Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa
File:                     4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa (raw, json)
Hash identifier:          /CvTdbBFYjcSqv6z/uqM1yrAYWWH2DioHZgZAcIre4c=
Subject key identifier:   6E:0F:EE:CB:C7:66:D8:E6:21:1C:B3:6B:4D:AF:E5:FA:53:B5:DA:94
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F4328584DBBA043011B194387A7B36EC0
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     1239
IP address blocks:        149.143.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:43:01:1b:19:43:87:a7:b3:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=79937b32-21a8-4d43-ba3b-41e0ef015a51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:da:e2:62:3c:3a:7b:3c:ed:25:93:fa:02:
                    9d:d2:8b:21:39:32:94:81:ce:82:42:3e:35:9f:b1:
                    42:7b:07:1e:a5:4d:84:f2:ff:57:bf:39:73:6f:ba:
                    1c:8d:c3:09:ab:16:58:3d:b5:1f:69:40:d4:ce:24:
                    ac:79:c4:48:d3:b2:7e:42:98:66:4b:e4:9b:60:16:
                    ad:7e:62:a0:13:33:2c:3c:4c:88:3a:ba:1e:bd:3a:
                    8c:fb:1e:09:3d:69:08:2e:de:06:f9:16:bf:29:26:
                    a5:ee:d4:e1:48:10:4d:59:46:06:bc:e7:94:00:f6:
                    c8:7f:94:9c:33:3c:40:c2:13:17:ac:f4:2b:3b:97:
                    ac:94:b1:6c:06:6c:9b:22:18:5f:7b:de:62:ae:aa:
                    df:1d:ee:88:9e:4d:c9:c8:55:a8:bb:ef:1f:08:06:
                    4f:42:22:e4:1f:e5:d6:04:22:72:c6:07:d2:37:58:
                    5b:be:05:89:58:7b:79:fd:2c:05:00:2e:13:5a:96:
                    07:9a:bf:12:19:61:b8:b7:dc:c5:ef:47:7e:67:84:
                    e5:4c:17:0b:b5:41:9a:78:c0:2f:88:10:97:69:28:
                    0a:3a:e4:de:f5:d4:19:37:5a:8d:64:e7:53:96:56:
                    a9:b1:a6:5c:1a:b7:2f:f4:07:5e:34:e9:42:f6:ff:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:EE:CB:C7:66:D8:E6:21:1C:B3:6B:4D:AF:E5:FA:53:B5:DA:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/4bdfa5f6-cd73-3bbb-b10a-c15cd44fd57f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.143.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:fa:07:7c:c5:d9:a0:f6:69:57:2b:cb:44:b0:86:ad:2c:46:
         d4:ec:1b:fe:83:f1:d9:ec:72:2c:77:a5:1d:f6:fb:08:f1:2f:
         b4:c7:b3:4c:d9:ad:6d:42:aa:53:1c:b4:db:fe:90:2f:d3:7a:
         8d:64:07:40:1e:fe:ea:8a:bc:73:99:eb:41:2a:b3:d8:3c:53:
         a4:bb:fe:44:24:52:b7:26:6e:e7:30:b4:be:24:59:ff:d2:6a:
         ae:e9:00:af:80:7c:ca:d5:66:1e:82:48:1b:9f:e2:11:7a:c1:
         9b:96:80:c5:38:68:be:2c:4c:4d:5c:2b:a6:93:eb:15:9d:02:
         79:86:64:32:b3:cc:cb:23:24:56:4f:29:08:82:3d:f7:f5:d2:
         48:15:29:94:91:e9:3d:27:11:c4:e0:d1:0b:e8:70:c3:b1:9c:
         35:89:ca:86:74:61:fd:38:72:92:77:ae:e4:c0:61:cc:2d:ef:
         b7:28:87:99:24:76:36:eb:41:a8:58:19:53:b5:61:91:0c:6c:
         4e:86:bd:96:de:01:f7:88:3a:54:e4:e2:9b:06:a4:68:54:22:
         79:2f:9d:db:0d:e4:50:e7:91:9e:44:23:37:2b:b2:54:5b:44:
         60:89:94:cf:ae:70:71:f6:dc:ed:5e:f3:94:27:89:13:c7:aa:
         a1:4e:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 07:10:21 2026 by rpki-client