Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa
File:                     6cfc4b7f-42d4-362c-98f2-32caa153320a.roa (raw, json)
Hash identifier:          cPbypafKOa+z2mRDRYmOWc99Hub9RwXtk0qxkJnht3U=
Subject key identifier:   3C:F6:AF:6A:90:41:79:84:92:DB:B2:2C:0E:B7:D4:3D:49:AF:2A:AE
Certificate issuer:       /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial:       010D0C9F4328584EC371BD058817E1484013C6B0
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     21538
IP address blocks:        192.131.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:71:bd:05:88:17:e1:48:40:13:c6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=ea72c701-d6c0-4433-ba49-a2332431101c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:72:4b:6b:a8:3e:ec:f6:3a:80:39:4e:61:13:
                    2c:a0:c0:e5:35:5c:fc:2e:5d:6c:cd:25:09:17:a2:
                    b5:29:1e:2d:48:b8:26:44:ce:34:6d:cc:57:fd:0a:
                    79:59:02:57:fd:8d:60:fb:41:ee:ab:e7:99:fd:cc:
                    2c:da:f1:3c:a3:bb:a3:44:80:5b:9e:51:91:0e:55:
                    69:94:2f:9e:5d:b2:17:1c:cd:13:3d:6f:5b:55:2c:
                    f5:77:1d:ad:3a:d1:de:90:64:16:f2:58:fd:18:2d:
                    7b:41:32:53:b6:62:91:6a:46:05:46:d3:12:a6:1d:
                    a9:fa:a3:31:6b:0c:98:47:ba:23:eb:ed:02:35:88:
                    81:fe:ce:df:ce:ff:b9:11:c8:bd:a2:0d:1c:82:e0:
                    3d:12:d8:e9:1c:f9:c5:f6:7e:91:e2:ff:8f:40:40:
                    bc:c5:0e:4a:3d:c7:82:27:29:51:d7:37:38:3a:f1:
                    9c:52:33:e3:1d:cb:f9:f2:5b:45:ca:ac:97:85:2b:
                    0b:c9:82:95:2b:69:10:79:4f:5f:7e:f8:78:ed:56:
                    c1:4c:6e:e7:58:2b:03:02:42:65:d2:d1:52:0d:8c:
                    2c:8d:8d:0a:ff:b8:17:fc:e8:b1:ab:8b:9e:d4:01:
                    f4:30:bc:4f:f5:d6:c3:28:84:ef:a9:ef:af:ce:23:
                    71:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F6:AF:6A:90:41:79:84:92:DB:B2:2C:0E:B7:D4:3D:49:AF:2A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/6cfc4b7f-42d4-362c-98f2-32caa153320a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl

            X509v3 Authority Key Identifier:
                keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:33:23:d8:7a:80:66:73:69:61:49:90:05:b6:36:0f:86:06:
         c0:83:d7:72:8e:95:9e:46:b6:cc:90:2d:69:03:fa:52:9d:62:
         d6:39:22:22:df:45:ad:48:26:4c:1b:7b:ef:ec:84:5a:cb:60:
         c5:c0:b5:f2:f7:c1:3e:24:46:f4:e2:3e:4e:4b:99:17:63:81:
         60:90:a0:b5:99:9c:24:a0:08:c1:33:0c:3b:41:98:0c:7e:f1:
         b5:4d:35:02:20:0a:a6:75:05:74:16:c2:cd:52:7b:42:84:5c:
         62:d0:2c:f2:11:d3:0f:16:82:f2:60:2e:9c:ed:05:7a:04:4b:
         8d:64:d9:25:c3:63:e7:c0:23:a8:14:50:f6:e7:cf:72:ea:e6:
         e4:3f:4d:09:a2:a8:19:74:02:10:e2:89:ef:e9:15:fc:a3:e8:
         70:3d:22:e9:3b:03:36:76:17:25:5e:6d:67:5f:5c:ab:8c:66:
         0f:b2:1f:85:51:df:c5:f9:4d:74:75:c1:06:cf:f6:0f:c5:ef:
         a8:33:80:34:ed:9f:07:1d:a5:2d:41:15:c0:2e:bd:a7:d1:b8:
         7a:4c:1b:d6:4a:19:2e:0b:86:6e:72:3b:98:a8:75:d4:b8:bc:
         05:21:78:d3:55:7b:0d:f6:3e:39:c6:49:f6:87:ce:31:89:de:
         a2:ab:3f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:17:28 2026 by rpki-client