Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/47bcbe84-d341-3dd9-973d-16c0e84d3b92.roa
File:                     47bcbe84-d341-3dd9-973d-16c0e84d3b92.roa (raw, json)
Hash identifier:          EarwexHGtyy10mwz94KBasCs9CdNN9SrNM2wtDQiyR4=
Subject key identifier:   C1:85:BC:C7:CC:73:F7:95:83:88:1B:5F:D3:E0:9E:97:D5:EB:01:D3
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884E88856D82A1649CE87C0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/47bcbe84-d341-3dd9-973d-16c0e84d3b92.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:e8:88:56:d8:2a:16:49:ce:87:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=cc333f27-fbc1-4a35-9942-b44a4aa85495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6f:5d:a8:55:16:06:34:ab:20:08:83:ba:58:
                    aa:2e:4c:4b:bf:cc:f3:13:ab:13:83:e5:ed:58:da:
                    75:2c:bb:c5:a6:cc:c6:7d:90:01:d8:96:b5:ee:c1:
                    1e:a0:4f:1c:47:87:a1:05:0f:d3:d4:d7:28:3a:b2:
                    52:8e:ff:28:df:08:15:56:99:80:1f:ce:fe:5e:64:
                    e2:12:d1:3b:74:b0:d1:0f:e2:bf:18:8b:55:4f:c3:
                    05:44:34:ed:eb:dd:2d:58:c5:3d:da:31:ab:c0:f4:
                    64:68:d2:1b:5c:fe:48:e1:c7:c5:3c:be:31:5d:28:
                    42:b6:4d:ca:1e:cd:e6:b8:72:c1:0f:b3:26:99:66:
                    61:d5:57:8f:b6:57:24:2d:67:ec:24:11:65:75:2e:
                    8c:39:26:74:76:86:75:1b:64:7c:60:ec:70:da:76:
                    5a:88:d7:51:50:40:ff:17:6a:68:80:b5:f4:b6:2f:
                    0e:0f:b9:88:b9:ed:b9:d8:3e:ce:0a:0e:2f:d9:10:
                    7c:be:91:22:cf:37:30:4f:a6:17:ab:5f:3a:1d:35:
                    9f:37:4f:6c:df:54:63:d6:c7:fb:84:b4:36:a4:c8:
                    86:08:22:b5:3e:b1:f8:95:5a:11:7d:37:65:55:41:
                    21:0f:36:cb:75:b6:41:fc:fb:14:89:86:90:df:c3:
                    6b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:85:BC:C7:CC:73:F7:95:83:88:1B:5F:D3:E0:9E:97:D5:EB:01:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/47bcbe84-d341-3dd9-973d-16c0e84d3b92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:75:87:13:88:5f:e9:96:bf:40:ea:77:e5:ee:59:cd:0e:9e:
         ca:db:c0:bf:27:e1:0e:d5:ee:41:14:28:3a:72:02:12:70:e3:
         34:21:02:bb:66:86:78:af:b8:13:19:0e:29:b0:10:65:5d:0a:
         42:a8:4e:e5:e0:72:2a:21:86:b3:e6:21:e7:27:4a:4c:75:e9:
         50:af:1f:9c:69:44:ff:8d:bc:81:39:eb:a1:b6:b3:fa:e4:b9:
         d3:12:9a:a7:45:c9:cd:5c:e9:50:c9:a7:a0:95:de:b2:c2:f3:
         01:2c:91:57:40:eb:ac:94:e3:20:e3:b8:17:61:0a:4a:36:26:
         a5:1e:96:bb:3f:bf:3a:89:08:d1:9a:c5:af:eb:7e:82:de:01:
         77:69:79:14:08:b9:a6:5a:57:9c:3e:fc:01:44:40:9d:e9:a9:
         f6:e4:f2:a4:e9:d5:7c:27:f0:b5:9c:fe:a8:4a:a7:e2:c6:d3:
         53:8b:a5:cb:72:fa:e5:ad:70:e6:23:f4:66:c1:38:9a:ed:c4:
         78:eb:0a:6d:06:34:92:41:90:d0:19:f6:53:ff:92:86:92:2a:
         a4:84:32:1f:e3:e6:5c:6d:8a:f0:2b:b6:e9:b1:9b:39:85:14:
         cd:2a:5b:e0:66:84:5f:4d:c4:dd:3c:c2:14:83:1b:22:35:f8:
         e2:b9:f5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:21:35 2026 by rpki-client