Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99404aa4-8fe7-3daa-87d4-8afe5b943dcb.roa
File:                     99404aa4-8fe7-3daa-87d4-8afe5b943dcb.roa (raw, json)
Hash identifier:          qL0s+dUqCvLJxfe8g5FaqIyEsJviqHUIHrHeqp+bRKk=
Subject key identifier:   1B:0F:01:EE:F0:C2:BD:AE:E2:17:CF:C4:EC:83:1A:32:0C:28:E5:63
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584DF4DB9F1EE09800DD42858200
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99404aa4-8fe7-3daa-87d4-8afe5b943dcb.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     81
IP address blocks:        128.109.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:9f:1e:e0:98:00:dd:42:85:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=3b80a0db-9815-4cca-bbcd-64f216dd2bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:a9:1a:a2:ee:31:60:dc:2d:a1:f8:a6:d4:
                    3c:bb:71:c2:1f:0f:15:84:47:d4:13:ef:92:e8:85:
                    ad:72:2d:2a:1b:7f:93:ca:43:1c:e4:44:00:2c:fe:
                    b0:c1:8d:81:ca:ef:7b:f0:1f:49:b6:b8:0e:ae:d3:
                    c5:ba:c3:35:0d:e5:00:0d:a3:90:f0:df:02:aa:65:
                    81:7f:d1:01:89:d1:f3:21:b2:7c:35:d6:0f:e3:52:
                    f9:4e:a3:95:cd:a9:ea:8b:c0:ea:69:fb:59:8c:d3:
                    d4:6a:de:5e:16:16:3b:59:70:05:77:21:48:17:97:
                    6e:50:87:41:61:fe:77:ed:f4:cf:83:9e:55:24:4e:
                    2d:f4:11:29:28:9b:c2:23:b8:fc:1a:9e:09:3c:4c:
                    a2:1e:ca:6b:d1:ca:34:73:f0:11:ea:c1:e2:1c:28:
                    0a:19:56:8e:73:47:1b:f6:25:e5:85:9b:68:ab:45:
                    78:d1:7c:2b:b0:1b:8f:2d:cb:a7:7a:93:67:45:2c:
                    d8:48:cf:9a:40:55:fa:4c:d2:da:3f:77:f1:f7:83:
                    55:66:fb:5d:be:0a:54:69:a9:66:1b:61:35:34:a8:
                    c5:0b:e5:4a:30:bd:65:ed:f3:77:4f:4d:f3:df:7d:
                    3d:e6:f8:4f:3a:2b:1c:3f:cd:81:87:22:3b:8e:92:
                    3e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0F:01:EE:F0:C2:BD:AE:E2:17:CF:C4:EC:83:1A:32:0C:28:E5:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99404aa4-8fe7-3daa-87d4-8afe5b943dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:eb:de:25:cc:ee:48:29:b0:bc:78:bc:6d:27:84:36:a4:ee:
         cf:74:96:8d:e8:d4:32:3f:dd:9e:0d:e7:04:94:a1:ba:5b:74:
         bf:70:df:7e:f9:93:4c:f1:2e:ff:84:19:2e:c8:df:30:f8:40:
         10:60:1d:e8:00:f1:ad:d1:f0:e3:89:30:24:be:89:78:66:78:
         7a:28:66:2b:ec:ed:30:5e:fa:73:ed:11:87:df:d0:e7:c1:fd:
         24:5b:bc:2f:92:56:16:0f:fe:90:8b:3e:17:c5:46:15:02:c7:
         31:f8:fa:0a:14:08:cb:12:5d:c8:a9:83:98:6e:43:15:42:73:
         bd:fe:96:9c:d3:5a:6a:98:85:82:7d:3e:e8:16:26:6b:04:e5:
         98:87:81:68:11:56:61:89:5a:d6:9f:2e:74:21:f4:16:40:3a:
         7b:ad:3c:25:83:56:0e:99:d3:b1:57:4e:0c:49:1e:eb:f8:25:
         e9:a6:a5:86:34:f4:25:c4:f2:50:00:47:43:29:81:4c:42:14:
         39:07:87:1c:0f:eb:28:b5:29:14:28:2a:2a:3e:30:a2:85:c3:
         02:89:6b:fd:0a:45:9c:fc:be:ed:21:88:4b:34:83:fe:5d:40:
         9d:c4:0f:76:45:36:b7:9f:ad:48:78:24:78:9b:7a:a0:2b:9a:
         b4:17:0b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:03:40 2026 by rpki-client