Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f1a5ad23-3142-3e61-b9fc-d617cc0972bc.roa
File:                     f1a5ad23-3142-3e61-b9fc-d617cc0972bc.roa (raw, json)
Hash identifier:          FIpHOeTth7yr6nluhO6Bc0Nfln+TbtntwBsqjH3a3Tg=
Subject key identifier:   1D:F9:13:7D:D9:34:9A:75:A0:09:3C:93:E2:BF:B0:D6:71:1B:59:B1
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584EAE81A692634F5241B611B880
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f1a5ad23-3142-3e61-b9fc-d617cc0972bc.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     7764
IP address blocks:        148.129.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:a6:92:63:4f:52:41:b6:11:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=8b5fdf1a-995c-47b3-b3da-2915172cb84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7b:38:f1:98:16:21:d0:d9:eb:93:b3:71:ee:
                    35:3e:73:e9:43:ce:16:53:f1:48:06:56:2b:a6:39:
                    ad:3e:f3:22:1a:26:8d:dc:aa:90:40:d6:e1:ad:5b:
                    ec:28:a1:54:26:90:d4:0f:00:d8:04:88:cb:30:3e:
                    5f:4a:ff:3a:b3:18:92:51:9b:20:8f:4a:fe:25:0a:
                    0a:10:18:f4:9c:34:df:a5:09:8b:1e:5c:b5:1b:6c:
                    fd:b7:15:f6:ec:3d:ad:e0:96:40:ec:6f:44:b5:06:
                    77:1e:89:81:35:36:23:fa:93:d6:3c:44:09:d4:5d:
                    cb:07:ea:12:7a:03:27:89:7d:d0:ea:82:8a:77:2c:
                    04:8e:ad:49:a5:d7:9e:07:2e:9b:55:78:57:48:07:
                    d0:f6:1c:23:73:91:4e:85:08:d1:27:63:c7:86:f2:
                    25:37:6a:d0:1b:03:d8:05:ca:55:1d:55:b5:ba:8e:
                    09:0d:ae:73:d5:28:9a:bc:1f:89:18:99:73:3b:9a:
                    ce:ef:db:dc:30:50:47:dd:7f:71:e0:96:28:1d:c9:
                    68:d8:85:c6:52:25:f3:44:bd:25:b7:38:36:dc:97:
                    c8:43:2a:73:49:7b:21:8d:f1:e3:18:56:0d:64:f7:
                    5d:96:90:36:f7:b2:f4:76:3d:e3:28:70:d3:07:5e:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F9:13:7D:D9:34:9A:75:A0:09:3C:93:E2:BF:B0:D6:71:1B:59:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/f1a5ad23-3142-3e61-b9fc-d617cc0972bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:48:b6:ab:b0:f9:0d:a3:33:9d:4c:6b:bb:69:44:be:12:8b:
         6b:cd:6d:8c:2c:cc:1e:09:bf:bb:43:db:ca:b0:86:61:40:5c:
         5d:0c:1f:4d:3f:b0:42:02:67:0b:95:28:e6:a4:a6:71:86:f0:
         08:c3:12:49:87:c3:9f:4b:dd:73:36:bf:77:f5:b9:66:c9:2c:
         70:01:7a:6f:9b:96:82:0b:d6:5d:2f:58:5e:3b:55:75:3a:78:
         6f:93:c8:0d:b2:fd:27:31:9e:14:97:6c:4e:b2:5e:e3:94:52:
         18:af:9d:76:95:d3:b7:fb:bf:80:2e:4d:e7:ae:84:19:c2:b4:
         7b:75:77:cf:4c:6a:09:8f:e6:58:24:1e:3e:0f:e1:03:1d:88:
         8e:aa:cf:4c:d8:b8:bf:83:ac:e9:21:79:7b:23:45:ae:f5:ca:
         d6:b0:bc:2e:77:64:61:64:e5:82:03:9f:7a:d6:bf:fb:65:c5:
         49:15:1b:09:13:e2:01:c0:e5:ee:a7:28:50:ff:50:6d:8c:b0:
         69:aa:4e:80:1a:b5:bd:c8:2e:7e:0e:18:fb:35:89:d7:14:f9:
         6a:3d:a3:1e:5a:83:41:8f:54:84:fd:ca:88:89:a3:81:52:8f:
         7f:b7:2a:94:82:45:e6:98:77:44:95:0e:b9:be:da:83:47:73:
         a6:d0:2e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 19:43:48 2026 by rpki-client