Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bbdbda2-f255-338d-8c05-121f5f386bb4.roa
File:                     3bbdbda2-f255-338d-8c05-121f5f386bb4.roa (raw, json)
Hash identifier:          52jQWsSmvaI3dLJitZA8jzK3o262YWvcyOSSr2Ko1s4=
Subject key identifier:   74:14:3A:4C:9B:74:9E:17:3C:E4:84:6D:96:15:2A:1E:DB:C0:75:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E2D9F06DFF13342D54B90A840
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bbdbda2-f255-338d-8c05-121f5f386bb4.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     397211
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:06:df:f1:33:42:d5:4b:90:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=0623fac3-ea2b-4309-8869-f4edf2b25ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:d1:e2:2f:6b:eb:0a:3a:61:65:68:ed:2c:
                    28:52:d5:7f:80:76:27:e8:70:2c:d4:0a:25:92:64:
                    2a:38:07:24:32:2c:fa:2d:b6:79:08:0b:e9:c6:1d:
                    36:41:82:14:2c:27:a0:56:7d:58:49:e3:28:b5:ea:
                    7b:c3:2f:95:3c:d6:82:da:25:31:1f:fc:85:14:cf:
                    d6:c0:20:10:31:a3:db:9b:19:43:72:0f:15:af:98:
                    6b:58:0e:05:30:5e:63:4b:d9:c7:a3:c0:c1:aa:ae:
                    b6:fc:23:42:d7:29:7c:82:bb:db:c3:93:c9:58:26:
                    42:6e:ed:8b:83:16:74:04:36:65:46:ee:c0:e6:6d:
                    c5:fd:da:28:42:eb:69:d5:5e:f0:6d:78:b8:0d:d1:
                    fc:fa:2d:61:8f:0a:04:00:f3:99:70:c4:9f:af:a7:
                    bf:3c:a5:11:0b:9e:7f:46:01:35:2b:3a:97:73:43:
                    1b:b5:34:49:09:0e:ef:59:67:5b:cc:1f:5d:45:19:
                    8e:37:94:45:e9:0a:57:a6:c8:db:0d:8b:a0:17:3a:
                    bd:68:cb:20:f2:95:df:de:c4:be:8c:c7:82:9f:ab:
                    e6:4a:be:a9:62:0c:6c:de:52:a7:de:38:1d:8b:63:
                    52:a8:ce:48:10:aa:ea:ea:60:c8:b7:29:73:b3:95:
                    49:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:14:3A:4C:9B:74:9E:17:3C:E4:84:6D:96:15:2A:1E:DB:C0:75:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3bbdbda2-f255-338d-8c05-121f5f386bb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:17:9f:57:82:c2:66:d9:22:1e:26:aa:cc:4a:5e:85:ef:91:
         b5:af:4c:09:07:36:cd:0c:44:87:3b:63:bd:d7:1c:28:76:f5:
         fd:fa:ac:74:d8:c4:ec:17:b6:3f:56:17:bd:75:aa:7d:d2:32:
         58:02:f3:9a:6a:e7:fe:ec:76:89:02:42:30:78:aa:6c:45:4f:
         b3:51:e9:0d:9c:ac:aa:52:0c:41:fa:f8:e2:ea:be:d7:51:f0:
         cb:05:41:f6:ef:0d:b8:bf:62:7d:74:81:55:b7:7d:12:46:f6:
         bb:c8:67:7b:8d:33:f7:ae:25:f3:e6:b1:df:94:7c:b8:87:a6:
         c2:ef:d5:00:19:77:c7:2e:aa:2c:86:31:5b:05:5f:ef:5e:d0:
         16:68:5b:f2:46:0c:6c:3a:f2:56:d6:07:f2:0c:67:9f:cd:6b:
         d1:ac:cc:62:e7:c6:2b:d1:09:4c:f8:66:b5:25:12:d7:4b:37:
         4a:62:fc:20:c2:92:e2:ef:e9:9e:93:c0:8e:47:31:a8:76:47:
         f0:94:0c:72:87:ec:35:e1:0a:92:ac:bd:13:0f:17:26:ef:ea:
         be:7b:22:86:da:ef:ad:a5:88:43:dd:2d:5b:87:68:fb:51:2d:
         04:9a:c0:ec:5b:61:33:32:d6:37:97:0d:2c:9c:29:1b:f7:d9:
         29:e2:c2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 19:39:58 2026 by rpki-client