Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa
File:                     546853d9-414a-3e2e-85ae-b99c281ac2b0.roa (raw, json)
Hash identifier:          OlJ3+S2dE4fHT4UClIyk6udfO1P4mIYsf6opfRbEfoE=
Subject key identifier:   11:05:4F:AF:56:5B:09:C6:B9:BD:68:47:8F:62:25:2E:E4:C8:2D:8F
Certificate issuer:       /CN=db9c5868-bb9c-4fd1-9aca-05762a850994
Certificate serial:       010D0C9F4328584DE84B436957D94F1B69F72A00
Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     11872
IP address blocks:        128.230.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:43:69:57:d9:4f:1b:69:f7:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=1e786e60-0498-4095-9b89-8678e88e0aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:ef:b6:a2:41:14:eb:b2:de:b1:86:26:99:
                    cd:6b:a7:20:d6:96:64:3e:31:96:31:af:62:e3:66:
                    06:24:72:80:5a:07:f7:43:ef:35:90:2f:48:b6:6f:
                    5f:4b:b6:90:99:bf:a5:8e:fa:43:37:37:5e:a5:e0:
                    94:a3:4d:cb:ab:d1:32:85:0e:88:9e:23:0c:de:8c:
                    0a:a2:7d:8f:5b:b1:07:f5:e8:ef:ef:37:f7:b5:70:
                    c3:63:53:f7:ac:d0:8a:e8:0d:e8:39:22:a4:c3:ad:
                    8a:17:2c:d9:75:74:9d:33:12:35:2b:57:17:f7:7d:
                    d3:95:3c:48:f1:ea:65:be:01:60:65:17:18:dc:dc:
                    a4:1e:da:26:52:78:3d:89:83:28:02:27:34:70:38:
                    6d:de:da:4c:d7:f3:2e:78:c1:dc:34:64:0a:65:68:
                    06:02:1e:b2:50:c9:5c:23:5e:5c:71:4a:17:e3:2e:
                    95:49:5e:2a:cf:c1:85:41:d9:56:87:0d:1e:09:f4:
                    78:d3:db:32:0d:7f:2b:5a:61:c6:94:6a:c3:d3:a5:
                    4b:cc:3e:05:5d:d2:17:d4:34:26:b3:95:6d:26:8b:
                    39:1c:bc:95:08:b0:ec:3d:45:3c:d8:01:9d:bc:58:
                    16:43:d0:5a:28:4c:2a:44:7f:51:54:f1:5c:e5:14:
                    d2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:05:4F:AF:56:5B:09:C6:B9:BD:68:47:8F:62:25:2E:E4:C8:2D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl

            X509v3 Authority Key Identifier:
                keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:9f:e7:74:54:17:01:fb:2a:58:3d:1e:17:5f:66:73:54:c2:
         d7:f6:9c:73:77:22:c1:b5:df:9f:65:6c:48:96:43:7c:a6:9d:
         3c:0e:c9:48:ce:e3:90:e2:eb:31:d4:56:5d:48:58:51:d9:29:
         3a:1e:a5:8a:9b:ec:c2:90:6c:14:55:e7:e6:29:71:85:d0:df:
         9e:e8:41:b7:38:8f:3a:d0:11:1a:fd:28:0b:fa:49:3b:3f:6b:
         5b:b5:5a:a6:1a:dd:4b:b4:b6:ec:53:ed:28:b9:c8:fd:d3:d0:
         3c:10:c0:57:16:e3:2a:5b:17:89:f5:1a:05:7c:41:b5:bc:75:
         b8:e8:81:ba:a9:31:00:c0:81:de:1f:42:55:df:6f:97:c2:a1:
         9c:71:ec:8b:c5:b7:fc:ff:2c:f5:6c:69:f3:d8:52:ca:9d:07:
         70:fc:b7:23:42:f3:ce:b7:94:fb:97:fb:03:7a:2f:2d:4f:4d:
         e2:5b:54:d4:7b:b5:f1:98:74:07:b7:a2:f4:97:69:16:fe:6f:
         7d:ff:cc:df:50:e5:08:fb:e5:1e:46:1a:b6:52:78:b0:6c:af:
         a3:ca:34:9a:d1:1a:51:3b:ee:4e:5d:9f:c4:69:62:f6:15:1c:
         38:e1:25:6b:58:d6:65:c3:98:d1:ca:f4:b7:0e:0f:c0:6f:26:
         46:26:6b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:01:16 2026 by rpki-client