Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/a31c85b4-5d4b-3c5f-9a20-abb66ea5d012.roa
File:                     a31c85b4-5d4b-3c5f-9a20-abb66ea5d012.roa (raw, json)
Hash identifier:          dmvXSm98UT+QsPFS202eGfQbKo9pWDgAcZOfiZ0ebNE=
Subject key identifier:   BA:35:00:0E:F9:A4:7B:18:82:0A:0D:96:B7:9A:BE:48:29:17:8A:FC
Certificate issuer:       /CN=eb7b8561-8852-40be-b540-5a3c275d2aeb
Certificate serial:       010D0C9F4328584DEDE097E42328C52940E86500
Authority key identifier: 6F:64:D3:E2:77:55:08:B6:4C:5F:E1:7B:2F:C3:3E:84:B6:0D:0C:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/a31c85b4-5d4b-3c5f-9a20-abb66ea5d012.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     400817
IP address blocks:        130.250.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:97:e4:23:28:c5:29:40:e8:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7b8561-8852-40be-b540-5a3c275d2aeb
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=baad715d-7881-4ac9-8815-2d9d17d1e534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5e:08:1b:3e:56:38:02:54:5d:53:d8:54:61:
                    de:55:43:ff:9c:54:69:f7:87:a1:63:82:14:a3:a1:
                    2f:bd:14:cc:a2:0f:39:e8:bd:4c:92:0e:43:45:f4:
                    8d:d1:db:6a:11:d5:7d:bc:eb:08:af:f6:33:79:47:
                    3d:9d:db:ff:95:7d:86:fa:24:82:a9:8e:a8:5c:71:
                    0f:6c:7b:b0:63:03:55:e3:96:4c:0a:cc:2d:bb:32:
                    7d:56:12:f7:cf:60:ac:45:24:18:f2:c4:56:9c:23:
                    e3:c6:fa:d3:7e:cf:f1:6e:e8:61:d5:d3:2f:00:80:
                    ea:cf:00:c1:90:40:7b:43:67:ed:23:f9:3e:5c:3c:
                    5e:ac:89:5e:43:65:47:1f:46:d7:7d:44:3d:94:00:
                    e3:90:9c:24:7a:3a:c0:b6:75:0c:88:3d:e8:2c:25:
                    84:43:59:fa:62:27:71:5e:ff:04:9b:2f:06:e5:3d:
                    86:4b:59:67:29:29:9c:6a:7e:bf:3b:f7:64:c2:22:
                    56:4a:93:bb:d3:92:5e:f9:8f:57:ff:dc:12:a9:05:
                    6c:e8:e0:ff:ca:f5:b8:0c:c5:3b:d9:2e:65:bc:eb:
                    32:0f:ac:dc:9c:6d:bb:e2:9f:6b:2a:26:1e:5c:0a:
                    6e:03:bc:8d:3e:20:cd:e2:3e:01:a6:fc:8f:05:2b:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:35:00:0E:F9:A4:7B:18:82:0A:0D:96:B7:9A:BE:48:29:17:8A:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/a31c85b4-5d4b-3c5f-9a20-abb66ea5d012.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb/eb7b8561-8852-40be-b540-5a3c275d2aeb.crl

            X509v3 Authority Key Identifier:
                keyid:6F:64:D3:E2:77:55:08:B6:4C:5F:E1:7B:2F:C3:3E:84:B6:0D:0C:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/eb7b8561-8852-40be-b540-5a3c275d2aeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:70:9f:4a:de:9c:33:c7:a0:5f:76:ae:ae:70:3f:cf:cc:ab:
         fa:26:ff:76:f5:65:65:0f:b3:52:2d:55:d9:95:5d:d9:01:98:
         71:4d:3c:f8:cc:f2:8c:5d:69:12:ee:26:49:92:c5:7d:e4:b7:
         c1:07:3b:49:38:97:d2:5f:e4:d1:2c:3a:37:a1:a0:90:ef:d2:
         f0:70:66:24:a1:38:cd:a4:96:42:30:70:6a:15:76:f4:c2:3f:
         15:d9:3f:34:8d:7d:e9:9d:7b:f0:0c:43:c9:8f:00:a8:5c:eb:
         a8:98:3e:b7:07:39:d6:9c:e7:45:4f:6a:27:c7:8e:e9:ff:f2:
         01:5d:53:de:3f:8b:47:a2:2f:ae:a5:c7:13:3d:f4:04:33:8f:
         d0:82:46:d4:3b:9a:2d:cf:8b:da:a4:40:f7:7b:70:5f:b7:df:
         b0:18:40:cf:f4:de:3f:4c:bd:8f:de:17:b5:cd:d8:fc:bd:e3:
         34:f5:86:e6:32:bd:64:5d:eb:c5:8d:59:5f:36:1b:bb:ec:bc:
         f2:6e:35:8e:c0:7f:4c:a6:af:83:af:4f:9c:72:c8:d4:48:88:
         7c:23:e5:a5:4e:84:07:56:eb:f0:25:99:fe:79:5c:45:f9:d7:
         97:46:f1:17:d9:f8:eb:7f:e5:ab:06:6f:5b:96:ad:fa:05:2d:
         cc:13:33:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:40:13 2026 by rpki-client