Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/1ad9dbe6-d050-3c42-8c3f-1a7a52874fbc.roa
File:                     1ad9dbe6-d050-3c42-8c3f-1a7a52874fbc.roa (raw, json)
Hash identifier:          9v+4ra7GNmCu8rkYGO1AL2RNKp9uSlcgzKhU1uS7I/U=
Subject key identifier:   CF:A3:B5:1A:BE:87:27:06:D7:6F:C2:B1:B6:05:5B:27:7F:08:C2:46
Certificate issuer:       /CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1
Certificate serial:       010D0C9F4328584E8419486334CD03BD6B8BD4C0
Authority key identifier: 1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/1ad9dbe6-d050-3c42-8c3f-1a7a52874fbc.roa
Signing time:             Thu 16 Jul 2026 08:26:09 +0000
ROA not before:           Thu 16 Jul 2026 08:26:09 +0000
ROA not after:            Wed 14 Oct 2026 08:26:09 +0000
asID:                     16509
IP address blocks:        134.49.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:19:48:63:34:cd:03:bd:6b:8b:d4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1
        Validity
            Not Before: Jul 16 08:26:09 2026 GMT
            Not After : Oct 14 08:26:09 2026 GMT
        Subject: CN=b2d2e824-c66c-4e6d-94f4-0b3e11368436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:0f:34:3a:08:70:5c:4c:8b:40:ed:cc:95:
                    e2:ed:f6:14:bd:45:05:62:24:c4:97:1f:dc:27:23:
                    b8:4a:41:9d:9f:c6:6f:17:e1:8d:6c:2e:78:73:ff:
                    14:10:41:31:2e:66:f0:6e:88:0e:a3:7b:ec:01:5e:
                    6a:dc:ff:80:01:36:e5:1f:f4:28:d7:3f:62:8b:1b:
                    29:27:ae:85:35:08:24:88:b0:d0:ff:0f:65:87:49:
                    87:5e:1c:12:ca:18:64:f6:14:d6:14:99:09:44:ab:
                    17:aa:fc:df:d4:50:ec:e2:61:ad:ab:72:72:f4:20:
                    40:23:84:44:8e:99:cf:34:a4:51:03:df:91:7b:63:
                    be:5b:fc:50:0c:0b:d4:99:c9:1c:df:29:df:8c:cb:
                    29:19:f4:04:59:e6:3a:d9:36:e8:5c:4c:6c:e9:63:
                    ef:20:71:31:bc:3c:5a:2f:1f:ce:a2:57:46:ea:c0:
                    7b:35:59:dd:fe:ef:ba:ed:04:d4:10:a5:b4:a0:0a:
                    9b:a7:64:0c:2b:81:31:a1:80:b6:0f:6c:bd:d3:3e:
                    35:71:38:1f:73:6a:c5:48:c1:a3:05:cd:87:5d:41:
                    56:5d:4a:45:73:ce:e5:64:ab:ae:0c:66:11:6e:6b:
                    b3:a1:03:da:d9:f6:f8:65:72:65:61:a2:d0:7f:d4:
                    2e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A3:B5:1A:BE:87:27:06:D7:6F:C2:B1:B6:05:5B:27:7F:08:C2:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/1ad9dbe6-d050-3c42-8c3f-1a7a52874fbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.crl

            X509v3 Authority Key Identifier:
                keyid:1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:c4:90:0d:c7:77:31:0d:58:c4:4d:63:8c:77:37:90:83:eb:
         d9:43:cd:1c:ba:11:72:a9:68:9c:3e:d1:01:07:af:9a:a8:21:
         a9:07:a9:eb:57:bc:b1:06:27:92:ab:37:7b:d0:6d:fc:0c:a8:
         2c:3e:dc:f1:36:37:60:32:f8:0f:2b:62:81:48:95:bb:07:56:
         16:e9:5d:60:2b:c4:a3:a0:d3:2f:a7:ff:01:9c:17:be:ef:32:
         99:99:dc:af:71:94:8a:0d:f2:1d:23:83:10:f9:ea:4f:bc:5b:
         19:c1:86:39:e2:5f:d8:9d:72:2a:be:9f:76:15:08:23:6b:4b:
         18:7d:89:9f:cb:6b:02:12:c1:7c:44:d8:be:97:f2:8e:03:3e:
         1d:b5:21:97:db:67:d8:bf:c1:3f:22:9c:74:b2:2a:3b:4e:63:
         e0:d4:85:0f:b2:7f:67:96:88:d3:1a:f2:7e:ae:55:19:cc:b7:
         fd:56:3f:da:eb:54:17:05:1b:9b:0d:0a:a4:91:d0:1c:00:c0:
         5a:4a:6e:3d:8f:7b:c2:09:23:6c:ad:a7:ce:69:2e:6f:97:23:
         0e:55:be:2d:4f:8d:c4:73:aa:4c:42:45:ba:1f:2e:01:5c:85:
         55:16:b3:b4:fb:47:ac:2f:3d:81:7a:de:96:c6:94:d4:eb:f2:
         f6:fc:70:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:06 2026 by rpki-client