Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/4ac59bb0-f875-319d-8318-db2f795b24a5.roa
File:                     4ac59bb0-f875-319d-8318-db2f795b24a5.roa (raw, json)
Hash identifier:          w5bLOqQWfP12SlKeGHY2lGCG4/F3PE7/f1q6eJ5enow=
Subject key identifier:   0B:4F:1D:AF:C5:B7:1E:0B:F4:4C:A0:BF:7D:52:78:D6:FD:2C:08:40
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584F0D6CFE70C8D611664DD9EEA8
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/4ac59bb0-f875-319d-8318-db2f795b24a5.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        134.49.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:fe:70:c8:d6:11:66:4d:d9:ee:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=5750bc57-148f-45fc-9132-57f9b7aff873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:7f:3c:a1:c4:fa:c9:1e:6f:79:52:0e:48:
                    61:2a:32:fa:43:9b:24:6a:09:c6:ca:cc:34:cb:24:
                    f2:2f:7c:e1:9b:54:d7:88:ea:b1:f2:6a:c2:0c:50:
                    5b:67:c7:24:7f:74:24:4d:6e:62:1a:78:89:af:c9:
                    f5:c1:f2:33:9e:a1:1f:96:e0:b0:b6:42:63:f4:cc:
                    34:33:57:c2:96:11:81:b3:98:01:4e:aa:b8:6d:2e:
                    9c:c7:ed:ed:9f:77:5a:93:59:b4:b8:1b:76:8c:e8:
                    ef:ea:18:2b:f2:87:e5:5c:30:79:35:fa:c2:f3:23:
                    f6:1e:14:28:b8:f6:fc:b0:12:bb:e6:48:ee:aa:9c:
                    34:cf:7c:d1:ab:09:9b:27:0a:3e:f8:dc:58:66:37:
                    1d:ab:7d:e1:dc:ce:0f:19:cd:b3:63:4b:3b:64:cf:
                    5e:5f:2a:6c:02:20:b2:c4:cf:c9:56:ef:c3:9d:ba:
                    31:42:4f:62:63:98:7f:cc:08:5a:15:26:eb:38:94:
                    e8:6a:08:35:1e:d2:cd:72:17:ab:e9:1e:a1:99:98:
                    72:cf:16:f2:85:96:41:e9:f3:2b:f4:8d:7d:8a:9d:
                    10:e2:7d:ce:96:d0:c0:20:c0:a5:27:29:bc:c0:f2:
                    64:c7:51:c4:32:35:b7:44:d8:49:22:3e:ae:99:9c:
                    42:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4F:1D:AF:C5:B7:1E:0B:F4:4C:A0:BF:7D:52:78:D6:FD:2C:08:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/4ac59bb0-f875-319d-8318-db2f795b24a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:3c:12:d9:e7:a2:46:cf:ba:f7:a9:71:a5:a4:41:8d:03:f1:
         25:24:da:b3:95:af:a8:b1:da:d1:ab:dd:df:c6:d6:6c:2a:28:
         f3:e1:87:1a:17:56:5a:e2:b7:49:6a:47:0d:1f:8d:bb:10:99:
         c4:7d:07:7e:fa:92:ae:5a:be:16:93:98:10:1d:c0:05:32:85:
         0f:a1:29:1d:a5:89:a2:26:b6:22:75:e1:6b:84:f3:c3:90:0a:
         ae:2b:ae:bf:3e:bb:e9:3c:05:4a:76:f6:84:3d:2f:85:38:08:
         86:b3:d5:92:01:aa:70:bc:d2:22:ed:91:ea:72:b4:5c:2f:f4:
         08:cc:b2:ce:04:72:54:2b:0e:68:58:6c:0d:b5:eb:00:1d:44:
         29:74:ce:11:e8:2c:1b:92:98:07:90:12:c0:b7:ba:41:b8:aa:
         bf:95:ed:3e:16:c2:47:39:14:f8:52:09:5e:66:d6:3d:66:14:
         50:df:62:4e:5e:0d:c9:de:65:4a:39:58:b0:b1:54:86:66:32:
         f1:6f:dc:24:56:a9:b6:d7:12:5b:f7:df:d6:77:7d:6c:92:61:
         1e:f5:98:f4:33:e7:94:58:69:56:79:60:20:5a:3f:99:ae:d6:
         bb:f5:52:85:e2:76:47:de:81:9f:ae:d6:0a:dc:4a:bf:e7:0d:
         87:63:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:16:01 2026 by rpki-client