Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef53a986-0d6d-3d65-8d89-4a210704c1c9.roa
File:                     ef53a986-0d6d-3d65-8d89-4a210704c1c9.roa (raw, json)
Hash identifier:          GTW68v7UZcA24floapF9E3I1mc/GIS/e/H4ZRzlvd7g=
Subject key identifier:   15:C6:8C:45:54:2D:20:5F:D7:46:C5:77:8A:09:7D:C8:65:9C:6A:AE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584E2D9F3EDD1E2932980FFA1300
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef53a986-0d6d-3d65-8d89-4a210704c1c9.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     396565
IP address blocks:        192.82.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:3e:dd:1e:29:32:98:0f:fa:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=ab229b4a-7099-4b08-8d91-e7ccc4e21cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:7a:79:39:2a:eb:d1:3b:e0:1e:91:25:d5:
                    4b:e7:88:0c:ef:45:8b:5f:fb:db:dd:56:0e:5a:c4:
                    c9:a6:87:23:1e:c7:67:8b:72:80:96:e9:fe:21:2e:
                    36:a1:b8:9b:94:c0:1f:0a:c2:0e:12:ae:e0:dc:df:
                    1a:54:7b:c0:fb:f9:a7:28:7f:84:58:5a:48:2b:8a:
                    e7:48:e7:bb:a3:ea:b4:18:27:86:30:ee:e5:69:4b:
                    85:2f:8f:af:50:aa:c3:9e:3e:5e:d6:7c:7d:f2:27:
                    65:bf:e1:b2:58:8a:e9:fe:3a:0c:11:bf:50:9f:3a:
                    0b:45:62:cb:3e:c0:58:e7:81:5b:13:32:4b:f5:bb:
                    d8:2d:22:69:3b:da:57:d3:36:51:78:c6:07:8d:dd:
                    26:ce:2f:b6:5f:01:55:ec:5b:da:e6:49:ca:f8:d6:
                    e0:b5:6f:56:70:f9:26:4b:72:51:82:8b:23:64:2c:
                    88:da:f0:17:2b:7f:4f:f4:af:2c:fb:55:ae:a7:eb:
                    eb:ac:7e:37:8d:37:6e:88:f5:ed:2c:1b:72:9a:45:
                    9a:1e:6c:99:26:7b:d2:d4:cd:dc:88:66:76:bc:b0:
                    0a:72:30:f7:19:7e:f2:f6:33:9b:50:f6:8f:91:fa:
                    f6:c5:7c:63:8d:1b:f7:4f:53:d8:3d:d0:11:c2:27:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C6:8C:45:54:2D:20:5F:D7:46:C5:77:8A:09:7D:C8:65:9C:6A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ef53a986-0d6d-3d65-8d89-4a210704c1c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:30:75:d0:35:2b:dd:32:82:85:a7:69:6b:b3:5b:c4:0a:f0:
         b0:04:b8:66:3a:e6:79:c8:2c:f0:4a:64:65:4f:0b:0f:67:4f:
         d7:3b:49:02:99:45:e1:44:02:a6:8b:1d:93:7d:67:e6:d4:fd:
         d9:03:34:f4:1c:3a:ac:4d:99:64:54:7f:a0:f4:c1:f6:c3:c7:
         ca:65:76:d9:09:74:0a:f9:05:f0:24:14:3c:ab:3b:49:d1:7e:
         73:1e:37:9c:25:c6:81:2f:75:61:9c:13:74:f1:dd:e2:e0:40:
         71:96:d5:79:73:21:b6:a7:5e:dc:08:62:8b:29:37:cf:74:20:
         11:a5:af:b3:a1:5b:2d:66:b9:e8:37:e3:cb:c4:f5:49:f0:ac:
         73:b0:ac:cb:67:31:5c:e8:8a:66:61:fa:14:61:c6:6a:6e:58:
         b7:9d:c6:ba:6c:04:79:38:99:86:87:9e:7f:ec:be:c3:01:6c:
         ca:23:c1:5d:32:ab:6f:d4:77:ff:c9:92:3f:a8:6e:09:74:57:
         6f:14:7a:b2:18:47:3e:81:a6:fe:e7:07:2c:a9:80:25:28:72:
         a4:6a:6c:2e:57:7d:61:bc:16:97:13:74:03:9d:1c:ea:b0:eb:
         db:da:f5:e2:91:46:18:7e:8c:e1:53:90:6e:24:8e:aa:93:c8:
         e4:b0:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 23:04:50 2026 by rpki-client