Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b/a5ca46c0-07c9-378f-9340-567eeed17497.roa
File:                     a5ca46c0-07c9-378f-9340-567eeed17497.roa (raw, json)
Hash identifier:          NVpKZw0wjqZ1MxDRwJKTSI99NzWYVO3MkicPhw7K9sA=
Subject key identifier:   AA:50:22:F5:F4:B9:55:B7:7D:D6:86:47:6C:48:8C:F5:9E:F0:1F:72
Certificate issuer:       /CN=f479dd6e-72a6-4b03-9a2d-968a79b3aa1b
Certificate serial:       010D0C9F4328584EA7F92CCDF02991B18EC0ABE0
Authority key identifier: 63:0E:9E:26:50:DB:1D:24:B6:52:73:B4:08:88:6E:64:A9:7B:33:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b/a5ca46c0-07c9-378f-9340-567eeed17497.roa
Signing time:             Wed 29 Jul 2026 04:50:34 +0000
ROA not before:           Wed 29 Jul 2026 04:50:34 +0000
ROA not after:            Tue 27 Oct 2026 04:50:34 +0000
asID:                     400584
IP address blocks:        130.51.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:f9:2c:cd:f0:29:91:b1:8e:c0:ab:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f479dd6e-72a6-4b03-9a2d-968a79b3aa1b
        Validity
            Not Before: Jul 29 04:50:34 2026 GMT
            Not After : Oct 27 04:50:34 2026 GMT
        Subject: CN=fc00abb3-6232-4d1f-9581-12c2eabc56a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2c:28:0d:14:ce:3b:29:6d:49:87:65:aa:a4:
                    4d:4a:05:08:b3:c8:5e:9e:e3:d7:d8:94:ae:5d:1b:
                    ad:3f:6d:b0:93:bb:40:d9:ef:78:b0:39:a1:c4:9d:
                    a5:19:79:b6:c5:be:95:cb:1e:93:a2:23:bb:fb:e9:
                    0c:48:0f:09:05:01:b8:52:70:f9:6e:5f:12:89:84:
                    88:92:58:d0:3e:bb:08:97:c1:e3:e0:52:fc:73:61:
                    5c:cc:a1:dd:8c:50:3b:f1:68:bb:3c:06:a3:57:83:
                    a3:58:9f:d1:4b:a8:f9:60:3f:09:18:b8:51:5a:24:
                    72:5a:fc:11:a8:51:49:55:eb:31:8f:41:21:9a:a3:
                    b3:22:be:84:28:e3:fa:ec:cf:92:51:28:a3:94:6e:
                    6d:b2:fd:32:44:0a:dd:49:24:88:1b:98:fe:d6:43:
                    1b:73:7b:b0:63:b6:17:0b:fd:ea:e7:5a:24:56:52:
                    43:fb:54:e6:11:04:2c:16:c2:c3:04:86:de:64:a7:
                    d4:f7:85:0d:15:2d:25:8a:f2:d1:36:37:6f:80:7f:
                    e9:6b:e3:d3:e6:b8:a2:7b:0e:b5:d3:2e:56:64:dc:
                    a6:be:b5:f6:a2:d9:e1:e9:46:35:22:71:2b:31:5b:
                    65:8e:96:79:a7:27:75:04:df:f0:53:b9:83:02:f5:
                    b8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:50:22:F5:F4:B9:55:B7:7D:D6:86:47:6C:48:8C:F5:9E:F0:1F:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b/a5ca46c0-07c9-378f-9340-567eeed17497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b.crl

            X509v3 Authority Key Identifier:
                keyid:63:0E:9E:26:50:DB:1D:24:B6:52:73:B4:08:88:6E:64:A9:7B:33:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f479dd6e-72a6-4b03-9a2d-968a79b3aa1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:57:96:b5:31:92:a6:33:1a:0d:40:ea:07:e4:6c:83:1f:
         a6:2d:85:b3:f8:b8:b6:e1:b8:e4:4c:c3:2b:58:47:27:77:b8:
         48:a4:90:13:85:a4:59:1b:3d:7f:2c:ad:1c:9f:9d:4a:fe:94:
         6a:cf:1b:c2:d5:3f:0c:e4:9c:3c:41:7f:0f:e1:d0:55:d9:0e:
         86:91:a8:cb:9b:44:7f:2a:93:5c:45:98:30:de:bc:cf:40:26:
         67:3f:c4:67:1b:93:d1:6d:2f:2d:dd:42:e8:b5:a6:22:c0:13:
         84:95:71:66:ee:85:75:9c:76:4a:e7:04:2e:6a:54:9e:0a:61:
         3a:ed:5e:43:bd:d8:71:e2:1f:89:7c:40:e8:b7:00:65:02:32:
         fa:a4:a3:06:e7:2c:be:cb:62:b7:61:7d:36:06:96:84:54:7e:
         1f:c0:d6:10:80:55:65:13:e1:a7:9f:76:c9:01:4e:43:ad:65:
         a7:73:c0:15:1b:1c:01:67:2d:75:15:c8:30:da:b9:99:14:da:
         74:f4:02:9f:34:74:93:87:69:f1:bc:20:1c:b3:bb:dd:c9:b8:
         89:f1:08:ba:7b:3e:f1:ab:c4:69:9f:18:df:36:41:1f:e7:3c:
         24:73:90:e6:ea:33:90:20:6a:7b:02:cb:be:76:74:99:6e:9e:
         33:54:51:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 18:15:42 2026 by rpki-client