Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa
File:                     02fd6998-8257-3284-8895-0fa240a0be15.roa (raw, json)
Hash identifier:          D/uM869LCbX9LBiwDHKZc02ICrxG4cstzE+dHd9UyhA=
Subject key identifier:   4C:74:E0:4D:1F:EF:22:84:5A:97:B9:C8:0A:EB:BC:75:38:C6:CB:64
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584DF7A5D06F91302E538F06DD40
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa
Signing time:             Wed 27 May 2026 01:00:14 +0000
ROA not before:           Wed 27 May 2026 01:00:14 +0000
ROA not after:            Tue 25 Aug 2026 01:00:14 +0000
asID:                     14114
IP address blocks:        157.133.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f7:a5:d0:6f:91:30:2e:53:8f:06:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: May 27 01:00:14 2026 GMT
            Not After : Aug 25 01:00:14 2026 GMT
        Subject: CN=fca73dd1-27d0-4c66-9cce-c97747ebecf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b8:0c:91:d9:22:81:73:23:aa:19:50:a3:c3:
                    a1:0e:03:88:6c:dd:81:6c:c8:0d:90:2f:55:1f:53:
                    80:c2:29:08:1c:d0:20:56:3f:8e:37:8f:63:8d:cf:
                    f2:80:cd:3e:70:87:09:20:73:de:9c:c0:7b:ef:d6:
                    76:2b:6f:e1:1f:2b:41:20:0d:9e:a1:26:96:a3:8c:
                    5c:d3:04:eb:2d:7d:25:42:72:36:d6:56:c1:c8:63:
                    16:81:c8:cd:fe:b8:53:6f:12:dd:be:07:2c:6e:45:
                    be:87:09:b3:5f:9a:17:54:f1:eb:f6:54:38:a6:d2:
                    5a:e6:d8:c2:94:d8:ad:7f:af:dd:92:c7:d0:c8:77:
                    e7:5f:a0:74:79:00:3a:29:49:84:09:43:06:0b:59:
                    89:3a:b3:fe:5a:ce:fc:d0:5c:7e:f7:63:7f:c1:fb:
                    fd:65:2f:48:c0:45:a0:5a:dc:a5:9d:8e:d0:0f:e5:
                    bd:e7:09:64:92:f1:19:7c:ef:37:3a:f9:7e:6c:2d:
                    01:2d:30:b6:e8:98:48:e1:b1:03:2f:c9:15:0f:c7:
                    89:e7:ef:be:a0:dc:fd:21:89:9a:0b:0d:16:2a:91:
                    d5:0f:be:b8:2b:bf:e2:e0:56:85:c0:d5:90:7c:80:
                    b8:89:fe:5d:fa:c4:46:94:51:46:ae:e5:d8:40:83:
                    42:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:74:E0:4D:1F:EF:22:84:5A:97:B9:C8:0A:EB:BC:75:38:C6:CB:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/02fd6998-8257-3284-8895-0fa240a0be15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:47:86:89:47:58:ed:6b:7e:bd:69:68:d9:94:11:8f:59:97:
         6d:0b:2b:ba:4b:75:3f:4c:44:d0:2e:a3:be:9e:7f:93:e4:0a:
         78:b1:ea:fe:2d:3b:22:85:2d:1b:31:d1:95:12:d3:53:9a:ca:
         8d:b5:94:a3:29:ba:84:0b:e1:cb:52:1e:37:be:dd:7c:6a:6a:
         59:34:81:18:5f:74:c2:7c:f4:62:29:c1:e6:f9:72:98:77:b0:
         83:21:d0:f6:84:b8:9a:55:b4:11:47:1e:7b:63:c3:98:d9:7c:
         ec:d7:83:35:02:0f:3e:76:fd:38:2e:82:8d:f6:58:84:a6:98:
         92:6b:a9:cd:82:af:29:3b:3d:60:3c:dc:a8:07:d6:87:fd:cd:
         56:79:a6:3a:1c:90:c1:4f:c4:82:af:61:8d:48:61:1e:d4:8d:
         05:90:75:8b:31:64:8d:42:bd:11:37:e7:44:36:5c:b3:08:09:
         0a:e1:9f:74:84:f8:9d:3d:bf:69:4c:75:75:2b:da:4b:58:78:
         b5:59:b3:a5:9f:f6:ac:95:c5:82:f1:48:ff:97:4b:39:8c:59:
         9b:a5:7b:f2:f9:68:41:7d:cb:2c:54:1c:ec:64:d1:c2:7c:a4:
         b7:81:74:0d:cf:a9:a5:54:60:af:e9:8f:00:ec:2c:c5:50:19:
         b7:6d:d9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:44:46 2026 by rpki-client