Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa
File:                     c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa (raw, json)
Hash identifier:          Bxd6wQ0i0ZlpZMk108y5rTEGp/NixGRu9PtIk4XF8Hs=
Subject key identifier:   13:1C:EB:D2:6E:7B:B7:18:7D:B4:AF:DF:2A:1D:FC:33:87:B3:C8:17
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F4328584DDA55C6516CC2CFFFD2AEDEF8
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     54913
IP address blocks:        78.138.17.0/24 maxlen: 24
                          103.54.59.0/24 maxlen: 24
                          104.129.128.0/24 maxlen: 24
                          104.129.129.0/24 maxlen: 24
                          104.225.142.0/24 maxlen: 24
                          104.225.143.0/24 maxlen: 24
                          213.255.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:c6:51:6c:c2:cf:ff:d2:ae:de:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=b8006fad-d536-4828-93ea-5a5cbc26fdae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b9:9e:72:4e:d1:df:35:f1:0d:0e:c6:ca:1c:
                    aa:66:b5:c9:7b:5a:ea:b9:e8:86:ff:91:c1:35:3f:
                    c7:97:49:33:80:b7:f6:19:aa:06:1e:9a:db:d5:cb:
                    33:96:d3:8f:e7:e8:85:2a:51:77:fd:78:60:01:11:
                    8e:be:41:f3:d4:f9:9c:6c:73:9c:37:f3:cc:cd:85:
                    e3:26:5e:8e:e4:5a:06:96:6a:1b:97:ab:1f:0c:7f:
                    13:35:cc:5d:12:0a:6e:34:ab:f5:d3:e7:81:29:ce:
                    fd:a3:a4:4e:db:66:6d:47:15:b3:32:3b:dd:51:16:
                    d4:32:c8:53:11:40:6a:71:43:4c:88:b4:0b:56:f5:
                    89:c7:74:c4:51:dc:de:e5:80:87:8f:7f:99:e3:e3:
                    55:ec:b7:98:6f:12:ac:70:2e:b4:9d:78:8b:4f:e2:
                    45:0c:ac:b1:76:4b:7f:31:2e:17:4b:c3:cb:b5:71:
                    da:d7:b3:d1:73:66:b3:44:be:2f:71:17:54:48:04:
                    37:7a:7c:a6:27:41:e6:4b:73:59:31:b7:e9:ff:20:
                    e5:9b:3d:9c:5f:b7:cb:5e:23:01:44:62:19:16:0a:
                    dc:4f:54:64:3f:08:4b:30:66:7a:22:14:5b:10:85:
                    1a:77:e8:f3:69:91:d8:93:c6:c7:99:93:fa:5a:8c:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1C:EB:D2:6E:7B:B7:18:7D:B4:AF:DF:2A:1D:FC:33:87:B3:C8:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/c2bf34f6-c7b4-370f-a50b-79802b09ef3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.138.17.0/24
                  103.54.59.0/24
                  104.129.128.0/23
                  104.225.142.0/23
                  213.255.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:6e:75:14:e1:a7:88:1c:50:1b:95:fe:99:29:28:29:97:80:
         cb:38:f3:07:5b:bb:b3:d9:21:3d:7a:4d:b3:5a:fb:27:f4:24:
         b0:4e:fb:f6:04:5f:88:7c:06:14:c8:d4:5d:16:fa:af:bd:a9:
         3b:a3:fa:46:18:6f:1c:3d:b2:3b:7e:97:dd:e6:33:3f:f5:f0:
         fc:8d:43:07:55:69:ea:f1:d6:86:8c:06:84:d1:1e:ff:e1:95:
         22:17:67:54:f8:a0:ee:06:c6:59:f2:aa:c2:b3:63:11:4a:ae:
         62:3a:75:a4:58:86:0a:6a:1c:1b:08:b7:72:37:5b:9d:e2:55:
         20:8e:04:f5:cd:27:79:da:e8:45:4d:61:8e:a6:c3:a2:49:d1:
         13:3a:16:35:47:6e:0d:09:63:4c:17:3f:24:19:2e:12:03:ca:
         e3:ba:e2:59:64:e7:01:36:01:d7:d9:62:3a:13:ba:17:60:ae:
         18:f6:5c:e7:93:13:eb:71:6e:50:60:7c:83:56:6f:4f:81:f8:
         08:2a:bc:61:ce:46:f5:76:f6:af:8b:56:4d:e6:27:66:ea:78:
         19:9e:5b:96:7d:2c:11:9b:66:69:af:be:bf:bc:72:4c:d5:62:
         12:bc:10:2e:7d:b4:42:a0:8f:0f:f4:90:ea:f1:d1:e8:3f:4a:
         b8:2c:23:aa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:56:59 2026 by rpki-client