Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa
File:                     f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa (raw, json)
Hash identifier:          VsivVAZypHOvaMEqTQOopebe91MTYACFncvp699+zNM=
Subject key identifier:   C2:E7:AF:C4:E1:F7:69:7C:BF:27:F2:AD:70:BB:EA:FD:B5:8C:F6:F5
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D6EDA6070CAB13354452C9A80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     207134
IP address blocks:        131.153.98.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:60:70:ca:b1:33:54:45:2c:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=dc009653-eee6-47c4-8ed2-97c6a608acba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:25:19:05:79:70:73:01:5c:43:07:c7:fc:51:
                    40:74:6b:8b:42:47:6b:da:f3:d5:75:07:ef:b2:f5:
                    bd:62:38:ff:de:4f:4a:ff:ef:b8:f6:59:71:a4:08:
                    3c:0f:27:f5:a3:d5:21:c3:b7:66:65:96:eb:1d:da:
                    71:b9:85:6f:f6:4f:9a:a0:6a:f3:c4:49:93:73:a8:
                    42:28:27:12:80:0d:09:6a:43:07:45:b2:98:08:fa:
                    70:dd:d9:8e:9a:c3:db:04:00:bd:52:9d:f2:39:53:
                    db:a4:42:1e:4a:25:8f:82:f5:8c:c2:de:15:b4:08:
                    a3:c5:4d:40:d3:96:48:60:81:03:6d:54:4d:e6:72:
                    aa:e4:1b:cd:a3:25:41:d9:c0:17:99:02:ca:be:0e:
                    5f:95:c5:fa:02:73:8f:ae:83:77:ed:ed:20:c3:f0:
                    4d:7a:31:5d:af:d5:1a:43:ca:1b:0d:d6:b4:26:1f:
                    29:b7:40:85:a1:b9:50:6d:38:0d:ce:5d:1b:03:2c:
                    64:aa:c3:0f:59:db:61:a8:a4:36:19:43:da:13:1f:
                    0c:98:d2:de:69:1a:d8:8e:39:aa:de:8c:15:4d:61:
                    ba:3b:45:f1:1b:d3:4a:72:d1:f2:05:70:23:f2:10:
                    70:f2:4a:a0:47:dd:82:f6:ba:07:aa:0f:c1:71:d1:
                    6b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E7:AF:C4:E1:F7:69:7C:BF:27:F2:AD:70:BB:EA:FD:B5:8C:F6:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f2775d19-0fea-398d-aeb5-3b7bf776a2ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:0a:31:59:47:c2:17:88:59:b0:0f:88:53:0d:b7:32:2f:1b:
         d9:77:ff:16:fc:3a:7e:a8:98:fe:87:b7:6c:13:37:44:52:c1:
         d9:88:90:54:63:9d:a2:dc:4b:49:41:18:16:48:01:af:37:ea:
         56:6a:99:f3:28:ef:1c:5b:f4:a7:2d:2e:f6:73:64:35:0d:df:
         e4:5e:00:3e:26:e9:46:ac:8d:27:cc:f5:47:b9:b1:99:b8:69:
         52:fa:48:86:ea:61:42:90:ce:8a:17:a2:a5:2e:b3:87:40:2e:
         14:4f:07:cf:6b:46:4a:f2:5d:13:67:17:69:8a:12:dc:52:3a:
         4c:29:1b:2e:d7:ad:ac:21:0d:7b:d0:e6:57:19:79:44:1c:d4:
         04:a7:63:9e:f8:ef:ae:f4:18:fd:52:95:86:42:1f:4a:69:f5:
         57:59:ed:75:5a:61:48:b1:0c:9f:32:09:d9:39:8c:db:be:d8:
         f9:79:fe:d0:09:bb:4f:8f:4d:97:92:a4:01:a1:6f:8f:1d:a1:
         6a:49:4c:0b:27:13:0b:8b:bb:f0:07:40:52:10:51:13:3d:b1:
         ad:89:2f:1b:6c:76:d2:2c:fc:10:6e:0f:5f:5c:cd:1a:1d:34:
         49:24:50:66:2a:7a:0d:cd:aa:16:3e:98:00:04:76:b6:62:bc:
         63:c8:7f:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mBwyrEzVEUsmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk
ZGMwMDk2NTMtZWVlNi00N2M0LThlZDItOTdjNmE2MDhhY2JhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSUZBXlwcwFcQwfH/FFAdGuLQkdr2vPVdQfv
svW9Yjj/3k9K/++49llxpAg8Dyf1o9Uhw7dmZZbrHdpxuYVv9k+aoGrzxEmTc6hC
KCcSgA0JakMHRbKYCPpw3dmOmsPbBAC9Up3yOVPbpEIeSiWPgvWMwt4VtAijxU1A
05ZIYIEDbVRN5nKq5BvNoyVB2cAXmQLKvg5flcX6AnOProN37e0gw/BNejFdr9Ua
Q8obDda0Jh8pt0CFoblQbTgNzl0bAyxkqsMPWdthqKQ2GUPaEx8MmNLeaRrYjjmq
3owVTWG6O0XxG9NKctHyBXAj8hBw8kqgR92C9roHqg/BcdFrxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLnr8Th92l8vyfyrXC76v21jPb1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjI3NzVkMTktMGZlYS0z
OThkLWFlYjUtM2I3YmY3NzZhMmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5liMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJkKMVlHwheIWbAPiFMNtzIvG9l3/xb8On6omP6Ht2wTN0RSwdmIkFRj
naLcS0lBGBZIAa836lZqmfMo7xxb9KctLvZzZDUN3+ReAD4m6UasjSfM9Ue5sZm4
aVL6SIbqYUKQzooXoqUus4dALhRPB89rRkryXRNnF2mKEtxSOkwpGy7XrawhDXvQ
5lcZeUQc1ASnY5747670GP1SlYZCH0pp9VdZ7XVaYUixDJ8yCdk5jNu+2Pl5/tAJ
u0+PTZeSpAGhb48doWpJTAsnEwuLu/AHQFIQURM9sa2JLxtsdtIs/BBuD19czRod
NEkkUGYqeg3NqhY+mAAEdrZivGPIf7Q=
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:29:29 2026 by rpki-client