Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa
File:                     d3bab822-4cb5-3a34-898f-cd524c33f81c.roa (raw, json)
Hash identifier:          GGztQaFoQEYg9gcWzW5xj2X9VKCNe1uYr0ERqL5bsF4=
Subject key identifier:   4A:9B:7B:F4:F7:4B:4B:77:D8:35:E0:AD:61:A6:C1:94:6E:05:58:2B
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584DA97AB2D3B92CA10111748000
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa
Signing time:             Wed 29 Apr 2026 01:00:23 +0000
ROA not before:           Wed 29 Apr 2026 01:00:23 +0000
ROA not after:            Tue 28 Jul 2026 01:00:23 +0000
asID:                     2648
IP address blocks:        132.163.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a9:7a:b2:d3:b9:2c:a1:01:11:74:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Apr 29 01:00:23 2026 GMT
            Not After : Jul 28 01:00:23 2026 GMT
        Subject: CN=31791e1d-daa8-4706-8ca0-398fb8e842be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:05:4f:ef:2a:fd:8b:3d:1d:97:8d:28:fd:
                    69:ea:94:18:27:78:1d:0d:5a:b7:0d:97:5b:06:67:
                    3d:29:f8:b7:fa:cd:91:47:13:f2:9a:cc:90:92:7a:
                    42:f1:f8:c0:35:d7:e9:cc:c3:0e:cf:f1:15:11:2b:
                    76:08:ae:08:8f:78:b1:0d:48:28:2f:73:eb:eb:15:
                    d1:dc:86:2c:fb:db:d8:6f:3f:61:97:3b:a8:91:91:
                    18:16:bf:f0:94:56:9a:3b:09:d5:56:cb:23:0d:6c:
                    c5:c0:a0:16:c8:55:3d:e4:24:5a:45:e8:a5:88:51:
                    d6:51:2d:f2:00:3a:a9:f2:1d:56:33:9d:77:07:e4:
                    8f:26:c3:2a:94:b5:f0:f1:a7:da:15:ba:26:fe:52:
                    81:53:c4:f7:da:b2:71:37:00:2d:2f:44:2a:6a:9c:
                    55:6d:3f:e1:d8:20:f1:fb:4d:7a:a8:57:91:57:d9:
                    18:ca:e4:20:0e:b0:9a:b9:60:12:31:19:b7:24:61:
                    8b:3f:98:17:6b:bc:ef:fe:0b:5b:4d:91:3a:77:08:
                    0b:99:62:28:d3:61:ac:6a:17:34:ba:34:1b:f9:6a:
                    13:03:52:9d:58:36:28:03:aa:9d:2b:51:6b:c5:7f:
                    d0:4d:b7:0f:22:17:df:ac:f7:c9:cb:3b:4c:97:bf:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9B:7B:F4:F7:4B:4B:77:D8:35:E0:AD:61:A6:C1:94:6E:05:58:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.163.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:28:cc:f9:ac:48:8d:d8:0a:36:e6:c4:2c:04:f1:cd:19:94:
         77:6b:47:b0:55:b9:07:1b:e5:38:d3:18:58:e7:00:9e:3e:71:
         22:9d:af:70:77:d3:0e:d0:3d:00:db:8a:56:3b:44:91:5f:d1:
         af:07:08:19:f3:1f:b6:da:c3:30:a9:b7:36:ce:a1:c5:8b:bc:
         80:8b:9a:33:72:bf:e4:9a:2d:0f:c2:15:aa:e1:23:be:16:4a:
         81:d8:be:4c:6e:eb:2e:ac:f7:ef:32:3d:4f:1c:7a:21:2b:bd:
         f7:08:49:87:be:43:56:c0:1e:1c:9e:d5:8c:17:78:f0:ae:af:
         0d:7a:a9:3e:d0:a0:06:58:55:a6:da:91:c6:54:58:9b:ab:74:
         13:a0:d6:ca:30:20:23:05:39:26:1c:7b:85:11:fb:d3:96:7c:
         e5:bb:82:6d:20:41:8f:9a:be:c6:b4:6d:88:21:3f:2d:90:f5:
         fb:a8:98:5c:84:8c:b8:c8:a6:b5:1f:a5:e0:48:57:82:13:55:
         07:54:da:82:f3:bf:b3:b5:49:9b:58:ab:99:fb:9f:0f:fc:e1:
         ec:5b:92:ef:15:17:10:c0:fa:88:48:f4:8a:44:c5:7b:a2:99:
         87:26:1a:5f:c0:16:36:2d:25:04:47:f7:2c:82:78:18:44:b0:
         22:36:dc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 02:54:32 2026 by rpki-client