Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/eaa31326-e796-34db-a9ec-0438e65daf94.roa
File:                     eaa31326-e796-34db-a9ec-0438e65daf94.roa (raw, json)
Hash identifier:          eJhC3lX5DN60GBdNYTDMTpH97mrCiDZPC1PWWoTwzOU=
Subject key identifier:   A0:8C:83:5F:3B:40:DB:DF:B7:22:49:9A:79:52:02:B6:F6:45:DB:75
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584DAF101F8C815DCF3ADEAAAE00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/eaa31326-e796-34db-a9ec-0438e65daf94.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     30215
IP address blocks:        139.138.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:1f:8c:81:5d:cf:3a:de:aa:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=14f0cd21-4cee-429f-a3e5-2ce40f0f834c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:b8:ae:89:e0:2f:76:87:1d:54:af:e1:16:
                    54:ca:2f:e5:60:97:11:23:48:bf:89:1c:60:ae:6e:
                    b5:64:7b:4e:94:a8:ba:ba:70:3a:1a:74:33:23:86:
                    ac:95:b5:91:d0:53:57:3d:40:dd:a8:07:3f:f0:f2:
                    73:ea:21:d2:a3:97:6a:da:c2:6c:a8:14:fd:81:d1:
                    c0:24:fd:92:03:39:2c:f9:05:b6:09:ff:a3:b6:f8:
                    29:a0:1a:55:df:00:aa:ea:de:fe:ee:68:a2:5e:e6:
                    63:ba:dc:59:4c:94:52:a5:83:c1:cc:29:f2:9f:bb:
                    90:73:c1:4c:f1:c1:a6:dd:fb:a9:f5:ea:ea:e6:ae:
                    ed:85:91:78:18:59:8e:ac:f6:67:0e:d9:79:fd:98:
                    9e:e9:ed:bf:3e:21:8b:0a:49:d7:77:73:66:0f:35:
                    56:0b:b8:20:fc:63:e0:13:56:19:0c:dc:69:e3:57:
                    f9:6b:fe:c8:6d:46:89:2c:34:d4:6a:db:55:cf:73:
                    3b:cf:e4:8f:34:63:c0:9c:4c:3f:93:68:92:61:7e:
                    5e:0a:3b:76:75:7d:47:e6:1c:b9:1f:ba:66:1b:37:
                    58:bc:35:e2:b0:02:74:96:59:fd:8c:d5:26:a8:07:
                    dc:46:bc:03:8b:b3:03:57:67:36:d7:4c:4e:68:43:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8C:83:5F:3B:40:DB:DF:B7:22:49:9A:79:52:02:B6:F6:45:DB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/eaa31326-e796-34db-a9ec-0438e65daf94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a6:0f:81:f1:ad:13:2c:4f:cc:33:87:86:7d:63:5c:b2:ba:
         50:c6:d9:25:2b:41:20:20:7a:c2:26:50:2f:b3:e1:d5:66:4a:
         b0:6e:60:35:4b:78:a6:56:96:8f:55:4f:22:fc:d0:2a:cf:db:
         58:da:90:54:34:e6:a4:b3:7a:82:d3:88:81:d8:c5:b9:51:5d:
         b9:09:35:88:5e:75:8d:67:5d:54:5d:a5:a7:1c:13:47:95:b8:
         82:53:f6:0e:2a:23:a6:af:8e:d5:f0:ae:82:2e:bd:14:e1:4d:
         c7:a1:63:33:48:39:9b:0d:ed:eb:92:5c:d4:45:44:3d:1c:93:
         a4:5e:84:aa:ec:a0:c6:bd:c0:3b:b7:b9:02:2a:e0:3c:d9:04:
         18:5d:89:81:9f:c3:c1:62:72:1d:5c:a9:ac:4b:9d:60:b7:7c:
         e3:61:97:36:61:a6:ca:51:38:98:b7:c4:6b:51:89:70:a2:29:
         27:fb:0e:ad:88:cb:7d:72:3c:08:85:6c:86:90:df:d7:1b:35:
         98:6f:fa:99:86:00:ab:51:bc:91:43:19:aa:a3:85:32:93:8f:
         35:7e:e9:b4:72:d9:db:d6:2b:74:10:dc:e7:1f:9b:24:86:48:
         07:ca:c2:56:f7:bf:2d:36:e5:cc:bf:9c:e2:cc:86:6e:92:e9:
         9f:af:80:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:14 2026 by rpki-client