Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/e89b86d5-5c0c-3f91-9d6e-99e88d59c9c2.roa
File:                     e89b86d5-5c0c-3f91-9d6e-99e88d59c9c2.roa (raw, json)
Hash identifier:          hIRNjVUbXsOQiwfwDnIXcyjQ3vtIQ1c0cuVYd6STB3U=
Subject key identifier:   BE:06:BE:A3:9C:DA:1B:69:F5:E1:38:B0:54:D0:69:48:E6:84:05:93
Certificate issuer:       /CN=7ac70716-c89d-41e2-931b-d16e22a87ce6
Certificate serial:       010D0C9F4328584D5C7403752086DC8096C5D110
Authority key identifier: 35:FE:10:E9:54:CB:2D:A7:EB:8F:96:F7:D9:E7:0F:00:A6:D3:9E:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/e89b86d5-5c0c-3f91-9d6e-99e88d59c9c2.roa
Signing time:             Wed 01 Apr 2026 10:49:42 +0000
ROA not before:           Wed 01 Apr 2026 10:49:42 +0000
ROA not after:            Tue 30 Jun 2026 10:49:42 +0000
asID:                     152179
IP address blocks:        131.143.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5c:74:03:75:20:86:dc:80:96:c5:d1:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ac70716-c89d-41e2-931b-d16e22a87ce6
        Validity
            Not Before: Apr  1 10:49:42 2026 GMT
            Not After : Jun 30 10:49:42 2026 GMT
        Subject: CN=dcfa4e82-05bd-4300-8076-f8a126411e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:06:45:56:fd:d2:40:93:5b:b6:18:2e:cd:
                    35:e6:4e:73:bf:be:eb:e0:ca:0f:89:21:a7:7a:57:
                    d2:cd:fc:36:d0:2d:75:68:1f:30:7b:5b:a1:10:29:
                    58:2c:5f:f7:c6:fd:9a:e2:e3:7f:ea:4a:7f:7c:2e:
                    b1:e9:b3:18:db:02:9e:82:f5:e9:9f:25:11:c2:73:
                    c3:33:1a:de:a6:5b:53:bb:cb:d0:b6:a8:92:83:bb:
                    90:0a:22:e4:ad:e7:2d:83:66:af:c6:41:6a:66:76:
                    ab:50:bb:06:5e:87:49:38:0f:22:ca:bb:88:34:ea:
                    8c:91:5f:59:b3:a7:a1:c3:ca:8b:7d:39:ed:eb:e2:
                    fc:eb:18:24:1f:c3:b0:67:ae:ad:68:df:e5:d4:fc:
                    74:4b:47:65:c7:a6:90:55:c0:84:4e:69:64:8c:c4:
                    3e:88:1f:99:e7:c0:a6:24:e0:dd:66:1c:2b:c6:d1:
                    ce:94:09:55:34:4c:96:3f:31:12:e1:f1:5c:d1:c4:
                    82:8e:02:af:21:bf:b9:70:3d:47:52:dc:f4:98:7a:
                    cc:dc:08:7b:c8:62:fb:66:57:c8:b8:d9:b1:11:36:
                    26:85:ec:c1:cc:20:c7:8e:c4:85:ae:1a:dc:bc:1d:
                    bf:25:e0:f5:5f:17:27:3a:61:11:ad:c5:e9:32:20:
                    34:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:BE:A3:9C:DA:1B:69:F5:E1:38:B0:54:D0:69:48:E6:84:05:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/e89b86d5-5c0c-3f91-9d6e-99e88d59c9c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6/7ac70716-c89d-41e2-931b-d16e22a87ce6.crl

            X509v3 Authority Key Identifier:
                keyid:35:FE:10:E9:54:CB:2D:A7:EB:8F:96:F7:D9:E7:0F:00:A6:D3:9E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ac70716-c89d-41e2-931b-d16e22a87ce6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:4e:91:a1:64:86:d7:b5:03:4f:30:97:de:94:4e:83:59:b9:
         b8:4a:5d:40:43:1b:fd:e3:82:90:be:24:f5:c4:71:cc:05:15:
         44:71:2a:44:72:f5:35:d6:0f:46:2c:4a:25:af:58:6b:fa:9e:
         0e:23:f7:8b:c3:5e:aa:52:dc:41:e0:46:6c:d9:96:bf:88:6b:
         cb:f5:7e:9c:9e:97:ad:1c:8a:8d:6f:2d:9c:b6:98:d0:96:5a:
         da:65:c4:f5:05:5a:7b:9b:2c:74:86:10:a7:5c:c6:a4:ba:3b:
         8a:61:15:53:a1:e1:a0:cc:ad:db:1f:00:9c:00:c4:ca:91:f2:
         b5:1c:65:08:03:c2:29:91:5b:aa:e3:a4:e2:bd:21:20:6e:00:
         2f:5b:62:40:d2:d2:c3:d4:2d:b2:7c:15:0a:5e:ab:e1:cb:cb:
         d8:84:29:bf:7e:d7:32:a2:5e:4e:da:7c:f8:cb:f7:a1:ab:b5:
         e4:d1:b9:7c:49:77:e0:bc:24:63:bb:da:60:da:6c:c7:20:bd:
         51:73:7c:ff:ab:06:27:24:32:74:f0:08:22:fc:e8:4e:dc:b3:
         68:38:b6:00:9c:7e:13:eb:dd:f8:9f:5f:0d:95:7c:0a:a4:45:
         61:29:d6:81:1d:20:c0:46:53:73:fb:c1:43:b1:f6:1d:17:7b:
         e8:c3:75:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:04 2026 by rpki-client