Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/121ebac5-47bb-3263-9ad1-25219b9bbcb4.roa
File:                     121ebac5-47bb-3263-9ad1-25219b9bbcb4.roa (raw, json)
Hash identifier:          8uuPprn/okkFEG/8/H4nByfwcCS13XxrPKcPbTtciEc=
Subject key identifier:   9D:F3:92:D7:15:AE:A6:7B:D1:12:FE:CC:52:EE:6C:CB:08:21:9A:E3
Certificate issuer:       /CN=cb84dafa-5c30-4458-8de9-79ae91217514
Certificate serial:       010D0C9F4328584E12EFB6895A12834F67C2C330
Authority key identifier: 4E:40:4E:4E:7B:43:0E:09:9A:CA:36:5F:7E:7D:B2:33:2F:F2:F0:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/121ebac5-47bb-3263-9ad1-25219b9bbcb4.roa
Signing time:             Fri 05 Jun 2026 19:36:03 +0000
ROA not before:           Fri 05 Jun 2026 19:36:03 +0000
ROA not after:            Thu 03 Sep 2026 19:36:03 +0000
asID:                     20473
IP address blocks:        130.12.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:12:ef:b6:89:5a:12:83:4f:67:c2:c3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb84dafa-5c30-4458-8de9-79ae91217514
        Validity
            Not Before: Jun  5 19:36:03 2026 GMT
            Not After : Sep  3 19:36:03 2026 GMT
        Subject: CN=af6eda6c-0ee9-45a4-8942-f1171efa0d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:d2:82:69:8b:8e:85:52:22:84:4a:bd:4f:
                    e0:02:fa:e4:36:06:14:01:02:ed:6e:7f:cf:4a:18:
                    bc:68:fe:ad:3b:38:c1:83:73:68:38:26:15:51:91:
                    5c:13:40:60:92:5f:99:4e:15:43:ef:0b:48:61:58:
                    5f:02:47:02:0d:73:fa:46:ab:87:ba:97:f2:cb:6b:
                    f8:4c:99:7a:96:5d:b5:ca:a7:8a:86:f8:ab:45:de:
                    9c:ad:c4:e5:fa:b5:2b:ac:5e:8a:3f:c9:e4:57:83:
                    d2:8a:52:79:5c:ad:47:06:f6:31:de:42:99:f5:0d:
                    f8:b7:1e:fb:77:34:95:b4:ab:68:89:c0:ce:d2:c3:
                    11:4c:3f:cb:15:98:51:29:9f:9a:a3:9f:79:77:2c:
                    15:f9:22:f3:c8:24:ce:80:e2:7b:07:9f:60:b3:f5:
                    3c:7a:c4:68:00:9e:aa:f9:fa:4c:42:69:4b:20:40:
                    9c:ff:79:eb:f6:43:2a:08:41:5d:50:1f:33:b6:ca:
                    e2:ff:f8:32:7b:8f:41:54:88:8c:61:07:b1:e3:8a:
                    e6:7f:3c:f1:2d:37:fc:b6:e5:30:5f:1e:d3:7e:57:
                    63:4b:aa:c0:ca:8c:33:55:be:e5:36:da:50:e1:b1:
                    b3:10:89:44:e2:b2:3c:13:d0:94:4e:15:ab:f9:a7:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:F3:92:D7:15:AE:A6:7B:D1:12:FE:CC:52:EE:6C:CB:08:21:9A:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/121ebac5-47bb-3263-9ad1-25219b9bbcb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514/cb84dafa-5c30-4458-8de9-79ae91217514.crl

            X509v3 Authority Key Identifier:
                keyid:4E:40:4E:4E:7B:43:0E:09:9A:CA:36:5F:7E:7D:B2:33:2F:F2:F0:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/cb84dafa-5c30-4458-8de9-79ae91217514.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d2:d3:ad:95:fe:5c:10:3e:2e:ca:f7:37:a1:c1:b1:85:07:
         ae:37:1b:0d:77:2f:15:bc:22:5d:77:7d:31:ff:4e:fe:01:db:
         74:c5:01:89:5b:64:a5:4d:9f:51:9b:27:01:04:42:b1:46:cd:
         47:04:4e:ed:19:81:11:fb:96:8b:2d:03:f1:b8:e4:2f:1e:3f:
         df:27:96:b1:42:a4:ac:a8:6e:d1:e6:a8:42:55:d8:33:de:8e:
         2d:51:59:88:b4:ce:78:73:9e:59:37:51:0e:13:c3:b8:fb:ab:
         42:9e:e7:24:22:c2:29:8e:1f:34:14:f0:d0:81:6c:c8:80:af:
         92:3e:41:2b:a4:6e:32:9e:ba:c7:56:4e:77:60:ff:04:1f:6f:
         b9:c5:0d:52:82:34:99:aa:ba:bf:1e:a9:35:4c:26:87:96:22:
         e1:6a:8f:52:ec:f3:d3:2b:e3:6f:2f:6a:cd:cc:4a:4a:87:49:
         92:ca:19:0d:5a:3f:c3:70:46:01:89:aa:e6:69:1b:f7:a8:48:
         40:4b:47:bb:e0:88:5e:8e:28:e0:1f:4c:36:b5:e5:6e:02:ee:
         a7:a6:4b:e8:3b:10:85:38:6b:9f:4c:2b:30:5d:be:83:c2:77:
         00:c1:c9:59:21:8e:0c:cd:b2:01:f8:84:11:96:3f:e0:1e:3a:
         9f:29:ae:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:39 2026 by rpki-client