Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4a8fdf8f-6841-3f77-8cc9-51d71542c4db.roa
File:                     4a8fdf8f-6841-3f77-8cc9-51d71542c4db.roa (raw, json)
Hash identifier:          i0hCWpKeeMn/4bg59yvGGkhoelDIuuz9eZx1EHhQW0Y=
Subject key identifier:   FF:91:0A:00:51:F4:62:86:1A:3F:A1:37:F2:37:BD:76:39:94:1D:AE
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D5884E0B6EA7E2D2F4F844040
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4a8fdf8f-6841-3f77-8cc9-51d71542c4db.roa
Signing time:             Tue 31 Mar 2026 01:00:23 +0000
ROA not before:           Tue 31 Mar 2026 01:00:23 +0000
ROA not after:            Mon 29 Jun 2026 01:00:23 +0000
asID:                     35039
IP address blocks:        130.214.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:58:84:e0:b6:ea:7e:2d:2f:4f:84:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 01:00:23 2026 GMT
            Not After : Jun 29 01:00:23 2026 GMT
        Subject: CN=ab2681b5-27be-42d8-baa9-1e905b38ee1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0e:53:7f:66:01:c3:68:f5:f3:79:de:bc:0d:
                    76:e5:77:ca:8d:a3:c9:c0:1c:a2:da:93:5a:ca:d4:
                    9e:e2:9a:ce:89:f4:43:85:fc:bb:7b:e6:58:78:8f:
                    6e:b5:86:24:89:81:2e:fd:b8:49:a9:18:45:cf:44:
                    37:59:bd:8d:e1:97:d8:16:bb:ad:a6:53:be:28:08:
                    63:a9:53:b9:78:18:2f:01:f6:c1:e8:de:c4:2c:3c:
                    83:72:1f:23:81:c5:b0:4c:77:a7:8f:ad:ea:a7:0a:
                    47:4f:77:f7:dd:c2:e5:90:46:0d:bd:91:dd:2d:86:
                    69:94:ce:3d:ea:e8:08:e8:35:9d:24:ce:92:97:83:
                    7a:e6:05:fd:56:68:1b:53:53:3d:87:52:0b:b5:58:
                    43:ce:cc:04:d5:0c:de:63:8b:5c:56:84:c3:f5:6a:
                    f1:91:d5:f7:eb:93:ff:3e:0a:67:e6:0b:5c:eb:d5:
                    b3:5d:0c:7f:7b:fe:6a:57:16:f5:8c:62:3f:f8:d9:
                    96:0c:d8:92:fe:1e:f5:60:cf:b0:4e:4b:28:6e:e3:
                    a9:f0:e1:84:e5:43:b6:02:bf:67:24:11:35:c6:bc:
                    d9:ba:25:b7:d7:56:3e:9d:4b:b4:49:8a:99:ba:96:
                    05:4e:4e:96:10:39:a0:51:0b:d0:81:e2:03:1e:45:
                    35:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:91:0A:00:51:F4:62:86:1A:3F:A1:37:F2:37:BD:76:39:94:1D:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/4a8fdf8f-6841-3f77-8cc9-51d71542c4db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:99:ff:ef:17:bf:2b:33:37:96:35:a4:73:e4:34:30:e2:9e:
         34:1b:7b:d6:0f:f9:f1:39:e7:a7:a7:c9:94:1b:a5:9b:d3:25:
         a6:51:04:fb:95:dc:04:39:a8:8e:c6:ed:b1:88:a7:da:eb:d8:
         50:66:58:21:72:48:58:d4:44:9b:44:11:01:1f:35:6e:93:c4:
         b3:9f:ae:4e:c2:f6:e0:85:a3:0b:9d:da:d9:2b:aa:ed:aa:d2:
         d9:36:8b:ef:d1:ca:58:f1:68:53:0e:81:76:73:6b:e0:a9:96:
         ec:7d:11:1e:20:1e:25:4e:b5:bc:d0:cb:f9:87:ed:35:1d:18:
         14:41:dd:6a:1b:6c:4b:1d:1b:06:49:27:17:db:e3:bd:90:92:
         0a:74:5b:22:9c:e5:0f:ba:49:c3:8a:a5:ac:c4:e5:91:c2:64:
         73:01:f7:77:1c:b4:0b:9f:db:5e:02:62:97:a7:f9:20:b5:32:
         1d:7a:e9:2e:3d:82:45:4c:eb:2a:47:fd:99:ff:8b:e4:49:c0:
         69:32:9f:b5:83:c6:1d:3c:94:5c:a6:86:5d:03:89:df:62:ee:
         a3:b3:7b:b1:23:0a:55:87:66:7e:3c:ff:12:2c:13:d9:b4:bc:
         c1:52:f4:95:8c:34:32:6a:7a:b3:2f:35:24:90:c2:19:2d:db:
         01:c2:79:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 15:21:47 2026 by rpki-client