Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/c203d0b1-1587-3a29-a162-4f621e78c479.roa
File:                     c203d0b1-1587-3a29-a162-4f621e78c479.roa (raw, json)
Hash identifier:          hKxZVHUfcJg+/KUoZuPdLfBtgWK5TvTRR/kRzjggLgI=
Subject key identifier:   54:E0:25:E0:D3:7C:0F:76:3E:C1:61:A7:E0:6A:74:FC:57:05:C4:A0
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584D91C0060836F0381B3F6DA080
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/c203d0b1-1587-3a29-a162-4f621e78c479.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     21976
IP address blocks:        130.156.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:06:08:36:f0:38:1b:3f:6d:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=029e2558-5fbc-4818-8fa0-7137e80c8265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:86:24:20:a6:61:eb:d0:d5:3e:47:bf:67:54:
                    a6:b2:65:d2:9e:bc:e0:a2:aa:ab:c1:09:d4:b7:5c:
                    99:29:43:f1:31:03:c0:20:e5:a6:9e:9f:7e:2f:51:
                    aa:da:e5:85:1c:d9:60:04:43:54:1f:a0:b3:47:92:
                    b1:f6:70:50:7e:01:1c:4f:8e:85:81:37:06:a4:ee:
                    8c:34:70:c0:49:e0:c9:61:d0:85:b4:f8:71:f2:da:
                    76:8b:8c:99:2c:84:27:b9:ff:ef:c2:9c:8c:9f:14:
                    fd:3e:75:98:cf:d2:99:44:df:e7:71:17:bf:aa:fa:
                    b0:65:13:53:40:ae:ef:18:0b:13:d1:ef:c0:39:b2:
                    7a:e9:40:5a:cf:e6:76:17:66:2c:43:82:94:28:a0:
                    f6:01:a9:17:71:32:c4:05:66:98:82:99:83:d5:0a:
                    5b:93:a4:8a:97:e4:8f:f2:e6:ed:fb:9f:5c:aa:78:
                    5f:eb:19:7e:a3:a6:4c:b5:45:c6:a0:5f:ca:76:99:
                    31:cc:5f:77:cf:68:1a:0e:fb:50:63:9c:ae:9f:1b:
                    e6:b4:56:a7:a1:5a:ef:43:97:4a:26:b7:5b:b2:7d:
                    20:17:7b:61:d9:11:f1:9d:ec:ca:4b:24:58:7a:66:
                    64:f9:42:43:04:f3:2a:5c:9f:52:f7:44:6a:45:12:
                    46:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E0:25:E0:D3:7C:0F:76:3E:C1:61:A7:E0:6A:74:FC:57:05:C4:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/c203d0b1-1587-3a29-a162-4f621e78c479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:76:9a:91:c9:35:b3:3b:dc:78:a3:b6:67:c0:ee:8f:98:c9:
         d7:29:6d:66:4b:b1:83:4f:41:50:e8:e7:53:55:52:ec:07:dc:
         2c:21:80:d9:18:3b:b5:db:cc:ec:25:f7:34:34:1a:7c:6e:41:
         cf:e8:a3:68:f7:63:81:1a:5b:1c:68:c1:5f:ac:4d:34:49:25:
         f7:a4:d6:38:85:f6:99:01:77:f9:17:95:2b:6d:a4:db:93:a0:
         94:d0:47:43:8c:54:0d:ae:cb:e7:98:ea:21:57:71:df:84:56:
         54:70:94:52:fc:62:c3:cb:4a:55:5e:55:9d:ec:76:e1:76:dd:
         3d:ae:93:79:03:6e:14:1a:7a:38:38:9e:3f:e2:aa:b5:aa:b1:
         94:69:02:b0:75:23:9b:35:df:10:ab:e6:95:d7:ff:5c:f0:24:
         af:0e:d8:ae:94:62:b2:5c:c5:c6:27:9e:39:1e:0e:70:30:f5:
         0f:fb:5f:0d:ee:82:ee:fc:d0:a8:ce:96:98:b9:ca:ef:be:eb:
         23:43:1c:27:22:82:2c:3f:ac:b5:9a:24:53:85:0a:6b:42:5f:
         59:57:d0:85:52:fd:ca:95:0e:fb:3e:5d:69:ec:7d:da:f0:fc:
         7e:c3:a5:fd:14:80:c5:1e:32:26:be:25:ac:b6:d7:92:db:0c:
         53:cd:c7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:58:22 2026 by rpki-client