Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dddc9202-ebd8-3902-b874-00599a99fa9e.roa
File:                     dddc9202-ebd8-3902-b874-00599a99fa9e.roa (raw, json)
Hash identifier:          +xx4J9ogdddKi5+En1JRQQgNp1X2r60ygJlBrhxLa7g=
Subject key identifier:   0A:2A:7C:0F:D5:32:92:F4:35:7B:A1:2F:F3:48:CD:FF:72:68:FF:28
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584C8476C14578A63991AA479880
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dddc9202-ebd8-3902-b874-00599a99fa9e.roa
Signing time:             Wed 14 Jan 2026 02:00:31 +0000
ROA not before:           Wed 14 Jan 2026 02:00:31 +0000
ROA not after:            Tue 14 Apr 2026 01:00:31 +0000
asID:                     14297
IP address blocks:        139.131.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:84:76:c1:45:78:a6:39:91:aa:47:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Jan 14 02:00:31 2026 GMT
            Not After : Apr 14 01:00:31 2026 GMT
        Subject: CN=cdc0cc09-ada8-4ed9-b7d8-fa80aa81edd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:6a:67:dc:c7:f4:ce:34:1d:df:7e:e4:7b:
                    b8:fd:6e:5b:e0:22:55:94:e5:6d:c7:30:c0:04:7a:
                    3e:b0:50:b4:77:08:47:2a:c9:16:1a:a4:b5:b9:04:
                    ad:41:a2:64:53:02:2c:f6:6a:5b:56:29:47:90:16:
                    6d:81:ff:50:b1:9a:73:b0:10:5f:af:a2:55:7d:70:
                    7d:ea:4d:7c:7d:0d:5d:12:55:2d:2f:fd:a9:f2:02:
                    b1:2c:70:9e:cf:95:89:b7:a0:ab:2a:35:2e:9a:b1:
                    69:5f:b4:24:37:fa:f4:cc:78:a3:77:c4:13:30:c4:
                    4a:fe:3c:4d:50:4c:dd:4f:29:e9:7e:ef:1d:c9:f7:
                    98:58:39:39:a4:e7:d6:4c:b2:06:c0:67:ac:33:e8:
                    94:17:07:e0:fe:84:b0:46:a8:0e:c8:c5:f1:30:78:
                    59:ec:cf:05:a9:28:b6:bf:6e:eb:12:32:9a:56:bd:
                    7a:af:ae:72:a9:0e:96:0d:66:7b:57:c9:b7:e8:35:
                    aa:b9:4d:a6:66:87:27:87:8a:2c:94:14:3a:65:8c:
                    35:4f:fc:da:5b:cc:6d:52:92:e4:ed:de:39:61:2c:
                    6e:e0:c9:7f:c6:88:c9:e0:c3:23:ce:ff:6b:c3:8a:
                    70:b3:87:09:50:78:ab:7a:81:f9:96:ca:1d:9d:df:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:2A:7C:0F:D5:32:92:F4:35:7B:A1:2F:F3:48:CD:FF:72:68:FF:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/dddc9202-ebd8-3902-b874-00599a99fa9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.131.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:dd:13:5f:3d:ad:2a:a7:05:41:03:38:92:2f:7f:f8:54:52:
         5e:c9:80:c2:c0:57:15:ae:66:9d:63:78:c3:49:64:d0:1e:cc:
         40:60:cd:06:ca:2a:c3:16:62:f0:c1:79:9e:d7:fa:7e:77:90:
         8a:91:f0:fa:41:fb:e2:e9:a1:cd:74:17:d0:bd:79:20:fc:2b:
         bd:58:9e:6d:08:97:86:7e:92:32:8c:5d:79:4e:b9:a4:4f:4d:
         96:21:ea:47:46:e1:48:0d:00:98:d8:bb:be:1f:d8:7b:1f:42:
         26:af:7f:d4:b8:06:ec:97:6e:1d:c5:cc:3a:a4:3b:95:8a:99:
         cc:4a:c6:26:8d:67:18:86:ac:52:57:62:55:80:56:db:63:77:
         8e:d4:34:73:76:b2:ee:81:d8:0d:1d:19:bc:91:d2:fd:2f:24:
         ab:b5:90:cc:31:22:a7:b1:93:ba:4f:14:bf:ba:67:db:e9:44:
         fd:f8:f2:8d:69:ec:e0:6e:02:4f:a7:49:a9:c5:d1:57:0d:ae:
         67:54:b7:45:82:aa:16:e2:ea:0a:7b:cb:84:07:19:a9:18:7e:
         93:76:65:8a:c7:23:3e:12:a7:4b:6c:d4:bd:a2:d5:ec:61:01:
         13:a7:bc:94:b9:94:52:48:6e:40:3f:da:3a:8b:a5:fc:cd:76:
         b9:1a:8a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:40:59 2026 by rpki-client