Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d84d5ebd-baa8-36a0-8d75-3bdfbc12cd62.roa
File:                     d84d5ebd-baa8-36a0-8d75-3bdfbc12cd62.roa (raw, json)
Hash identifier:          PwXbDFkcvdUxOWJgUcW2wXBnk7yywhx9jQwX4c4WuHk=
Subject key identifier:   C6:DF:F6:68:74:BE:C1:C1:98:05:95:F4:EF:32:21:BD:46:D0:D4:62
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584EE4232D0C110C38F3C19DC1A0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d84d5ebd-baa8-36a0-8d75-3bdfbc12cd62.roa
Signing time:             Wed 19 Aug 2026 18:03:41 +0000
ROA not before:           Wed 19 Aug 2026 18:03:41 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        130.94.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e4:23:2d:0c:11:0c:38:f3:c1:9d:c1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Aug 19 18:03:41 2026 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=91b755b8-7b29-4282-9493-975eb57179ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:bf:23:ae:5f:1e:07:4a:ac:7c:d0:18:da:
                    03:9d:ad:d5:d6:e4:87:0f:b4:2b:0a:89:dc:40:7a:
                    3f:a6:70:9d:98:a6:31:e5:97:b4:1e:90:3f:5b:67:
                    05:8f:56:69:a8:a8:bd:e3:43:49:16:0b:99:9a:33:
                    83:de:11:c8:8f:38:63:8e:ff:0d:93:77:11:85:51:
                    7a:3f:64:c5:7a:87:b6:30:5d:f9:e6:56:83:14:3e:
                    a0:ac:43:bf:05:00:5e:5f:ce:70:fa:c1:57:ad:3e:
                    d3:e7:6e:61:7e:12:f7:cf:4e:55:05:b6:dc:c7:f9:
                    1d:d0:3b:45:0f:f7:15:a2:6e:e5:2e:6c:71:0b:04:
                    39:4e:87:fa:f9:88:d4:88:9e:81:c7:00:7b:27:c7:
                    90:8e:87:37:0b:25:3d:60:be:06:85:f0:0b:bd:8c:
                    f4:63:db:f9:6f:3e:bd:42:18:95:62:d8:f5:50:c6:
                    fd:6e:7d:5b:d9:44:64:38:73:14:ea:87:3a:c5:ac:
                    1e:0f:d3:d9:2e:ae:bd:e1:89:8f:78:be:a2:bc:a2:
                    b9:d1:16:19:d3:73:93:75:bf:72:0c:be:ac:92:d1:
                    0e:33:c3:4a:18:d1:9a:23:16:53:92:01:05:62:1b:
                    d2:90:97:c8:bf:13:b6:33:62:d0:ef:3c:b4:d7:16:
                    bd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DF:F6:68:74:BE:C1:C1:98:05:95:F4:EF:32:21:BD:46:D0:D4:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/d84d5ebd-baa8-36a0-8d75-3bdfbc12cd62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.94.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:99:5e:42:e8:ca:0d:c5:7b:37:c1:cf:b6:e6:86:a7:5c:af:
         d6:25:47:44:eb:cc:55:a7:72:12:de:ce:19:1b:d5:5c:64:0c:
         ff:93:83:77:12:12:d1:32:3b:86:e4:fa:10:13:38:bc:92:17:
         f0:9d:2a:ce:e3:49:5b:99:4d:46:b7:86:f9:7e:37:1c:14:74:
         ef:1c:1c:e5:a3:94:e8:43:18:0e:e4:67:ee:28:8c:ca:94:f4:
         20:b2:90:5b:50:8d:d0:f4:ad:fb:e6:21:5f:fb:e7:8d:bd:4c:
         e7:70:c7:58:b8:ed:fe:79:d7:40:dd:4b:71:d4:05:ce:ce:81:
         95:81:e8:8d:b3:28:5e:3e:6c:9b:d1:01:94:99:4a:3e:01:4d:
         17:ce:79:1e:a8:fb:61:0b:25:15:da:2e:f9:8c:76:75:d5:97:
         66:b5:8d:4a:5d:d5:3f:5b:eb:11:48:ed:40:3c:4e:d8:28:8e:
         9e:0e:d0:a0:73:5d:fa:29:a1:d0:95:1b:da:26:fb:c2:9a:a1:
         e3:52:e8:69:e7:9b:1d:5f:7c:43:e2:10:7e:fe:2e:b6:ee:e3:
         31:e0:9f:59:61:dd:f2:6e:af:80:17:80:cc:d1:5b:17:52:8a:
         98:69:57:3d:c4:a5:76:b8:51:63:d8:f1:06:da:30:0a:10:30:
         4c:54:68:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 12:11:18 2026 by rpki-client