Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa
File:                     5e0a4b4d-6867-3931-a668-268f7f2e4994.roa (raw, json)
Hash identifier:          HwaFoqi+V+uaVG+UZBfnFZUSEdzB3T4BBrhHaGW8BHQ=
Subject key identifier:   6E:E0:1C:B3:F2:74:54:13:BF:69:15:4F:48:5F:80:68:E0:EB:8E:98
Certificate issuer:       /CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72
Certificate serial:       010D0C9F4328584DCDC5A620B867973EF485C809
Authority key identifier: 67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     16509
IP address blocks:        88.218.35.0/24 maxlen: 24
                          188.241.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a6:20:b8:67:97:3e:f4:85:c8:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e3a416f-6f36-44c6-84ef-8d5314b10a72
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=92eb0b0e-d5ce-48f9-b1f5-7e4cf1b63492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:9f:0a:72:5c:6d:38:42:7f:e1:08:61:54:
                    26:f2:9b:f1:dc:65:94:c4:29:43:9a:d3:f8:db:af:
                    bb:b7:89:db:b0:76:5b:45:50:d3:d6:5d:95:de:6d:
                    20:74:3f:75:dc:86:8a:f8:70:de:8e:55:93:1e:ea:
                    ff:ab:6c:9f:15:c0:ff:25:1a:7d:ee:d8:8c:10:9e:
                    04:25:2d:c3:7a:8c:76:e8:fb:1c:f0:58:d4:62:6e:
                    53:70:be:e1:10:17:6b:8d:c0:b6:a0:56:f5:11:f1:
                    83:a4:a5:fc:53:7a:f0:17:cd:43:91:a7:3c:27:37:
                    99:9a:6d:5c:74:f0:b9:47:ad:b1:29:1c:48:9c:c0:
                    d2:12:e8:d3:66:4c:88:af:83:dd:55:f1:fd:92:a6:
                    90:57:03:8a:23:31:ae:d7:cb:13:85:d5:77:01:89:
                    c8:46:5a:6f:4c:11:3e:3e:ea:cc:2d:47:91:54:72:
                    77:14:b6:1d:86:67:9a:1f:00:09:64:2d:26:05:bf:
                    77:0a:e4:13:4b:84:24:f8:4e:4a:6d:97:a2:1c:5a:
                    d7:18:c8:6c:cd:c5:61:79:82:fb:ab:35:a2:bf:c5:
                    3c:f5:b3:7a:94:0d:98:ed:8e:ae:d3:85:00:ff:fe:
                    96:b5:1f:c1:f2:fe:df:18:0a:b6:97:72:16:43:d0:
                    5b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E0:1C:B3:F2:74:54:13:BF:69:15:4F:48:5F:80:68:E0:EB:8E:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/5e0a4b4d-6867-3931-a668-268f7f2e4994.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72/3e3a416f-6f36-44c6-84ef-8d5314b10a72.crl

            X509v3 Authority Key Identifier:
                keyid:67:9C:E9:A4:08:82:AB:06:FC:39:13:9B:2B:68:DC:25:87:40:F2:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3e3a416f-6f36-44c6-84ef-8d5314b10a72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.35.0/24
                  188.241.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:c1:a5:9f:73:4e:f9:7d:94:ca:d9:c7:e4:10:f4:38:35:bb:
         7e:b2:10:0d:ba:ff:f9:f3:c0:59:13:c8:ca:7a:3f:c0:1e:0b:
         37:11:5d:0d:21:f9:81:89:12:c7:08:c5:e1:7e:cd:a7:cf:76:
         ef:f3:55:4e:c0:36:8c:03:01:4f:fd:5f:8c:93:80:db:23:e8:
         a3:64:51:83:ea:99:41:b3:59:6a:4a:97:3c:38:f9:b4:0b:a8:
         b1:33:53:66:19:93:16:bf:a7:d4:6c:d9:48:c2:e8:82:23:31:
         a4:ba:e2:68:6a:76:d2:a6:32:c1:24:d6:7a:41:08:46:d6:65:
         04:e8:27:11:2f:43:56:4d:5a:52:8b:d8:74:b9:50:ca:12:cb:
         27:26:03:16:59:8c:d8:8d:f6:52:a0:10:8b:dc:f6:cf:fc:7b:
         c4:49:74:70:03:40:4a:c0:7b:6c:53:e4:6c:ce:21:0a:9a:ca:
         de:d3:4a:11:96:ee:82:6b:d3:3e:2b:9f:4e:a2:50:a3:aa:3b:
         94:0f:1f:b0:00:c4:91:3a:d7:3c:1b:54:86:58:3a:f4:c1:80:
         dc:c9:fa:b1:30:92:db:8c:8d:a5:d4:2e:b9:82:9f:ea:3b:5e:
         46:71:e4:26:43:2d:4a:0b:27:1a:6b:27:32:20:d5:d0:0f:9c:
         b6:05:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:50 2026 by rpki-client