Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/30bcf8e9-8435-3ac6-974d-9bf8c12d23a0.roa
File:                     30bcf8e9-8435-3ac6-974d-9bf8c12d23a0.roa (raw, json)
Hash identifier:          Y0nxvUUh2nhPl2vg8fdFAfG03kq8XSYiFjm9gfvTRcY=
Subject key identifier:   D6:CF:C9:6C:8B:8E:8C:CB:9A:E0:D7:FA:7F:7A:C5:74:E1:41:5D:E2
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584DAC4578F40AF185FB2859E3C0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/30bcf8e9-8435-3ac6-974d-9bf8c12d23a0.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     394285
IP address blocks:        174.137.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:78:f4:0a:f1:85:fb:28:59:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=cc612fb8-8ba4-438b-8785-a25c8db46918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cd:80:d9:f4:0b:7f:53:06:f6:d9:af:d5:8e:
                    2c:3b:df:8c:be:9b:ac:46:cf:e2:29:e6:16:4d:fb:
                    d9:f2:b6:db:d6:84:25:80:28:ee:0b:79:b1:52:78:
                    8f:67:56:95:b5:d0:b7:f0:53:24:38:f4:8d:a3:99:
                    c6:d4:2d:29:e2:55:12:b8:89:31:f6:35:ee:07:6b:
                    a8:bf:49:4b:ca:94:a8:d8:11:39:28:06:41:8a:69:
                    fc:3a:6e:0b:2e:2d:a8:55:01:7c:24:d8:11:f8:b6:
                    cc:ca:ab:22:3e:e3:5e:7e:04:36:1e:2d:36:45:95:
                    ae:65:0a:a8:92:25:bf:cb:4b:c0:40:84:5b:69:36:
                    55:0f:c0:44:2d:42:df:1c:4e:96:33:6c:49:95:15:
                    bc:fc:d7:36:fe:5f:0c:8f:be:73:c8:62:c0:12:12:
                    83:ce:34:c9:eb:d2:4e:16:9b:d9:29:48:57:7b:81:
                    b9:2b:a2:91:23:e7:d3:14:11:26:9f:31:8a:bd:9d:
                    70:b4:0c:fb:96:fa:5d:9f:6a:5e:99:a4:36:f5:56:
                    73:5e:ae:e1:fa:26:53:b6:e8:68:82:c9:6f:79:5b:
                    e7:3b:df:30:c1:a2:0d:d9:94:aa:59:fb:60:35:f4:
                    91:f9:4e:d4:d0:19:11:d0:da:82:e3:ad:cd:00:9f:
                    1a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CF:C9:6C:8B:8E:8C:CB:9A:E0:D7:FA:7F:7A:C5:74:E1:41:5D:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/30bcf8e9-8435-3ac6-974d-9bf8c12d23a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:2a:f7:5d:cf:2a:b7:f4:e0:84:33:cf:54:6b:48:ca:1b:d0:
         92:7f:26:7a:e8:07:eb:3c:cd:2d:cb:87:e1:05:c3:66:21:ca:
         f2:31:9e:9f:8c:1b:a4:96:98:be:e1:1d:06:59:41:5d:9c:e2:
         1b:06:9c:eb:f0:1f:1d:35:b0:64:96:d0:34:23:85:6a:7d:14:
         40:a9:98:c5:0f:8b:b6:e1:80:62:42:e5:4c:b2:72:7f:ba:4b:
         8f:22:19:43:ec:37:a1:14:2f:ed:ad:b9:80:87:da:53:4b:d1:
         88:ba:7d:ca:9f:36:b2:69:fa:0d:45:23:31:43:f1:c8:b2:a9:
         08:46:9b:7a:6a:b7:6a:e2:d8:0e:c7:59:85:90:ac:72:49:5d:
         95:ee:09:79:48:7b:12:ee:b4:2b:af:9f:d3:3a:36:a8:b4:a4:
         77:9c:f0:33:45:5c:20:de:30:88:68:6f:71:ac:6d:3f:d2:cd:
         04:a2:c5:bb:f6:ae:35:7a:fb:75:08:2b:e4:35:08:e1:46:b5:
         0f:d9:90:db:bf:f6:0b:87:77:df:3a:43:33:f9:c8:39:92:bb:
         97:d9:d8:ef:10:4e:1a:97:ac:db:7a:8c:2a:91:c6:c5:1b:08:
         5c:b0:47:47:59:c0:7f:e4:77:bb:cc:3b:0a:63:85:67:cf:e9:
         2e:bc:59:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 17:04:33 2026 by rpki-client