Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa
File:                     b8d91776-1543-38be-9850-76776625fbbd.roa (raw, json)
Hash identifier:          1uvq8fQR9obryDpk/Rfq2MPxPhxxy1p4LCgkG76P4rs=
Subject key identifier:   18:AA:50:5D:9E:4B:5E:0A:C2:88:69:B1:2B:59:8E:A1:6B:1F:E1:EC
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584D59EA6B512C2F9F5B67730F20
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     6079
IP address blocks:        134.202.40.0/21 maxlen: 24
                          134.202.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:6b:51:2c:2f:9f:5b:67:73:0f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=b75a42ae-fccc-4468-9fa6-bb9fa5e60d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:83:3f:6d:6e:51:4a:b8:c3:59:ff:62:40:
                    31:67:10:1d:80:90:4a:fa:9d:fb:84:7d:2f:73:29:
                    f3:1d:e1:5b:06:7f:76:db:6f:ad:8e:80:a8:50:da:
                    b5:c4:f4:4b:6f:9e:4f:63:2e:15:6d:89:e3:20:1f:
                    ed:99:8c:c1:0b:24:98:66:fc:28:b8:bb:f0:d0:08:
                    26:67:0e:01:ef:00:86:ca:cf:9d:cc:84:fc:b2:6c:
                    63:0d:21:b6:8d:f5:e2:48:0c:a2:85:b8:99:d6:c6:
                    78:b2:5f:05:76:51:b8:da:40:98:70:62:a6:12:a4:
                    a3:02:2c:f3:0b:d2:18:43:41:2d:e2:2c:12:f0:5a:
                    e6:b1:f9:1a:c6:60:ae:8c:d9:c2:3f:52:6a:71:e9:
                    f7:7f:a7:a9:bc:92:e1:a5:58:95:ea:12:83:7a:a7:
                    26:44:18:25:bd:78:95:98:6b:57:8e:8c:6c:90:a0:
                    40:69:3b:d3:e4:55:f5:1f:74:4d:a8:f0:80:6a:e0:
                    85:f8:08:33:71:45:1d:e8:b2:5e:64:99:be:d0:1c:
                    6f:57:5d:db:66:12:12:fe:ed:86:3b:dd:94:c0:3c:
                    fc:25:39:53:da:29:4a:05:62:76:f9:26:af:59:93:
                    a7:a7:65:74:72:0b:b5:7d:45:15:56:56:f8:dc:9c:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AA:50:5D:9E:4B:5E:0A:C2:88:69:B1:2B:59:8E:A1:6B:1F:E1:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/b8d91776-1543-38be-9850-76776625fbbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.40.0/21
                  134.202.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6a:5e:b2:d9:6f:ea:1f:da:9b:42:68:19:15:7d:56:76:12:
         84:8f:b5:14:ad:05:74:c0:16:c7:ca:ce:3f:16:3e:f1:06:21:
         16:01:91:62:3f:10:b3:3d:2e:4d:f6:f5:66:77:3b:b5:6c:ea:
         0c:04:e0:0e:ab:23:04:e6:1b:6d:db:a0:f1:a1:12:86:9c:25:
         c5:34:cb:2b:25:1a:36:68:1a:17:2d:30:24:7b:ee:6e:5d:d0:
         26:17:5b:03:8b:79:61:70:e7:b1:32:d3:ba:00:6b:ff:62:f2:
         fd:41:c3:a7:96:6a:fb:ca:f5:69:c5:9d:75:21:a8:9e:11:b5:
         1b:0b:9e:68:75:47:bd:9f:1a:ab:d2:4f:c2:7f:fc:86:55:b6:
         7d:78:e6:e5:b0:ee:7d:66:6d:e2:9b:cb:5c:e4:66:3b:e8:69:
         94:47:41:79:dc:a7:c5:5c:3a:ca:aa:42:36:f0:4c:0a:da:ff:
         4b:7b:91:c9:49:7b:cd:31:c9:bd:91:dd:85:4f:4e:1d:e1:ef:
         0e:f3:0d:32:b6:b7:66:5e:f4:0c:c7:ff:bd:f9:f7:f2:08:a8:
         fe:6c:b8:01:5d:4d:b0:42:68:fd:52:c3:ef:27:8f:c5:37:d5:
         0c:1c:e2:3f:eb:59:27:98:69:be:a6:1b:1e:62:af:c9:51:dd:
         17:5b:30:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:35:05 2026 by rpki-client