Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/ca755e65-375b-3141-a78c-963d8a464836.roa
File:                     ca755e65-375b-3141-a78c-963d8a464836.roa (raw, json)
Hash identifier:          2G9gPwYoyLF5nChtcQqmaQaa2LQglJurkPfOorYsknE=
Subject key identifier:   58:20:23:A3:02:28:57:10:A0:82:7B:CE:B6:52:F2:61:14:00:31:3E
Certificate issuer:       /CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
Certificate serial:       010D0C9F4328584D91C00340EDE9A1958CB34A00
Authority key identifier: BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/ca755e65-375b-3141-a78c-963d8a464836.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     16509
IP address blocks:        206.146.130.0/24 maxlen: 24
                          206.146.131.0/24 maxlen: 24
                          206.146.132.0/24 maxlen: 24
                          206.146.133.0/24 maxlen: 24
                          206.146.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:03:40:ed:e9:a1:95:8c:b3:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc41d55-9cbd-403e-9fa7-a3334f1ede3d
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=2752874f-0b02-4ad8-bc9f-d36715db557c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:13:08:e8:4b:e2:52:67:84:b2:a3:56:4c:82:
                    53:3c:18:45:6b:88:0a:d5:db:2a:cf:32:b0:c0:27:
                    80:ad:e2:ce:5c:92:30:f7:85:6e:b5:be:0c:68:ce:
                    a1:05:5b:b8:97:27:7e:62:bd:5d:1e:f9:9b:5b:f2:
                    5d:e9:4c:35:55:6b:a4:f5:c7:cf:f2:b7:63:6f:6a:
                    13:6b:d4:00:22:25:1d:83:5e:c3:26:c3:36:78:f0:
                    ac:5b:8c:c8:e8:b5:44:42:0e:dd:ea:d6:9b:f1:43:
                    b3:43:ff:3f:54:4b:1e:02:cd:aa:7b:66:b0:c6:23:
                    1a:e2:38:60:2c:cd:c3:cb:d3:09:66:49:2e:f0:80:
                    07:9f:47:87:4d:f8:4b:4d:ed:a7:98:64:06:42:77:
                    49:42:50:47:7a:ac:65:49:ff:f9:e2:a0:b0:ff:f7:
                    a4:38:37:f2:62:75:bf:33:bc:c4:33:0e:43:01:fe:
                    d5:83:e9:61:fd:55:f5:bd:b3:1a:54:aa:94:57:99:
                    6c:ce:10:ad:ca:9e:91:e0:38:ca:9b:02:f3:af:24:
                    53:63:e6:f7:e1:44:2c:ce:e7:c9:a1:90:47:84:d7:
                    5d:15:b3:ba:e0:35:46:50:0c:11:2e:14:df:39:43:
                    ec:df:26:f2:8b:cc:b0:b9:b8:93:26:e8:21:79:ff:
                    35:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:20:23:A3:02:28:57:10:A0:82:7B:CE:B6:52:F2:61:14:00:31:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/ca755e65-375b-3141-a78c-963d8a464836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.crl

            X509v3 Authority Key Identifier:
                keyid:BD:09:90:7A:2D:9A:2F:56:65:B6:16:4C:EC:24:63:8A:F2:D2:09:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dbc41d55-9cbd-403e-9fa7-a3334f1ede3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.146.130.0-206.146.134.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:13:b4:25:7c:3d:f4:c8:35:16:2a:8e:e3:17:57:6c:6a:c6:
         9e:fb:c3:76:12:ac:9b:ff:de:46:20:0f:b6:d9:50:a8:fe:10:
         e5:f1:fb:88:ef:66:da:39:c1:a1:a1:e1:5a:40:f1:9b:35:7f:
         a7:72:f5:42:f6:1e:83:1c:d4:03:3c:78:42:1b:fd:52:6e:ed:
         d2:1f:b6:d0:ea:02:d5:9e:cc:bb:73:4d:27:b6:41:31:ea:ed:
         f0:aa:7e:91:14:a5:c8:00:08:41:a1:a1:fb:de:71:78:26:50:
         f9:80:04:56:5a:d6:7c:44:f3:14:88:8f:58:75:81:12:b8:26:
         b1:2d:bd:f9:5e:c0:22:da:9a:0b:bc:55:5b:b4:70:86:db:c6:
         ba:35:97:aa:42:f9:e5:0a:c7:2b:21:62:9c:5d:95:07:6a:9a:
         8b:70:79:56:22:34:f6:de:35:86:f6:8c:ce:f2:92:c8:10:f3:
         eb:ba:2d:64:05:df:79:1e:c6:0c:a1:66:a2:f2:d1:12:e1:4f:
         c9:08:51:81:b9:63:2c:ab:8f:ef:2d:05:95:01:1e:ae:d7:6c:
         ed:b3:32:b8:1c:82:ce:36:33:25:60:ae:19:be:4d:bc:d2:19:
         7b:b2:0d:b1:c4:69:c5:5c:bb:ce:42:81:a4:e1:af:26:2c:85:
         9c:19:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 16:11:25 2026 by rpki-client