Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/49b48c03-6dfa-35f0-9f27-91ad592d9c4f.roa
File:                     49b48c03-6dfa-35f0-9f27-91ad592d9c4f.roa (raw, json)
Hash identifier:          PnqDDMCLKhpv84IfTlX5n4gO+BzoeXGyutAdGpp3AWM=
Subject key identifier:   43:26:85:D3:35:F0:A1:95:4A:F1:59:A8:D1:0A:63:3C:C7:32:EF:79
Certificate issuer:       /CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
Certificate serial:       010D0C9F4328584F119D15B2C3A81C460391CE60
Authority key identifier: 6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/49b48c03-6dfa-35f0-9f27-91ad592d9c4f.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     2637
IP address blocks:        128.61.0.0/16 maxlen: 24
                          130.207.0.0/16 maxlen: 24
                          143.215.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:15:b2:c3:a8:1c:46:03:91:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=6d7ca354-4d8b-4c8e-8dfc-c4ad1b9b849b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:d1:d4:dd:fb:d5:a9:6b:cb:85:86:c6:e4:
                    df:c9:d7:c8:15:ba:3b:9b:4a:83:e2:6f:b3:66:54:
                    bc:cd:8c:66:ae:14:3e:00:df:45:74:84:2a:90:87:
                    a4:82:63:13:f8:e9:69:43:fe:1d:9b:c3:89:41:84:
                    1a:ee:6c:46:d8:3a:1a:73:25:e3:ab:d6:bd:4d:e2:
                    fb:93:6f:3c:aa:a0:48:75:68:29:bd:5d:8c:6e:c5:
                    43:cc:2c:4f:5c:a6:f2:14:70:18:de:5b:12:ed:f2:
                    bc:3b:8d:ce:18:1c:5f:1d:a7:06:e8:15:17:27:c9:
                    63:51:0a:5d:78:b7:c5:ee:83:02:ee:44:77:06:7e:
                    8d:aa:6f:db:5e:35:f8:20:72:ae:c1:de:ab:ce:c8:
                    87:ea:d3:2b:1c:7e:51:94:f4:93:c1:e0:b0:5d:7d:
                    17:87:0f:5e:f5:3c:1e:da:03:4f:51:e9:d0:7a:1a:
                    c5:18:53:fa:18:e7:9c:4a:62:b6:ab:bf:f8:c6:5f:
                    00:cd:0a:b0:0c:df:13:df:54:94:76:dd:bd:25:9c:
                    01:d8:49:56:83:91:9e:37:32:0b:94:74:60:36:c2:
                    04:9a:74:70:d3:e6:6d:d8:bf:69:9a:6e:6a:47:7c:
                    bb:d3:fc:ba:9c:0a:ca:2e:03:65:0b:00:25:54:fd:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:26:85:D3:35:F0:A1:95:4A:F1:59:A8:D1:0A:63:3C:C7:32:EF:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/49b48c03-6dfa-35f0-9f27-91ad592d9c4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl

            X509v3 Authority Key Identifier:
                keyid:6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.61.0.0/16
                  130.207.0.0/16
                  143.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:d4:0d:c5:17:b1:62:51:94:58:61:4e:43:9f:0a:c6:5b:14:
         4b:92:81:2f:93:88:5e:c1:93:36:7f:78:af:a7:93:34:37:b0:
         68:05:ee:24:91:3d:9a:21:81:fc:53:45:86:e1:ec:31:49:11:
         5b:0f:6b:ec:2d:fe:51:26:38:8c:48:d4:b9:05:da:62:fe:61:
         7b:a5:cc:f1:96:cc:34:62:85:ba:ab:7f:92:2c:8e:f8:43:86:
         1c:3f:19:1e:0b:8f:ad:07:2a:40:81:4d:f0:32:03:a6:e3:b4:
         c2:2a:a3:70:42:26:2a:80:53:55:90:55:e4:0c:55:d5:b5:2c:
         61:bb:25:ab:10:7b:75:e1:c2:03:2a:67:c3:87:8c:64:84:0e:
         26:02:75:21:c2:92:2c:8f:8c:d4:2b:5e:d4:7e:2a:02:49:a4:
         9c:89:bf:f7:f0:bf:97:9d:0e:91:44:43:c8:f1:ae:54:a9:b7:
         eb:20:5a:26:09:1b:f9:22:9c:5b:df:b7:11:1c:be:4c:74:0c:
         7d:f6:d3:39:93:9c:78:72:0f:74:86:32:48:d3:09:44:c1:43:
         70:d2:d8:af:cc:f1:be:1d:7a:f6:09:72:82:58:69:ec:cc:48:
         ce:fc:a6:86:a5:e3:79:7b:ed:00:01:9f:9f:21:aa:91:10:53:
         a8:1c:f6:f7
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIUAQ0Mn0MoWE8RnRWyw6gcRgORzmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTMxYmE3YjktNzBhNS00ZTdlLWJiYTQtMWE1YzIwNDg4
YzcxMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
NmQ3Y2EzNTQtNGQ4Yi00YzhlLThkZmMtYzRhZDFiOWI4NDliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05/R1N371alry4WGxuTfydfIFbo7m0qD4m+z
ZlS8zYxmrhQ+AN9FdIQqkIekgmMT+OlpQ/4dm8OJQYQa7mxG2DoacyXjq9a9TeL7
k288qqBIdWgpvV2MbsVDzCxPXKbyFHAY3lsS7fK8O43OGBxfHacG6BUXJ8ljUQpd
eLfF7oMC7kR3Bn6Nqm/bXjX4IHKuwd6rzsiH6tMrHH5RlPSTweCwXX0Xhw9e9Twe
2gNPUenQehrFGFP6GOecSmK2q7/4xl8AzQqwDN8T31SUdt29JZwB2ElWg5GeNzIL
lHRgNsIEmnRw0+Zt2L9pmm5qR3y70/y6nArKLgNlCwAlVP2pFwIDAQABo4IDXjCC
A1owHQYDVR0OBBYEFEMmhdM18KGVSvFZqNEKYzzHMu95MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFi
YTdiOS03MGE1LTRlN2UtYmJhNC0xYTVjMjA0ODhjNzEvNDliNDhjMDMtNmRmYS0z
NWYwLTlmMjctOTFhZDU5MmQ5YzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTMxYmE3YjktNzBhNS00ZTdlLWJi
YTQtMWE1YzIwNDg4YzcxLzEzMWJhN2I5LTcwYTUtNGU3ZS1iYmE0LTFhNWMyMDQ4
OGM3MS5jcmwwHwYDVR0jBBgwFoAUawYQaOFd4AD9aYEVHHxDxPlGoJIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xMzFiYTdiOS03MGE1LTRlN2UtYmJhNC0xYTVj
MjA0ODhjNzEuY2VyMCgGCCsGAQUFBwEHAQH/BBkwFzAVBAIAATAPAwMAgD0DAwCC
zwMDAI/XMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs
aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ
KoZIhvcNAQELBQADggEBAJvUDcUXsWJRlFhhTkOfCsZbFEuSgS+TiF7BkzZ/eK+n
kzQ3sGgF7iSRPZohgfxTRYbh7DFJEVsPa+wt/lEmOIxI1LkF2mL+YXulzPGWzDRi
hbqrf5IsjvhDhhw/GR4Lj60HKkCBTfAyA6bjtMIqo3BCJiqAU1WQVeQMVdW1LGG7
JasQe3XhwgMqZ8OHjGSEDiYCdSHCkiyPjNQrXtR+KgJJpJyJv/fwv5edDpFEQ8jx
rlSpt+sgWiYJG/kinFvftxEcvkx0DH320zmTnHhyD3SGMkjTCUTBQ3DS2K/M8b4d
evYJcoJYaezMSM78poal43l77QABn58hqpEQU6gc9vc=
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:43:39 2026 by rpki-client