Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/512f46e3-6a20-337a-9b25-a234b569aa41.roa
File:                     512f46e3-6a20-337a-9b25-a234b569aa41.roa (raw, json)
Hash identifier:          ef/SJkwB/bpAy8xzWv5N9MtnXuZMUWgTXkhUQC3lCwA=
Subject key identifier:   E1:34:79:F0:95:BD:E3:84:9F:D6:0A:8A:33:28:F3:85:D7:18:05:F0
Certificate issuer:       /CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
Certificate serial:       010D0C9F4328584D60E4FC1BB2FA4F9CF6612500
Authority key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/512f46e3-6a20-337a-9b25-a234b569aa41.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     19905
IP address blocks:        192.234.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:fc:1b:b2:fa:4f:9c:f6:61:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=2515a10c-8537-479b-ad4f-5d36d9954767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:c2:fb:c4:22:7c:99:51:15:14:9d:a3:f5:
                    98:8a:ba:62:0d:af:55:18:15:1a:ef:62:8a:f2:cb:
                    cf:d2:42:d4:2e:f9:e8:ae:5b:ea:12:b2:11:6e:ca:
                    de:db:57:89:d9:17:e4:9b:43:c2:cf:d8:0e:02:bd:
                    ee:df:9e:07:94:44:3c:64:a4:14:48:fc:cb:7e:5f:
                    a4:b2:f7:f8:12:ba:f6:9c:20:1f:8a:8d:22:ee:9b:
                    c0:c8:f9:2e:0d:99:44:a1:0d:11:6d:ec:89:11:bd:
                    68:05:f8:12:18:89:0e:43:f1:25:a7:cc:07:86:23:
                    6b:af:cd:46:3e:f7:e0:f4:99:26:32:f8:17:84:95:
                    a8:9e:aa:0c:51:48:b6:b4:e4:3c:65:44:8b:d6:96:
                    b7:d2:41:ad:76:be:85:5c:a3:fe:19:bb:f5:61:5c:
                    59:eb:42:62:b2:82:24:eb:25:45:15:6e:42:56:e1:
                    18:19:5e:61:7d:8d:fb:05:dc:07:30:79:00:1e:6d:
                    ac:d6:db:88:bc:9a:be:ad:9f:fd:09:1f:32:64:d3:
                    23:fd:bc:7d:6f:8b:8c:61:9a:0e:b9:7e:0b:d2:05:
                    44:45:76:bc:af:2a:80:89:59:5e:34:39:bf:b3:19:
                    56:2f:ed:57:71:f5:01:7b:82:e4:0e:b7:06:56:d0:
                    97:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:34:79:F0:95:BD:E3:84:9F:D6:0A:8A:33:28:F3:85:D7:18:05:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/512f46e3-6a20-337a-9b25-a234b569aa41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.crl

            X509v3 Authority Key Identifier:
                keyid:EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:fe:8c:59:7e:ec:fe:14:be:9f:ee:2f:89:70:f9:98:2c:df:
         a8:ce:06:46:1d:45:52:3c:48:11:c6:42:5b:98:24:73:69:0e:
         4f:53:7e:32:8a:3e:32:7f:39:b7:98:ab:cd:e4:7c:30:d2:01:
         b4:db:56:6f:cc:a0:7b:74:66:0c:a9:83:df:85:69:7d:31:47:
         c9:ae:15:b7:6f:18:ac:77:f7:2f:c7:80:38:b0:43:ad:f6:ae:
         9c:34:36:a1:34:d7:5e:84:9b:4c:47:7b:01:6b:47:dd:fc:fd:
         49:cc:2c:8c:15:cc:0f:51:1a:0c:43:2a:aa:c0:d6:16:82:4a:
         a5:15:ba:f0:74:f9:35:0a:75:a1:52:c1:5a:67:90:d0:d0:9a:
         c0:f5:18:b2:86:76:92:09:d6:45:ef:ce:60:d6:f4:9e:02:b2:
         33:44:83:50:65:4a:f0:69:60:f5:66:63:49:49:df:d7:f7:2a:
         3d:86:05:b1:12:cf:b2:e3:46:15:de:3a:77:f6:7f:93:28:d1:
         8b:c0:6f:37:73:67:6a:fd:58:10:79:83:9a:3d:77:2c:5c:f7:
         b3:62:3d:2e:15:17:fb:81:b8:5c:17:a2:2b:ae:bc:6c:49:61:
         ab:c9:d2:41:8f:24:a6:eb:1b:f9:dd:db:11:64:f4:d6:00:0c:
         21:3b:74:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:30:56 2026 by rpki-client