Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/7c9ee320-8947-3b64-ae6a-b8bb2e0feb68.roa
File:                     7c9ee320-8947-3b64-ae6a-b8bb2e0feb68.roa (raw, json)
Hash identifier:          tIfYQnVOJan02WlkbzFpI2tCI7DH5FgpG4PVka6CRT8=
Subject key identifier:   BC:51:77:32:2C:D6:A9:F3:F1:AD:CF:00:47:E7:95:B1:A1:25:DD:EA
Certificate issuer:       /CN=f63b7eb8-acba-44a7-b922-bd22a4513564
Certificate serial:       010D0C9F4328584D021785055713EE20122DDA00
Authority key identifier: DD:15:DE:7C:46:31:9A:F3:CF:DA:3D:DA:D9:D5:18:98:2C:71:0B:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/7c9ee320-8947-3b64-ae6a-b8bb2e0feb68.roa
Signing time:             Sat 28 Feb 2026 02:00:32 +0000
ROA not before:           Sat 28 Feb 2026 02:00:32 +0000
ROA not after:            Fri 29 May 2026 01:00:32 +0000
asID:                     19318
IP address blocks:        131.143.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:02:17:85:05:57:13:ee:20:12:2d:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63b7eb8-acba-44a7-b922-bd22a4513564
        Validity
            Not Before: Feb 28 02:00:32 2026 GMT
            Not After : May 29 01:00:32 2026 GMT
        Subject: CN=94565c36-05e3-4d31-ad59-0d67c7e5f1b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:cb:c0:65:b0:3b:ca:ad:c0:50:d8:76:49:
                    16:70:04:dd:68:38:a4:6d:24:72:59:1c:47:71:36:
                    08:86:95:f6:0d:7a:d5:43:b2:70:97:70:b0:74:bf:
                    2b:0f:ee:0a:55:d8:63:ef:ae:b8:4a:8e:0d:d8:2d:
                    da:14:35:b9:be:2b:de:7c:6f:a0:2b:a2:14:ce:cd:
                    bf:7f:f0:f4:29:61:6e:cf:85:24:67:d2:31:a8:97:
                    29:1e:73:7c:22:34:91:03:53:b1:99:1a:8f:7e:e7:
                    d5:7e:a3:53:87:38:f1:b1:6d:eb:ba:e9:7b:77:d7:
                    cf:61:a4:5b:fd:b9:c8:06:6b:ec:83:9a:9e:1f:e9:
                    c5:b2:1f:da:4c:16:1a:c6:6c:95:e3:fb:fb:8b:c7:
                    b4:66:ac:1b:79:e2:05:9d:0b:dd:1d:2e:38:f5:7a:
                    51:6e:c9:d7:c9:e3:f9:a5:03:2a:61:9b:cc:41:ee:
                    54:4b:54:41:99:75:e9:06:89:27:3b:85:95:b4:01:
                    1a:82:fb:e3:03:95:ed:75:60:4f:a2:76:35:4c:30:
                    c0:e0:3e:c6:9d:d5:85:8f:01:98:79:9c:65:ea:ba:
                    28:82:b4:bf:19:50:49:43:34:83:be:15:b7:aa:d6:
                    54:59:d2:a8:81:12:58:57:d0:00:71:ea:b5:ba:59:
                    19:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:51:77:32:2C:D6:A9:F3:F1:AD:CF:00:47:E7:95:B1:A1:25:DD:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/7c9ee320-8947-3b64-ae6a-b8bb2e0feb68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.crl

            X509v3 Authority Key Identifier:
                keyid:DD:15:DE:7C:46:31:9A:F3:CF:DA:3D:DA:D9:D5:18:98:2C:71:0B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:7f:e2:e1:02:01:d0:b1:e1:5e:66:7f:20:82:e7:51:55:dc:
         f5:a6:aa:9f:0a:ce:aa:48:eb:78:60:3b:ae:c2:e7:7a:19:6b:
         97:1f:9a:12:43:72:5b:82:3c:e8:a1:8c:ea:7d:53:63:95:35:
         a2:f6:25:b3:2a:0a:bf:3b:5f:ab:8d:71:6c:dd:b6:f3:99:9f:
         d1:ff:0e:9f:7c:54:76:21:19:82:17:1e:19:79:f1:a6:dd:88:
         c0:6b:50:56:28:53:90:02:0d:fe:6a:09:c9:06:f3:40:62:86:
         68:5c:14:b7:6b:3b:af:a3:33:0c:0e:17:b1:54:80:48:94:99:
         07:88:4d:e4:76:c0:c3:2b:4c:78:26:5d:d4:a7:ff:78:44:f1:
         e6:af:74:bc:fe:3f:74:30:80:aa:de:c1:e8:38:6d:08:77:56:
         4d:9c:b7:60:89:ef:b5:cf:a6:a8:d6:a6:6b:f7:94:49:25:89:
         68:34:31:93:d1:86:96:45:25:1d:27:a5:b9:a2:14:46:90:be:
         45:66:3f:b5:25:ca:f2:bd:36:8b:75:b4:01:75:28:fb:17:76:
         c1:69:5a:cf:10:3c:e3:cc:45:e8:c8:ef:e0:c3:f0:76:e7:98:
         b5:8e:98:b0:b5:f0:44:10:9c:e4:87:f6:a8:e6:12:7f:23:50:
         ce:7d:e8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:26:48 2026 by rpki-client