Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/c87f3e48-57b0-3016-a4dd-e5d7ec13a2e9.roa
File:                     c87f3e48-57b0-3016-a4dd-e5d7ec13a2e9.roa (raw, json)
Hash identifier:          F02I0qFVcyOmwq8DABFJzr/dIIAT6BDJU91QcwPVs9k=
Subject key identifier:   82:47:F7:40:5F:80:62:C8:76:CD:EC:C6:F7:6A:3E:81:29:0F:6A:BD
Certificate issuer:       /CN=8fc21c27-e8e6-433a-86da-315992f3e55a
Certificate serial:       010D0C9F4328584CD99CBABE64C71C7C20F94100
Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/c87f3e48-57b0-3016-a4dd-e5d7ec13a2e9.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     14537
IP address blocks:        130.254.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9c:ba:be:64:c7:1c:7c:20:f9:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=c0ba3d05-90fe-475f-bbcf-5b6344a7dd77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ab:ca:00:97:58:f5:19:1e:e3:23:2d:5c:5a:
                    20:48:37:d1:f7:ac:ea:6b:9a:f4:8e:b1:d9:a6:87:
                    80:37:a7:df:ba:d7:bc:85:72:ab:6e:7d:65:74:00:
                    2d:3d:f1:c8:0d:bd:cb:32:d2:49:85:4f:34:d4:25:
                    44:df:68:c4:40:87:61:46:33:f0:86:a4:5f:2f:8f:
                    1c:bd:a5:ac:70:3e:84:eb:5b:e8:da:ec:be:30:b1:
                    2f:d2:d1:14:ad:8b:d4:7e:6a:85:45:41:a5:b0:6f:
                    b8:99:42:0b:bf:c5:bf:b5:bb:27:41:73:d3:88:9d:
                    ce:c3:b0:b6:eb:ef:53:42:a1:47:71:36:ab:8e:04:
                    e8:ed:f3:84:12:d4:28:45:8b:ec:d9:60:3c:19:e7:
                    24:2f:8f:e8:95:ba:e1:5a:20:09:61:03:f5:db:12:
                    6f:42:21:71:cb:a0:db:61:08:97:d5:9c:b8:de:95:
                    f7:7e:c5:a4:fc:55:ff:37:a2:aa:68:45:5b:0e:98:
                    c5:6c:c9:8f:3a:df:87:62:e2:67:ca:75:b9:0e:19:
                    de:a9:e7:bd:35:79:24:4a:99:99:f8:32:91:a2:3e:
                    16:fe:0b:80:03:6c:01:df:9b:0c:38:65:1a:a4:48:
                    35:e7:98:6e:46:cd:3a:41:e1:39:35:35:7c:4f:4a:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:47:F7:40:5F:80:62:C8:76:CD:EC:C6:F7:6A:3E:81:29:0F:6A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/c87f3e48-57b0-3016-a4dd-e5d7ec13a2e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl

            X509v3 Authority Key Identifier:
                keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:19:48:c2:df:ff:a0:88:48:e4:d5:76:e4:46:ca:4b:d3:30:
         38:3a:37:a4:85:2b:44:7c:ee:9e:c3:a8:a7:84:b5:16:6c:da:
         81:42:4e:e4:21:89:b9:a2:9f:73:ab:f6:51:ef:a0:9e:1f:42:
         29:59:20:50:c6:dd:5f:9c:da:d5:09:54:89:5d:2c:f7:6d:d7:
         40:6d:55:12:f6:2a:9b:c0:d6:25:29:17:5a:4c:b2:64:2a:69:
         73:3b:3f:aa:a0:d0:49:ed:af:bf:49:e5:95:34:c1:cf:6f:59:
         e1:22:3e:33:ba:bd:1a:18:3e:f7:96:36:b9:8e:ca:33:28:dd:
         7e:5d:b3:3f:f7:8e:ee:71:d4:0b:29:54:b3:52:4e:28:cd:c7:
         bd:b6:35:05:93:74:f2:6c:85:68:00:f5:95:71:21:c1:c0:d2:
         54:0d:91:9b:50:d9:2c:a3:df:6d:60:4e:bc:47:27:fa:69:1b:
         51:c0:a3:79:ab:86:92:10:9a:9b:7c:b7:99:c5:8b:09:5f:39:
         af:f4:15:0e:76:52:54:0e:f6:9d:57:8e:74:1b:48:34:0d:15:
         79:c8:23:17:8b:08:13:6d:87:0d:59:6c:f7:37:04:fe:ee:15:
         1a:19:86:c9:49:81:f8:50:72:f6:f5:83:32:fd:dd:54:69:98:
         16:62:23:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:52:11 2026 by rpki-client