Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/9ca001d3-ce56-3ac8-ad18-32ea3df3c497.roa
File:                     9ca001d3-ce56-3ac8-ad18-32ea3df3c497.roa (raw, json)
Hash identifier:          1RXkPQA8r8wLkKz+GQLaJBItso7wmKLbXndgdqerbAM=
Subject key identifier:   9D:97:17:AC:9C:54:5D:78:22:28:FF:22:29:99:7F:85:3E:6A:AF:7A
Certificate issuer:       /CN=ec3e698c-c88d-4621-b933-5d412f17844a
Certificate serial:       010D0C9F4328584EFD445C6FE54D1DF2B2615440
Authority key identifier: 84:53:1C:65:81:35:D3:CF:34:2C:DC:C5:ED:A4:FD:5A:CB:BC:B3:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/9ca001d3-ce56-3ac8-ad18-32ea3df3c497.roa
Signing time:             Fri 28 Aug 2026 18:05:46 +0000
ROA not before:           Fri 28 Aug 2026 18:05:46 +0000
ROA not after:            Thu 26 Nov 2026 19:05:46 +0000
asID:                     5650
IP address blocks:        130.17.112.0/20 maxlen: 24
                          130.17.144.0/20 maxlen: 24
                          130.17.176.0/20 maxlen: 24
                          130.17.208.0/20 maxlen: 24
                          130.17.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fd:44:5c:6f:e5:4d:1d:f2:b2:61:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3e698c-c88d-4621-b933-5d412f17844a
        Validity
            Not Before: Aug 28 18:05:46 2026 GMT
            Not After : Nov 26 19:05:46 2026 GMT
        Subject: CN=6287e249-a948-4f7a-bf44-bdecc1427da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:c1:a4:e9:26:ca:d7:50:0b:33:ca:07:59:
                    66:51:07:e1:bc:59:11:41:3c:30:0a:af:8a:ba:b5:
                    73:91:af:a4:66:b3:43:05:17:80:60:27:7a:cb:c8:
                    50:ab:6b:eb:af:0d:9a:17:06:1f:be:de:10:44:d3:
                    f2:16:39:84:de:38:60:a0:92:19:68:fd:48:79:bd:
                    96:16:aa:78:3a:00:7e:9a:a8:7f:81:84:9e:29:cc:
                    b5:28:ed:9d:58:03:77:e5:8c:fc:f1:99:84:3e:ff:
                    99:12:27:f1:0d:20:5f:a9:58:23:74:8d:78:47:7b:
                    6e:64:3c:ca:d5:5f:8f:85:d9:c8:8b:51:e2:af:b7:
                    8f:f1:46:75:a9:07:d6:f6:bd:b6:de:2f:4a:8f:3b:
                    d8:a4:87:a4:28:00:b8:1d:b2:c1:ec:f1:7d:03:74:
                    52:7b:74:70:29:a0:36:9c:92:68:48:70:7d:ff:b8:
                    c2:3c:3f:44:62:98:8b:61:44:c7:43:7c:59:3f:a6:
                    ea:fd:05:a1:b0:98:f1:89:a1:f4:4a:3b:b1:48:19:
                    7d:55:6e:16:fe:08:57:d8:52:b7:5d:43:98:00:8a:
                    eb:97:3a:bf:d0:41:fb:f6:a2:48:e7:4d:41:43:5e:
                    60:5a:bd:d4:fe:16:da:aa:32:7e:dc:8c:e9:d4:ea:
                    37:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:97:17:AC:9C:54:5D:78:22:28:FF:22:29:99:7F:85:3E:6A:AF:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/9ca001d3-ce56-3ac8-ad18-32ea3df3c497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a/ec3e698c-c88d-4621-b933-5d412f17844a.crl

            X509v3 Authority Key Identifier:
                keyid:84:53:1C:65:81:35:D3:CF:34:2C:DC:C5:ED:A4:FD:5A:CB:BC:B3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ec3e698c-c88d-4621-b933-5d412f17844a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.17.112.0/20
                  130.17.144.0/20
                  130.17.176.0/20
                  130.17.208.0/20
                  130.17.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:73:f5:1f:e1:bf:9f:cd:0f:8a:76:19:a1:01:9f:30:4a:
         b3:84:40:35:2e:fb:9c:80:50:21:1e:f4:13:fc:4d:02:b5:4a:
         85:73:93:79:32:32:15:7a:10:8c:66:ac:ff:bb:fd:78:3c:af:
         ca:41:8c:15:f9:02:ac:6e:f1:b2:1f:69:3e:2c:8c:27:80:43:
         74:2e:3f:e2:a2:19:c2:9e:a7:a6:61:54:cd:c8:de:20:9d:f0:
         06:52:e7:92:56:c0:5f:aa:8e:73:5c:08:52:dc:2b:73:31:d6:
         55:d9:a2:73:55:68:2f:9e:6e:36:48:ce:a8:f1:10:6b:0c:a9:
         05:0d:79:0e:78:e1:8b:9e:a5:94:59:bb:a6:06:d6:ea:fc:77:
         66:61:7b:56:67:f4:16:e8:94:72:2d:70:cb:4c:b5:f2:e1:1f:
         50:7c:32:07:dc:b8:3d:12:e2:e7:0b:1a:15:d4:ed:ba:51:8d:
         12:26:e3:57:ab:58:3c:db:2a:5a:f6:59:5a:6f:a7:45:fb:33:
         b4:9d:c4:1c:0e:bd:cf:ab:60:bb:46:57:cd:bf:12:6b:24:92:
         89:28:ca:15:8c:03:6c:52:79:94:b3:36:f6:c0:10:a4:28:c5:
         d5:88:a9:ce:c3:18:a3:79:f5:59:64:42:cd:4c:94:59:96:a0:
         20:02:36:c9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 00:56:23 2026 by rpki-client