Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/551a9112-b904-31c3-9e1b-27e3e1da8d8a.roa
File:                     551a9112-b904-31c3-9e1b-27e3e1da8d8a.roa (raw, json)
Hash identifier:          efvIa4mhnAjzyu1YoNadBABjBrhJs1TRqgHgkt0vocM=
Subject key identifier:   A2:A9:46:22:BC:B9:C3:F9:FA:5D:EE:3D:2E:E9:56:1E:90:A4:4E:00
Certificate issuer:       /CN=84304b6a-cd4a-40f2-b142-5f44e824b547
Certificate serial:       010D0C9F4328584E043604B364BC8BBC8D4D3960
Authority key identifier: 3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/551a9112-b904-31c3-9e1b-27e3e1da8d8a.roa
Signing time:             Sun 31 May 2026 13:00:10 +0000
ROA not before:           Sun 31 May 2026 13:00:10 +0000
ROA not after:            Sat 29 Aug 2026 13:00:10 +0000
asID:                     31898
IP address blocks:        192.243.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:04:36:04:b3:64:bc:8b:bc:8d:4d:39:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84304b6a-cd4a-40f2-b142-5f44e824b547
        Validity
            Not Before: May 31 13:00:10 2026 GMT
            Not After : Aug 29 13:00:10 2026 GMT
        Subject: CN=ea2c2971-21a9-4f55-a9cf-c5bcdb186bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:7f:bc:ef:78:0a:3c:ca:80:06:4b:f2:30:
                    7d:51:41:92:d3:60:21:6e:89:63:06:3d:88:e2:d4:
                    1a:da:bc:31:77:3a:31:d1:a8:0b:f3:47:2a:b8:0e:
                    08:f5:52:7f:3c:09:e5:23:90:7e:16:ce:92:57:09:
                    9d:46:87:cf:b6:62:be:83:86:c6:83:80:55:eb:5a:
                    dd:24:78:b9:e3:4d:25:6c:c5:1e:27:12:e0:88:25:
                    bd:58:e0:cb:19:a4:a3:2c:be:2e:4f:b3:f8:ad:e1:
                    47:a3:59:7d:2e:b9:79:a2:53:53:36:55:c8:0d:f9:
                    cc:55:66:bd:95:4d:59:84:0a:b6:c1:30:9f:e4:d4:
                    d3:60:22:6d:22:6f:d4:9d:36:4d:e8:24:d4:1f:2d:
                    d0:11:50:3f:c7:f4:d9:22:06:84:50:c9:eb:e6:a8:
                    b5:50:a2:ce:60:3a:61:f4:9d:7b:64:c2:b2:2e:e8:
                    00:df:28:e0:e1:d1:cc:09:04:16:54:89:6c:b5:cb:
                    6b:b5:97:ef:a1:a1:0b:ef:4d:bb:52:b4:fd:ab:e9:
                    80:58:a4:bb:9e:3a:e2:fa:67:eb:6e:d4:d2:1a:39:
                    c2:ea:57:ee:d4:75:76:c3:84:f4:d8:c4:02:0b:87:
                    2b:41:db:fc:44:fc:f3:9c:2b:4d:e6:7a:6d:34:09:
                    e0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A9:46:22:BC:B9:C3:F9:FA:5D:EE:3D:2E:E9:56:1E:90:A4:4E:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/551a9112-b904-31c3-9e1b-27e3e1da8d8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547/84304b6a-cd4a-40f2-b142-5f44e824b547.crl

            X509v3 Authority Key Identifier:
                keyid:3D:FD:65:91:53:86:67:35:20:D0:5B:2A:BC:53:C5:17:A8:94:8D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/84304b6a-cd4a-40f2-b142-5f44e824b547.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.243.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:38:ac:a1:7a:5c:e4:8e:3c:9a:78:eb:bf:68:ce:f6:f5:e6:
         18:89:93:03:1b:76:0b:1e:61:69:ad:57:e0:60:a8:34:c1:f0:
         a3:b4:74:d0:c7:ce:d4:92:58:09:00:11:1f:50:67:81:55:2f:
         1a:98:90:9e:74:0a:54:61:71:21:1b:7a:09:b7:c9:1b:6e:f3:
         95:b5:e1:7b:ee:97:fd:c2:ea:09:4b:36:b1:b3:8a:8d:28:56:
         7c:f1:f7:ef:1e:6b:70:93:86:8c:87:78:83:65:43:14:c2:59:
         4f:ae:d5:95:47:a0:d5:43:52:b3:3b:56:32:07:78:51:d3:6e:
         eb:22:4d:2c:ec:3f:ef:04:d1:b8:51:a9:02:d6:9a:30:61:4a:
         5d:e5:48:7f:12:78:db:03:5c:8c:26:8b:08:17:4a:0f:d6:55:
         e7:b8:bb:92:d6:04:c4:5e:6d:04:b8:77:24:3b:2e:44:56:21:
         2f:cd:c4:5e:19:31:97:73:af:f2:ec:1f:a4:4b:6e:a2:c5:3d:
         d5:89:29:84:61:94:59:84:ec:0b:06:fc:0b:c2:50:bf:56:29:
         7c:8f:66:bf:72:69:29:b7:01:ff:a3:ee:a0:35:96:5d:ed:00:
         d9:5a:4c:e8:47:1a:30:7c:b7:78:2a:10:05:e2:7c:82:72:a1:
         07:ca:82:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:25:21 2026 by rpki-client