Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa
File:                     4338433f-a208-3589-9c69-6c3b1db06a76.roa (raw, json)
Hash identifier:          UOPUGt32tEsMaLksz8v4/nFtiqUYzgWz9aYivfFtDic=
Subject key identifier:   80:3D:39:EF:29:F3:B6:DD:4D:61:C6:8A:E9:6B:86:F2:0E:3D:F5:C8
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584D7A051F300C8C754AEB82E500
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     21976
IP address blocks:        130.156.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:1f:30:0c:8c:75:4a:eb:82:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=b3cc2899-71e8-4a58-b9b6-096d91cb83fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:e5:d5:79:7e:98:99:6c:9e:41:7e:a8:c0:
                    95:95:18:dc:32:d5:ed:20:0a:54:69:30:ca:7e:84:
                    94:93:fd:2c:49:94:27:1c:16:a7:78:3b:e3:9d:1e:
                    aa:97:b4:41:c3:cb:e5:3f:bd:b3:c8:5d:75:ea:aa:
                    3d:0b:b3:b9:57:cc:9c:02:a5:2a:21:27:04:c9:7a:
                    9f:fe:22:eb:75:8e:45:5d:27:d8:d1:59:33:3d:97:
                    37:2a:13:03:ef:45:df:84:52:28:51:35:49:25:4b:
                    d3:44:2a:79:e0:41:15:12:90:32:13:ec:a4:80:11:
                    c4:ed:61:a8:fa:5f:bd:d3:51:fd:9e:58:c8:3b:8c:
                    f5:e4:2d:6b:e3:ce:12:0a:fa:a8:11:a5:8d:b1:34:
                    28:11:e0:48:ee:20:d0:cb:c1:1b:7b:79:42:80:d4:
                    07:73:8b:c4:e4:84:4c:5f:5f:16:2c:c1:da:d0:2b:
                    e4:00:6f:1c:09:3e:df:b3:d9:ea:76:5e:71:00:b8:
                    98:90:6e:48:39:1b:3a:6e:f6:c5:a3:4b:b8:3c:24:
                    89:88:60:69:67:0f:18:8e:0d:8e:19:49:50:34:31:
                    11:fb:96:a5:17:c3:29:0e:3d:c5:af:8d:9f:13:cf:
                    f8:16:a6:f2:cf:21:5c:cc:36:ce:10:98:0d:14:ed:
                    59:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3D:39:EF:29:F3:B6:DD:4D:61:C6:8A:E9:6B:86:F2:0E:3D:F5:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/4338433f-a208-3589-9c69-6c3b1db06a76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:85:0a:b1:12:88:6c:f0:07:c4:01:03:91:9a:14:8f:6a:98:
         96:4c:d4:e5:98:7a:e2:26:a1:dd:37:b2:84:b8:93:33:17:25:
         40:0f:19:db:e6:10:63:9a:45:0e:9f:4d:4a:8a:2f:fe:fe:c8:
         94:30:f2:48:2b:69:a8:29:91:2c:6f:28:2f:1c:a5:dc:5e:df:
         40:0d:c0:9d:5e:bb:9c:d5:23:ed:63:62:09:a3:8a:bf:dc:e3:
         cc:78:0d:17:a6:e7:f4:3b:67:52:ac:af:fd:0d:24:0a:95:6e:
         e9:4f:41:58:1b:a3:ad:66:66:ec:2b:75:82:11:f6:1e:e8:c8:
         47:d5:04:3b:b5:13:c6:0f:d7:07:8b:26:d9:28:10:61:e1:f8:
         96:02:45:18:ed:85:c5:33:cc:e6:0b:2e:49:d9:22:32:b6:d2:
         b1:a1:12:cc:cb:44:19:04:85:f4:61:1b:c1:e7:9f:67:17:30:
         c6:49:b6:e1:40:4a:f0:0c:86:c6:96:b5:11:cc:6b:79:1b:fc:
         01:27:f7:98:97:23:31:97:23:7b:09:62:2a:44:18:5c:fc:8f:
         d2:85:c0:e6:62:5d:89:d3:45:7a:c8:c6:f9:15:ee:87:b3:fb:
         cf:61:71:d2:c1:ad:af:7f:0d:bc:36:14:98:54:7e:a8:01:3b:
         df:f4:3d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:20 2026 by rpki-client