Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/75a5baee-4f9f-3105-8127-70c1252cbd8e.roa
File:                     75a5baee-4f9f-3105-8127-70c1252cbd8e.roa (raw, json)
Hash identifier:          PhRwKBN/4RtjWJToICxNmqkmCvfzlx+Xe0UoBoexEds=
Subject key identifier:   0D:3A:2B:2C:F3:5C:64:4C:F3:24:D9:13:D4:86:42:D4:53:F9:4D:74
Certificate issuer:       /CN=432c4e45-9934-4a21-b56f-b27d7aa21e49
Certificate serial:       010D0C9F4328584EE21C78C2ED520B7AB6457B00
Authority key identifier: E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/75a5baee-4f9f-3105-8127-70c1252cbd8e.roa
Signing time:             Wed 19 Aug 2026 00:38:34 +0000
ROA not before:           Wed 19 Aug 2026 00:38:34 +0000
ROA not after:            Tue 17 Nov 2026 01:38:34 +0000
asID:                     3152
IP address blocks:        131.225.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e2:1c:78:c2:ed:52:0b:7a:b6:45:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=432c4e45-9934-4a21-b56f-b27d7aa21e49
        Validity
            Not Before: Aug 19 00:38:34 2026 GMT
            Not After : Nov 17 01:38:34 2026 GMT
        Subject: CN=5d9508ad-8aad-40f1-af26-6ae21c6b2778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:da:81:c8:a2:25:07:86:03:b2:73:de:46:
                    54:1d:32:8a:43:99:ce:69:6d:88:a5:fc:74:ad:ea:
                    44:3e:e5:4b:37:0b:10:ef:4b:00:46:0c:f5:da:ed:
                    a7:2e:83:2f:15:68:dd:c1:d5:f8:5f:af:4c:74:b7:
                    c9:4a:bc:f5:54:41:6f:78:af:fd:2b:85:86:de:dd:
                    c1:61:f2:68:3c:a1:b2:3f:00:5a:47:41:39:d1:11:
                    b9:57:20:a2:a5:50:46:25:c6:15:95:a8:dd:de:7e:
                    1c:e1:a4:de:65:c6:0f:5e:fe:94:f3:99:f7:fc:e6:
                    2e:24:89:42:c0:0d:8e:84:0d:63:c8:1c:d5:c0:ec:
                    6f:c9:d5:11:72:b8:99:05:e8:e3:f3:f2:9c:29:a7:
                    6b:6a:82:c7:6b:eb:fc:79:cc:92:f5:09:eb:f1:61:
                    0f:aa:a8:b7:ea:82:df:16:ea:d8:a0:dd:94:32:98:
                    1b:9f:c7:b0:e3:f4:65:1c:b4:6d:57:ce:c0:82:8d:
                    a2:89:4e:1a:b4:36:85:51:e8:6b:86:32:8e:c3:e2:
                    a9:d4:fc:04:ff:6e:22:fd:57:4e:f6:75:27:83:c3:
                    20:0f:3f:6c:8d:fb:3d:45:14:32:44:e4:98:1a:cf:
                    71:32:7e:b9:62:1d:b1:a3:8f:04:07:f2:52:0b:e0:
                    b5:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3A:2B:2C:F3:5C:64:4C:F3:24:D9:13:D4:86:42:D4:53:F9:4D:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/75a5baee-4f9f-3105-8127-70c1252cbd8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49/432c4e45-9934-4a21-b56f-b27d7aa21e49.crl

            X509v3 Authority Key Identifier:
                keyid:E4:3D:44:53:78:9C:D7:F5:23:11:F2:15:43:36:81:A8:19:E5:63:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/432c4e45-9934-4a21-b56f-b27d7aa21e49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.225.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0c:2b:90:0c:02:d0:c6:aa:6e:2e:bf:b6:b6:2a:c6:67:99:
         45:12:55:eb:94:cc:f8:de:b7:bd:e3:d9:08:fd:26:79:27:a7:
         61:1c:be:79:6c:f3:96:59:a8:59:8a:85:81:ef:26:b6:36:3b:
         d4:69:06:a8:9a:76:6f:49:4a:21:16:31:04:4c:24:35:c2:f2:
         be:19:c3:8b:04:08:f9:81:74:6c:53:9f:cd:f9:f5:de:c3:bc:
         7b:2e:89:6c:4b:2b:20:18:fa:c3:c9:8b:ad:65:18:51:ae:4d:
         5d:0d:6e:3b:4e:9d:6e:8a:fb:7c:e5:e7:d0:6a:82:3f:dc:c2:
         19:4b:57:66:b7:b5:b5:03:7c:aa:3f:12:29:b1:b4:c3:e6:0b:
         cd:bd:9a:52:07:f3:45:11:36:77:32:28:2c:21:29:cc:32:51:
         e0:a8:a7:82:b2:17:56:1a:10:0f:39:58:c2:65:d8:19:94:e0:
         31:de:d9:d0:29:cf:e1:95:3a:5f:3f:84:c3:1f:76:0a:86:fe:
         08:2f:c7:5b:17:c1:63:b7:5a:6e:70:91:27:31:6b:9c:46:94:
         45:1d:90:a6:0a:86:74:39:eb:d7:a1:d9:a9:87:c7:9d:f8:77:
         69:11:82:61:11:77:64:f8:74:60:c9:1a:57:23:3e:8a:da:ef:
         57:18:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:51:25 2026 by rpki-client