Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa
File:                     b8d91776-1543-38be-9850-76776625fbbd.roa (raw, json)
Hash identifier:          1l2JDmPBAArGaVq0haAVWqfvCIhWSttE7dbRjSxIm7s=
Subject key identifier:   6A:56:14:A2:A1:11:FC:1C:5A:B0:93:10:C9:34:1C:D3:E8:97:D1:3C
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584CD8355CA1B6FA85C66E80ED80
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     6079
IP address blocks:        134.202.40.0/21 maxlen: 24
                          134.202.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d8:35:5c:a1:b6:fa:85:c6:6e:80:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=410120f9-f1d3-4503-9c0b-d8a83104ac81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ab:b6:2e:6d:cc:4a:59:64:53:4b:be:06:a7:
                    ff:42:3f:77:28:a8:26:e2:e7:e8:42:73:ea:37:93:
                    b2:81:05:9c:1f:9d:78:34:01:6b:99:eb:3f:a2:2d:
                    ee:d0:f0:20:54:0b:e1:46:e1:83:06:ef:07:02:b8:
                    4f:d9:00:2e:e4:87:73:28:bf:3c:4e:c6:48:6f:a1:
                    e1:49:c0:16:78:8d:10:22:e0:ae:0f:90:7b:69:c1:
                    9e:92:74:62:c2:63:e3:12:7a:64:f0:12:c6:5d:26:
                    d0:b1:c1:da:59:b9:c5:e1:0b:f0:4e:e2:11:b2:8d:
                    11:64:5d:80:6d:4e:83:af:83:53:73:73:f8:0a:81:
                    71:4a:7d:a2:b0:de:2d:a7:74:83:2b:07:c0:0f:15:
                    57:82:9e:18:9e:ae:f5:3e:3b:5c:42:1b:6d:d2:45:
                    dd:59:53:cf:4c:83:ec:a8:e3:3f:e8:7a:96:31:fa:
                    ba:3c:61:c1:52:2e:8d:1f:67:8d:a3:b0:1e:fb:39:
                    bf:d6:21:e5:b8:04:16:02:47:05:d9:b6:53:48:75:
                    f3:a8:8c:53:a6:db:07:80:42:05:71:a0:47:10:cf:
                    60:b4:ca:82:7c:b6:c4:bc:f5:b6:8f:ab:43:fb:70:
                    6b:1d:cf:b1:58:8a:0e:f8:2b:d5:8a:13:39:b9:67:
                    63:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:56:14:A2:A1:11:FC:1C:5A:B0:93:10:C9:34:1C:D3:E8:97:D1:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.40.0/21
                  134.202.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:47:92:de:6d:55:86:58:03:65:c6:f6:0b:24:fe:0d:ba:17:
         fd:86:ef:da:d8:18:5f:da:07:c1:3f:0e:e8:a0:83:ef:84:e3:
         1c:ce:7f:4c:9a:ab:37:a8:68:e5:57:95:1c:2d:42:21:19:4e:
         82:13:88:81:bf:3d:78:56:b5:74:6a:9c:a4:bb:55:8b:ec:4b:
         8b:58:dc:fd:b3:f3:e4:ea:29:8a:58:cc:6f:cc:b7:7d:f6:83:
         72:fa:8b:4c:1b:84:15:e0:48:9c:57:0b:20:aa:7e:c3:fb:57:
         73:bf:fa:8c:d2:bb:ce:8b:8d:40:d6:2e:2d:bd:4b:1b:03:d7:
         3f:59:03:a3:34:47:52:b4:fc:f5:b2:5c:db:17:f3:da:e7:11:
         78:df:37:7b:05:df:d9:b6:48:b7:c3:67:de:6a:e9:7e:a4:40:
         71:77:c6:49:39:9b:be:05:79:9f:1c:51:eb:3e:ff:13:5a:4e:
         08:ca:bb:79:ac:2c:be:aa:61:82:21:18:81:4e:19:e1:7f:2f:
         f9:ce:6b:28:f6:4a:67:8f:be:4e:39:e9:ea:c6:96:77:dc:25:
         46:d1:9b:57:0e:8a:43:8b:4f:3a:54:ff:43:fb:6c:f8:51:bb:
         b3:ca:61:ed:dd:41:b5:bc:38:75:96:63:0f:17:06:5b:f1:ca:
         f5:93:8b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:28:01 2026 by rpki-client