Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa
File:                     0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa (raw, json)
Hash identifier:          8IgOSryS8XR+Lyklx5E5ynV3n/1fIQN7ysZvKJ96xU0=
Subject key identifier:   14:2A:9F:91:3B:7B:25:72:B0:16:EB:61:3E:7F:99:72:C8:BF:39:58
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D703FD3A3BE8B6FE8B99672C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     20454
IP address blocks:        131.153.142.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:d3:a3:be:8b:6f:e8:b9:96:72:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=d9f5a21c-c5cd-45b6-b156-dec283c2f16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:02:36:ad:d6:71:e4:8a:47:a5:da:1c:9a:83:
                    72:64:c3:55:80:d2:8c:8e:45:6c:e7:48:4d:83:6e:
                    99:0d:9d:58:5d:57:7b:e3:f4:b5:5c:19:07:ac:dc:
                    c7:f6:4a:73:3d:90:47:06:78:51:2b:2a:4f:86:0a:
                    15:e2:87:22:48:ef:ac:aa:c0:61:b0:39:1d:f2:c4:
                    83:6e:b6:49:c3:87:7b:e4:9f:1d:95:f0:70:6e:24:
                    1d:e9:6b:ce:c9:f6:d1:7c:f6:86:5e:27:1c:c3:c2:
                    82:05:dc:1c:72:19:1b:21:d6:bc:47:32:ff:da:fb:
                    e8:04:87:f9:18:74:6a:2f:e6:ee:25:f2:f7:cc:85:
                    8c:29:46:43:44:5f:cf:cb:9b:87:78:be:4c:61:54:
                    42:63:52:e7:eb:6d:c2:ce:d4:d2:ea:3f:01:e2:ca:
                    24:52:9e:d1:30:4c:80:5c:1b:80:8b:0f:65:be:8f:
                    ee:26:36:fa:ba:15:9d:7b:15:c9:30:0a:01:27:75:
                    c8:ad:88:1c:7f:02:11:7d:29:65:2f:b0:a6:cb:34:
                    a7:a7:f5:31:11:b2:90:2c:64:54:f9:fa:81:51:58:
                    83:48:9c:ed:64:7e:ed:b9:62:a8:40:69:32:7a:ee:
                    7e:10:8e:2b:ab:49:fc:93:74:67:0d:c1:07:db:b1:
                    3a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2A:9F:91:3B:7B:25:72:B0:16:EB:61:3E:7F:99:72:C8:BF:39:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d4b973e-bcf0-3096-9daf-6b8ec6792aa1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:f8:fb:c6:47:52:7d:b1:1f:2e:07:fd:3f:af:96:b5:3a:c0:
         4f:d1:e2:6d:db:60:46:90:d6:a8:11:6e:09:ee:da:5c:05:6f:
         31:ba:c6:1c:39:83:47:5f:69:44:49:51:1e:45:e6:91:58:d5:
         07:a2:b2:c7:1a:86:62:af:42:ba:9b:5e:a2:0a:9d:74:e6:a1:
         b5:b3:ce:94:c4:27:96:9d:7d:05:39:cc:77:7c:c1:74:45:de:
         55:63:2f:cc:f1:24:07:44:e2:a2:21:1d:8b:a7:2c:de:45:7f:
         f6:2d:d9:08:ba:53:b7:1e:a3:59:f1:60:77:0d:f3:b6:f8:ed:
         dd:ab:56:d6:dc:33:d6:b2:fd:17:f6:8a:37:f0:58:f4:5e:22:
         e1:a0:2a:1d:7e:dc:d1:61:4a:63:b1:3a:c9:7b:65:e4:d8:d6:
         41:f6:ab:5a:35:fa:f3:26:af:25:75:23:27:16:ff:0e:d3:f7:
         6b:bf:e2:41:ea:fc:da:80:32:0b:f9:14:cf:05:c4:06:b3:ff:
         55:6a:89:79:33:72:b9:88:2c:35:e9:59:24:be:15:38:65:70:
         70:3d:47:47:ea:c9:47:c8:ad:66:59:ea:34:5d:5f:20:55:ed:
         9f:3f:e4:56:6b:0c:8b:dc:f3:be:3b:6f:81:7e:0c:f0:d5:cb:
         c6:78:71:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:13:46 2026 by rpki-client