Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa
File:                     7a124059-8167-385d-841b-71708d4474a3.roa (raw, json)
Hash identifier:          FcPdvvR3uOg9DjJT+/2XBzno2OpGM0H/2YiA8QBs3uc=
Subject key identifier:   51:7A:96:30:83:C3:0E:EE:00:BE:9B:47:49:15:AC:BD:BA:99:AC:6F
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F4328584E0005D66BBC4213362C3B8880
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     0
IP address blocks:        23.134.216.0/24 maxlen: 24
                          128.254.185.0/24 maxlen: 24
                          128.254.186.0/24 maxlen: 24
                          128.254.187.0/24 maxlen: 24
                          2602:fbca::/36 maxlen: 36
                          2602:fbd0::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:d6:6b:bc:42:13:36:2c:3b:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=7be1973a-b154-44e5-b416-ea3b4f4b07bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:16:aa:ca:a9:13:c3:ca:89:fe:78:cb:ba:b7:
                    22:9c:11:cd:48:ad:35:ff:de:45:48:aa:3d:98:a4:
                    d7:a1:32:ad:69:6f:44:29:f5:76:58:1f:bc:cf:b8:
                    a5:0f:5e:9f:80:20:bc:6e:78:13:d5:d7:a9:29:be:
                    cf:68:b5:83:70:cb:94:35:54:3e:f3:0b:1a:e4:ef:
                    0a:58:8a:c3:e9:f5:5b:a1:fe:32:c8:23:50:ab:30:
                    e8:59:8b:ec:fb:13:54:b5:dc:ca:6e:89:39:3b:29:
                    9f:26:ae:fa:bb:30:5a:2c:3d:73:46:cd:23:80:4f:
                    a2:3c:71:1c:9b:0d:a1:8c:0d:e4:03:e0:3a:cd:64:
                    93:36:44:91:2e:2b:db:26:37:99:61:38:87:52:f1:
                    8a:12:d2:bb:72:90:96:e5:0c:fb:08:2d:d8:ec:77:
                    90:f8:25:e2:a4:44:a0:b0:35:2f:a4:db:d1:e5:a3:
                    8a:51:6e:20:e7:ac:61:c3:75:cc:07:01:56:37:34:
                    2a:d9:c7:99:44:65:a0:82:c5:3c:82:32:27:f7:b6:
                    04:1b:37:8a:62:9a:fb:8c:a6:ea:e3:be:7a:a8:4c:
                    d4:b7:ae:66:0f:7f:a9:7b:07:fb:f7:63:a0:91:c9:
                    76:0c:04:f4:88:5b:4c:9a:82:50:0e:bb:d8:1e:b6:
                    69:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7A:96:30:83:C3:0E:EE:00:BE:9B:47:49:15:AC:BD:BA:99:AC:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/7a124059-8167-385d-841b-71708d4474a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.216.0/24
                  128.254.185.0-128.254.187.255
                IPv6:
                  2602:fbca::/36
                  2602:fbd0::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b7:af:86:c6:87:b9:cc:51:e8:f0:ce:b1:db:96:36:27:55:
         73:d8:27:e8:4b:ab:0a:ba:96:a9:89:a7:b0:0b:52:42:c7:7e:
         a4:31:a5:d9:76:82:bf:a8:a9:ad:c8:02:d9:32:62:01:77:e9:
         80:d2:fa:18:b0:94:38:0e:b8:92:d3:28:f4:97:e2:36:b5:03:
         67:b5:59:77:f4:90:40:f9:f0:eb:ab:e0:25:14:fa:32:24:9d:
         ec:82:2f:88:b6:d4:88:7e:15:ad:7f:95:e2:af:3a:00:44:47:
         9b:3a:5e:1d:a6:30:dc:4b:71:47:50:51:da:d6:99:2f:0f:a4:
         d4:6e:ff:00:af:3f:b6:31:16:e1:e6:c7:e8:8b:8f:c2:b8:f9:
         e4:ce:97:be:91:2c:77:8b:10:e3:56:75:99:c8:ee:12:10:1e:
         64:ed:49:97:50:6c:42:3c:38:8b:53:c6:50:b0:19:34:24:f2:
         3a:bf:79:ba:20:b0:f5:64:63:d3:67:b6:64:4d:63:40:e9:18:
         c9:1c:6b:81:43:60:38:24:6e:a5:f5:a6:b3:f6:d8:dd:a2:67:
         0f:45:21:40:86:b4:b4:4a:a7:c1:70:e3:b1:fe:5b:e4:47:5c:
         a3:90:0d:a1:66:43:a0:9c:2f:b9:51:e2:b2:34:59:b0:25:65:
         41:2f:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:07:17 2026 by rpki-client