Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa
File:                     ddc05ad9-535b-34bf-991f-d027fed482d3.roa (raw, json)
Hash identifier:          IZYYLkK/tjuH6+9Hjv7THer4hCu9G9IXi88nXfHORGU=
Subject key identifier:   C9:00:BD:29:B1:64:CC:64:69:B5:C8:E8:C2:6B:C8:0C:C0:1D:CB:B8
Certificate issuer:       /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
Certificate serial:       010D0C9F4328584CF6ECD7B877ABD4787A7B5D00
Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa
Signing time:             Tue 24 Feb 2026 02:00:31 +0000
ROA not before:           Tue 24 Feb 2026 02:00:31 +0000
ROA not after:            Mon 25 May 2026 01:00:31 +0000
asID:                     14702
IP address blocks:        134.20.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f6:ec:d7:b8:77:ab:d4:78:7a:7b:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
        Validity
            Not Before: Feb 24 02:00:31 2026 GMT
            Not After : May 25 01:00:31 2026 GMT
        Subject: CN=8bc1589f-5e58-498e-b2d9-c0b860f4acd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:05:95:0f:6e:f2:c6:c4:4b:2b:c2:1e:e6:40:
                    71:07:0d:8a:0f:74:13:68:15:3d:f5:51:35:cc:44:
                    6e:46:b5:95:c7:68:dc:ff:93:84:73:53:21:8c:d7:
                    ea:1f:3b:a3:52:77:ae:a7:40:33:e6:14:92:d5:fd:
                    ec:a4:99:c2:76:10:e0:00:e4:c7:ea:42:39:42:c8:
                    f9:13:d2:2e:29:19:1f:fe:a2:07:15:c1:fe:eb:53:
                    d4:7f:a4:15:be:97:6e:20:56:0c:f0:d0:ca:54:b4:
                    b9:17:0b:18:c9:66:45:fd:13:c8:a0:61:69:0a:a0:
                    95:1e:2e:40:7f:8a:ca:2f:77:2b:ac:b1:aa:a6:a9:
                    63:8b:db:fe:30:0a:8d:e1:9c:53:59:26:02:0a:80:
                    34:75:a8:a5:a5:bb:c2:7d:c4:5f:b2:fc:ea:21:c4:
                    9f:41:11:82:f5:fd:b7:85:9b:97:1c:3c:d6:29:78:
                    e3:0b:d6:41:8f:6f:81:66:c8:84:49:f8:75:00:c1:
                    31:72:b0:51:02:10:a4:3b:e9:59:7b:9b:ff:fe:2f:
                    e8:c2:07:7d:06:91:6c:96:bf:f5:fa:3b:e2:43:de:
                    f5:36:27:10:a9:ad:9f:ca:4d:60:96:33:01:23:99:
                    9f:70:e2:c7:cd:90:af:be:50:f1:3f:f1:7a:a4:d3:
                    d6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:00:BD:29:B1:64:CC:64:69:B5:C8:E8:C2:6B:C8:0C:C0:1D:CB:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/ddc05ad9-535b-34bf-991f-d027fed482d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl

            X509v3 Authority Key Identifier:
                keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.20.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:38:37:e6:94:31:70:4d:80:f0:7b:4f:3d:0e:be:e3:07:4d:
         c2:52:5d:e9:5d:d6:10:08:6e:3a:d7:7c:ef:db:de:92:27:9c:
         b7:83:ea:79:54:cf:f3:db:2b:dd:fb:b5:c2:53:df:01:29:42:
         d5:fd:9d:c7:d4:01:b3:97:ca:75:d5:0f:56:20:45:0d:0f:12:
         8e:55:dd:0a:b7:c2:98:32:22:11:cd:50:f8:0d:2d:c8:18:51:
         a0:e2:86:5c:00:c0:80:36:63:14:c2:26:97:0a:6c:71:05:f6:
         4a:69:17:7e:3e:43:bb:8f:06:d6:fa:b1:1b:53:40:99:a3:2c:
         7a:90:19:72:1c:e3:3b:18:d3:4b:be:63:3c:19:31:ae:10:dc:
         5f:d5:a6:f5:b3:c1:4c:7c:a3:c0:28:d6:ba:28:1d:c1:c9:36:
         30:04:cc:81:50:de:40:02:d7:76:41:91:5d:8b:f5:f2:00:2a:
         74:f8:95:e1:57:94:79:2f:1a:df:ba:a2:e6:18:89:ce:f0:e9:
         78:a2:96:94:fb:45:42:a2:8a:51:68:41:39:05:fd:e8:bc:57:
         f9:0b:df:30:56:fb:f9:82:93:1d:4d:e2:60:62:a8:c7:80:b4:
         10:c8:54:7e:34:f3:6e:2b:c1:26:b6:b1:dd:55:9c:1f:68:91:
         99:55:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:33:05 2026 by rpki-client