Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa
File:                     87921b26-3e4d-3bf5-b82d-926923c0f68c.roa (raw, json)
Hash identifier:          /3YXQCdhaQa54B1ih/gfRGbSUtze+Py9GBhpG50xQYY=
Subject key identifier:   BF:D7:D4:F3:0F:09:68:D4:E5:3B:A3:40:AE:33:8F:8C:CE:7B:40:77
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584D6EDA676F5344D5EB71F3D6A0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     54994
IP address blocks:        138.113.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:67:6f:53:44:d5:eb:71:f3:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=b7a7918a-74b3-4db1-9ba2-b2d80c1f84fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:5d:74:4b:41:9a:2f:2c:27:ad:ed:a8:95:80:
                    34:93:3d:cc:43:67:09:24:26:cd:a3:72:d9:a1:4a:
                    ab:09:ce:f2:7f:aa:17:01:aa:d0:7d:30:de:45:02:
                    05:a2:e7:32:59:a9:8a:19:d2:4b:a0:c3:c7:7e:c6:
                    89:2d:bd:54:30:4a:0c:39:cc:3b:6a:54:a8:58:14:
                    a6:ae:8c:3d:62:8f:b3:c2:58:6b:fc:1f:24:2f:47:
                    15:9e:38:d7:4c:f4:f3:35:d7:36:0f:92:fc:56:c0:
                    69:c5:74:d2:f7:73:e3:cc:c7:15:87:c9:af:8f:7d:
                    aa:dd:1f:9b:75:8c:32:3e:e5:da:ca:22:98:d5:2f:
                    66:72:c0:98:44:47:ce:e1:b6:ca:ef:db:33:5f:f8:
                    71:f3:b6:c2:d5:b0:8c:c0:b5:6c:54:79:d8:21:f3:
                    c9:14:0e:b5:31:5f:66:2a:07:a0:f5:6d:a9:bc:82:
                    13:da:c0:fb:8f:2c:96:8e:fb:59:c8:6b:4d:04:94:
                    9e:8c:59:d8:96:0e:fb:a7:ec:e9:73:a2:f5:01:b2:
                    f6:2e:26:ad:2a:0c:26:51:fb:fc:10:76:64:9e:cb:
                    5d:40:95:8f:74:14:d6:4c:42:eb:b6:22:73:6c:70:
                    36:32:88:18:ee:7f:dd:81:ad:44:86:d7:78:cb:e6:
                    5e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D7:D4:F3:0F:09:68:D4:E5:3B:A3:40:AE:33:8F:8C:CE:7B:40:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/87921b26-3e4d-3bf5-b82d-926923c0f68c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:a0:21:50:59:e7:c1:f8:e7:8a:f4:d8:a5:8c:3b:42:a7:85:
         30:83:5a:d2:59:81:64:86:f9:09:6e:d8:22:64:6f:46:67:dc:
         a0:7e:ad:6b:b1:2e:8f:bc:18:b0:f3:f8:23:b9:c2:3c:fc:f6:
         da:bf:0a:1d:6c:c8:61:40:df:fa:94:ec:e2:91:dd:98:a6:f4:
         54:4d:07:ad:70:3c:51:ea:3e:06:b9:70:87:84:a5:21:78:f2:
         40:49:52:25:1f:02:45:bc:13:25:b1:b2:94:b3:1a:4e:f6:8c:
         a8:b1:65:62:54:52:3d:fe:e0:f6:e8:e5:f8:c4:44:21:31:ef:
         c8:d2:6a:b4:70:60:b6:2a:70:55:9e:ca:d9:da:16:1c:9b:34:
         01:fd:19:e5:89:19:03:19:b8:63:9f:78:e1:e5:d0:64:82:9f:
         22:f7:8e:e2:e3:4a:86:39:c6:1d:23:73:47:e9:d5:c8:88:37:
         40:cf:e7:75:86:c1:9d:21:15:d0:21:ad:8e:97:12:37:9f:4e:
         1e:83:89:eb:ff:91:92:19:76:d9:c1:b0:fb:68:f6:bc:b6:fc:
         5c:da:2a:32:e2:05:a9:b2:18:0d:fa:4c:53:b3:5e:9b:ec:3f:
         99:2c:38:e1:11:39:6d:e9:07:cc:f2:e0:78:08:b8:07:15:24:
         ca:3d:28:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:40 2026 by rpki-client