Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/6b278ad3-7131-35ae-94a0-a0aa9d87f15b.roa
File:                     6b278ad3-7131-35ae-94a0-a0aa9d87f15b.roa (raw, json)
Hash identifier:          CltCBFTE9ZXBfcziomzK1xtXeRNci8g8zq/g0YfHYhY=
Subject key identifier:   AC:DA:5D:BF:3E:E4:D0:DA:11:A0:CC:8A:5D:4B:EA:38:8A:77:D6:4F
Certificate issuer:       /CN=1c018303-b5eb-46a0-9637-c56d85f005da
Certificate serial:       010D0C9F4328584E112387C45A8F2043A01A5E60
Authority key identifier: 28:C8:4D:60:13:82:73:F2:F7:24:15:59:39:80:1E:9C:88:25:D5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/6b278ad3-7131-35ae-94a0-a0aa9d87f15b.roa
Signing time:             Fri 05 Jun 2026 04:08:51 +0000
ROA not before:           Fri 05 Jun 2026 04:08:51 +0000
ROA not after:            Thu 03 Sep 2026 04:08:51 +0000
asID:                     36489
IP address blocks:        131.149.240.0/22 maxlen: 24
                          192.196.0.0/24 maxlen: 24
                          207.38.72.0/21 maxlen: 24
                          208.90.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/1c018303-b5eb-46a0-9637-c56d85f005da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/1c018303-b5eb-46a0-9637-c56d85f005da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:23:87:c4:5a:8f:20:43:a0:1a:5e:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c018303-b5eb-46a0-9637-c56d85f005da
        Validity
            Not Before: Jun  5 04:08:51 2026 GMT
            Not After : Sep  3 04:08:51 2026 GMT
        Subject: CN=50856eb8-8095-408b-847d-b3ac290705b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:b3:60:f4:34:d9:11:2a:ed:7a:2f:7c:3f:
                    4e:2b:c9:64:34:55:8c:44:27:a0:9b:ad:21:3a:1e:
                    19:76:0b:9d:89:8d:03:f1:98:4b:be:c2:fe:3d:3a:
                    41:f2:23:65:dc:4e:bc:74:7c:d4:fe:86:82:95:ad:
                    f7:d3:c1:6d:dd:e9:8d:7f:59:76:74:37:6e:80:69:
                    22:d8:0e:34:14:7f:f6:f2:ef:d4:ac:2a:bc:0f:17:
                    ed:38:19:25:d9:42:25:06:41:20:c1:a6:7c:44:22:
                    58:22:37:9e:9a:bc:b7:47:e0:a0:6a:3b:29:4a:99:
                    d4:6d:24:a5:65:96:96:7d:41:00:77:e2:8e:b4:08:
                    e9:07:9d:f9:7f:86:5c:44:2a:92:01:31:71:06:5b:
                    bd:b0:39:d3:9d:b0:eb:9d:af:7c:04:dc:18:4f:c3:
                    5d:ad:e9:8c:c9:98:35:05:b1:8a:19:c0:e8:10:fd:
                    ae:70:d7:d4:b5:7a:82:94:1a:8a:be:59:27:4d:18:
                    d8:42:2d:96:b7:34:59:9c:2a:2f:13:e1:18:00:50:
                    16:a9:6e:85:9c:98:37:81:d2:c2:f5:11:97:df:a0:
                    0a:71:bf:29:83:9a:01:d0:f2:ca:1e:de:9b:b0:2a:
                    ae:60:d9:e1:57:4f:41:0d:9f:5f:a5:4b:c7:d6:83:
                    36:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DA:5D:BF:3E:E4:D0:DA:11:A0:CC:8A:5D:4B:EA:38:8A:77:D6:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/6b278ad3-7131-35ae-94a0-a0aa9d87f15b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da/1c018303-b5eb-46a0-9637-c56d85f005da.crl

            X509v3 Authority Key Identifier:
                keyid:28:C8:4D:60:13:82:73:F2:F7:24:15:59:39:80:1E:9C:88:25:D5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c018303-b5eb-46a0-9637-c56d85f005da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.149.240.0/22
                  192.196.0.0/24
                  207.38.72.0/21
                  208.90.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:f4:02:f9:e9:71:6d:ad:85:30:85:66:52:cf:cd:f7:b3:dd:
         79:52:02:4f:c6:dd:85:ce:21:05:3a:02:c9:66:db:49:6b:82:
         60:50:ab:3e:4f:c1:d1:db:30:b0:0d:2f:3d:33:56:a7:c6:be:
         38:b6:60:8e:ac:e2:08:8a:4e:41:88:7a:f0:43:c7:3b:c6:1b:
         8e:a2:34:21:de:7e:a7:69:66:8e:29:47:89:8c:4a:e5:94:67:
         60:eb:8c:0e:2d:39:d7:d2:bb:92:9d:91:54:26:7f:e4:53:0b:
         29:ec:e8:45:04:b7:8c:c5:15:83:94:e6:2d:4e:46:4c:0c:a4:
         19:62:48:22:27:97:c9:98:48:16:78:3f:99:1a:e2:24:55:f8:
         e1:d5:82:5e:25:31:c7:65:ef:7b:4f:7f:a6:52:2a:ad:7c:f1:
         02:c3:ca:19:3d:56:60:68:68:8c:18:4c:6a:fd:5c:f3:c1:e2:
         f9:35:5a:c5:bd:e2:2b:bb:a6:ee:de:75:37:70:4d:ce:21:de:
         e5:e3:dc:63:22:47:7a:53:bb:ec:f0:96:f4:17:db:ef:4f:47:
         5c:0f:c4:6f:1f:b1:25:c7:2f:43:92:35:bd:ba:73:8f:a9:0a:
         f2:34:cf:3a:17:e5:24:8c:30:64:21:1e:c1:3a:ea:fd:6e:c5:
         17:0d:be:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:05:59 2026 by rpki-client