45:20:03:9b:a9:b1:6c:6d:7f:d4:37:ce:73:3b:f8:53:
         de:07:ce:46:7b:b8:0d:5d:d2:30:81:0d:96:be:11:e3:0c:f6:
         11:a6:a6:cd:99:ce:7a:d4:cc:5d:bf:e6:72:21:d4:f4:41:bd:
         67:65:40:88:9f:13:ae:a3:69:27:89:01:06:ef:26:29:c7:1d:
         1c:49:4d:e9:79:c6:ae:ed:80:f5:91:8c:db:0c:2a:93:46:4c:
         32:eb:9a:d1:d1:10:d8:34:85:f8:ac:27:96:1c:89:c6:e4:1e:
         69:52:d2:6b:52:1e:9f:70:38:61:11:b9:f2:7c:33:d1:bb:08:
         29:9a:d6:4e:7e:58:da:f2:25:6f:21:14:af:17:ac:3b:60:94:
         dc:31:21:5b:19:a8:50:59:01:de:c3:53:63:71:25:d2:e6:e5:
         0d:c6:f9:7e:45:72:46:4f:15:ad:48:10:7b:ea:55:1d:97:d2:
         08:df:68:bf:3c:84:ac:7f:f7:d9:75:54:51:53:00:b7:15:ba:
         14:34:83:47:3b:03:30:d6:36:bc:95:11:ee:9c:0f:e5:3d:a2:
         0c:4e:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:31:56 2026 by rpki-client