Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/f875a7fb-100b-3843-aae0-5bb415733a91.roa
File:                     f875a7fb-100b-3843-aae0-5bb415733a91.roa (raw, json)
Hash identifier:          VzpUBe598qYDNmWSApvt1kxYh/JdY4O1Lim7Z9Pl48Y=
Subject key identifier:   7E:B0:71:3E:8F:39:D9:B5:65:22:94:85:D2:0A:89:BF:B5:E2:A9:55
Certificate issuer:       /CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
Certificate serial:       010D0C9F4328584CD13CA9078AF294C1C8D66700
Authority key identifier: A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/f875a7fb-100b-3843-aae0-5bb415733a91.roa
Signing time:             Tue 10 Feb 2026 14:00:41 +0000
ROA not before:           Tue 10 Feb 2026 14:00:41 +0000
ROA not after:            Mon 11 May 2026 13:00:41 +0000
asID:                     16509
IP address blocks:        130.150.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d1:3c:a9:07:8a:f2:94:c1:c8:d6:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
        Validity
            Not Before: Feb 10 14:00:41 2026 GMT
            Not After : May 11 13:00:41 2026 GMT
        Subject: CN=38b57c1b-4da2-4cd0-9fe6-d4ee81a89a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4f:0b:53:21:85:fa:f7:3d:df:b2:45:bc:eb:
                    dd:47:77:fd:bd:f4:5a:52:02:d1:7e:d7:a8:03:40:
                    84:ac:bb:3c:24:9c:7c:c9:18:e6:18:e9:d9:aa:c6:
                    8c:a1:83:6a:0a:6a:0b:f1:51:04:3a:6c:9a:06:75:
                    a2:f4:c8:9b:1e:a9:cc:a7:63:17:f0:50:87:db:47:
                    58:07:6a:ff:b8:92:b9:7b:80:a6:48:f6:6a:3a:dd:
                    93:84:15:ca:67:cf:fc:1c:67:2e:9e:82:aa:56:9d:
                    b7:3d:b6:64:00:d3:1d:c2:d6:7c:02:cd:cc:79:77:
                    bb:b7:81:85:d3:b5:ae:bb:c5:df:91:63:51:cf:78:
                    e5:c4:2b:d9:a4:98:bb:ac:56:7d:d9:bc:06:27:2f:
                    d1:18:12:4e:11:04:27:87:fd:b5:2c:93:0f:5b:06:
                    42:38:c5:ef:f4:97:dd:f6:96:b6:5f:66:b5:13:05:
                    95:75:c2:a8:f4:17:f8:2b:19:01:c5:ae:e6:4b:76:
                    9d:33:91:f4:0b:d1:b9:ac:03:77:df:37:4f:ce:b4:
                    77:55:1f:d1:38:75:44:dc:fa:ac:a6:f6:05:f7:03:
                    9c:36:62:94:88:a7:6b:74:ea:25:9a:d5:69:2a:34:
                    cb:20:06:d3:74:5b:b9:d7:18:a3:2e:f0:eb:a9:fa:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B0:71:3E:8F:39:D9:B5:65:22:94:85:D2:0A:89:BF:B5:E2:A9:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/f875a7fb-100b-3843-aae0-5bb415733a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl

            X509v3 Authority Key Identifier:
                keyid:A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.150.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:27:21:c5:dd:d6:0a:0a:dc:01:bb:b1:ff:b9:39:cc:59:c9:
         2e:43:99:a8:e9:9a:82:81:80:b3:1a:82:1b:70:ea:b7:d4:70:
         ae:5e:f0:cf:59:59:99:c7:33:31:ff:e2:47:a8:e3:bb:dd:02:
         99:03:d7:e2:46:61:ef:87:c4:4d:06:be:6e:b6:63:52:4c:da:
         06:07:a0:b2:b8:eb:e4:2f:54:df:51:a0:5f:91:dd:3b:ce:ad:
         85:61:bf:9a:b4:17:bd:09:08:66:85:fb:2d:4b:40:d4:45:76:
         67:68:61:d7:63:77:74:eb:54:b9:e0:73:ab:68:52:16:63:f0:
         3a:ea:64:84:bd:76:87:c0:6f:0b:b9:15:f7:27:19:65:46:92:
         35:7b:f4:ca:48:92:dd:2b:23:08:04:c3:c8:ef:17:68:94:cb:
         33:87:82:0a:c6:ee:c5:bf:04:a6:17:7f:eb:28:5b:1d:a3:4d:
         41:b9:bc:b6:af:b7:aa:33:fd:ca:31:4a:55:99:f3:89:24:0c:
         4d:7a:3e:d4:65:4d:8c:76:42:84:f2:9f:d4:0c:dc:d7:d5:d0:
         e7:21:a3:66:08:93:21:2d:8e:d2:65:04:15:4e:b5:67:37:b6:
         41:1e:2c:d2:d5:3d:74:23:9f:4f:e2:a2:4f:1c:1a:4b:e9:7e:
         e6:0e:54:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:56 2026 by rpki-client