Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/91cacfd3-40a2-3f03-aff2-cbff5d133445.roa
File:                     91cacfd3-40a2-3f03-aff2-cbff5d133445.roa (raw, json)
Hash identifier:          pcMSzeBs0tTjj3F5fBwcqpp178r8ZcwaftdQu8IySkA=
Subject key identifier:   A7:74:D8:88:A1:6A:13:BB:55:21:9F:81:11:7A:0B:41:44:C5:39:7F
Certificate issuer:       /CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1
Certificate serial:       010D0C9F4328584E841B47FCAB838777A895A900
Authority key identifier: 1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/91cacfd3-40a2-3f03-aff2-cbff5d133445.roa
Signing time:             Thu 16 Jul 2026 08:30:11 +0000
ROA not before:           Thu 16 Jul 2026 08:30:11 +0000
ROA not after:            Wed 14 Oct 2026 08:30:11 +0000
asID:                     402698
IP address blocks:        134.49.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:84:1b:47:fc:ab:83:87:77:a8:95:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6bc3b2-e621-4272-b604-10ed5dbb4ec1
        Validity
            Not Before: Jul 16 08:30:11 2026 GMT
            Not After : Oct 14 08:30:11 2026 GMT
        Subject: CN=56ddfd15-d9cb-4505-9080-1712a6e7d02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:0c:1c:19:61:8e:47:aa:db:25:35:c7:4a:
                    27:13:51:c0:d3:0a:c5:55:ad:2c:92:df:86:5a:e1:
                    50:25:15:12:5a:45:b8:04:f4:a0:fd:11:d1:9f:a3:
                    2c:23:f1:96:4e:d9:a2:de:96:19:2d:e2:f8:4b:73:
                    e8:b5:01:f8:58:d5:66:57:ff:40:1a:dd:4c:b3:4a:
                    45:e1:ba:85:dc:09:56:02:e4:eb:24:3b:3d:9d:bb:
                    7c:1b:1a:73:88:b2:a6:d2:40:e5:99:0a:69:34:dc:
                    f8:09:7e:af:c5:52:1f:e4:23:ef:37:c5:8a:d2:27:
                    71:ca:75:fc:57:63:1e:80:7c:c9:c9:8b:4e:48:27:
                    58:c4:ed:17:3d:f4:9d:4e:e4:3a:fd:91:78:a3:a4:
                    d0:a3:98:7e:ca:67:70:71:6d:bf:63:76:8c:0d:b3:
                    79:53:11:b0:3d:43:1e:a2:b8:10:5f:16:68:8a:66:
                    49:aa:c6:d7:04:9c:7e:71:bf:de:70:ab:cf:63:22:
                    2a:2d:08:f0:7a:02:5c:77:47:95:56:c7:1a:79:41:
                    ae:ce:77:ba:a1:a5:ab:47:5f:e8:b4:8c:da:fd:99:
                    4e:4d:ce:98:a3:75:65:19:56:9c:7d:b1:c8:fd:b7:
                    98:86:3e:95:39:d0:fb:e2:90:8d:95:3d:d0:3c:ac:
                    dd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:74:D8:88:A1:6A:13:BB:55:21:9F:81:11:7A:0B:41:44:C5:39:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/91cacfd3-40a2-3f03-aff2-cbff5d133445.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.crl

            X509v3 Authority Key Identifier:
                keyid:1D:BC:EE:CF:67:F3:69:75:60:82:16:8B:46:FC:F1:8B:8E:2F:09:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/df6bc3b2-e621-4272-b604-10ed5dbb4ec1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:26:f0:22:70:8d:6f:6e:4c:ba:87:82:2d:84:13:45:30:
         80:0b:58:83:18:09:24:ec:e6:8e:07:00:5c:57:19:e2:86:0f:
         ef:af:07:9a:92:fd:f4:ad:6d:0b:f1:f6:1e:58:83:f5:ac:49:
         f0:df:ee:6f:e6:20:89:fd:f5:52:c7:3d:09:23:39:aa:d2:a9:
         2f:d8:48:ee:52:c5:4d:55:a8:28:8f:c8:19:c3:1d:da:85:2c:
         b1:6f:6e:06:8b:af:3c:93:1b:82:0e:b5:84:67:18:01:94:08:
         5d:5e:69:33:e1:71:10:be:e1:c6:2b:24:e3:5e:79:20:b9:1a:
         98:c3:61:26:c7:3d:6a:d4:86:0a:d5:49:40:f9:8d:d9:76:46:
         b1:11:24:06:f8:75:35:44:42:d5:8a:b9:49:ea:e0:35:52:59:
         c9:d7:a9:d6:c8:57:b0:f0:bf:05:a0:64:a8:9b:cf:1c:3b:e1:
         57:17:35:96:e8:c1:da:33:d7:f7:f3:f7:1f:f8:75:f0:b6:f4:
         74:1e:87:47:f4:d6:97:a3:20:0c:5c:4b:0e:0a:40:19:b7:56:
         51:88:63:5e:80:50:a1:15:39:3b:76:6c:0a:7f:3b:40:00:6b:
         16:d3:a0:41:30:17:40:52:dc:ff:f8:4c:1c:f0:47:06:79:cc:
         32:af:0a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:32 2026 by rpki-client