Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/1ac40657-be62-351c-829a-e9b68d782f32.roa
File:                     1ac40657-be62-351c-829a-e9b68d782f32.roa (raw, json)
Hash identifier:          V2zloDQDyseBEq7zFu36f6sABNNwH39ezx06J3vsMtU=
Subject key identifier:   C0:17:EF:BD:96:33:F9:4C:09:F3:8C:2B:6F:29:D9:13:16:F2:75:1F
Certificate issuer:       /CN=75c2d703-b68a-47d9-8657-d65247155419
Certificate serial:       010D0C9F4328584D5024F22AC54141CB152A8E80
Authority key identifier: 06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/1ac40657-be62-351c-829a-e9b68d782f32.roa
Signing time:             Sat 28 Mar 2026 01:00:31 +0000
ROA not before:           Sat 28 Mar 2026 01:00:31 +0000
ROA not after:            Fri 26 Jun 2026 01:00:31 +0000
asID:                     16611
IP address blocks:        130.12.184.0/22 maxlen: 24
                          149.112.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 31 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:50:24:f2:2a:c5:41:41:cb:15:2a:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75c2d703-b68a-47d9-8657-d65247155419
        Validity
            Not Before: Mar 28 01:00:31 2026 GMT
            Not After : Jun 26 01:00:31 2026 GMT
        Subject: CN=6d9e956d-6d8a-4ce8-bfe9-798fdf674a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:99:e0:66:7d:14:47:20:76:24:14:4e:12:
                    df:d4:f6:dc:16:8d:2e:9e:b7:13:32:fc:b0:d4:b3:
                    c5:6a:13:62:97:cd:df:87:8a:29:58:a4:35:ab:79:
                    2f:9b:91:75:d7:3b:0b:27:de:c1:85:cb:12:47:d0:
                    c6:b3:8e:d7:56:26:e4:5a:56:db:b5:35:00:cb:ac:
                    67:4c:de:49:41:3e:e0:d9:33:c5:82:62:e3:f6:16:
                    dc:30:0b:8f:44:68:fa:52:7e:a7:d3:47:6b:49:4e:
                    7c:5b:60:3f:b2:fd:41:ef:8f:a7:d2:14:79:9b:aa:
                    10:9b:7c:72:67:b0:f5:e9:40:e3:5d:9d:74:51:a1:
                    07:c9:b8:df:d4:c1:3b:97:40:0c:79:8e:ca:f8:47:
                    3b:9a:54:e6:7a:2c:8c:eb:a5:af:44:70:a6:f0:0e:
                    df:33:c5:18:a2:a2:d7:76:57:16:12:63:1a:61:a6:
                    79:61:12:b1:f9:27:16:7f:4f:66:fb:b6:ee:0b:03:
                    cc:a0:97:0a:21:e1:8f:57:eb:de:89:c1:9c:ac:ed:
                    58:ad:da:8c:bf:23:a0:aa:e4:82:2a:4c:7b:23:d4:
                    08:a8:dd:47:f8:7e:bf:5f:79:b5:b2:94:ce:58:7e:
                    44:00:a2:c2:45:b0:a3:35:0b:4b:f0:4c:69:42:f0:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:17:EF:BD:96:33:F9:4C:09:F3:8C:2B:6F:29:D9:13:16:F2:75:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/1ac40657-be62-351c-829a-e9b68d782f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419/75c2d703-b68a-47d9-8657-d65247155419.crl

            X509v3 Authority Key Identifier:
                keyid:06:9E:87:51:40:72:70:04:B4:5A:EC:27:55:92:3D:CF:16:A2:28:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/75c2d703-b68a-47d9-8657-d65247155419.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.184.0/22
                  149.112.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b2:75:ba:a4:4e:44:a0:c4:cb:66:ff:87:97:87:a5:34:fd:
         43:c6:55:d1:bf:1c:df:9a:60:8a:1c:4b:54:d7:57:16:41:1e:
         f8:5f:9d:e4:0f:1d:2f:36:dd:24:54:eb:69:76:ef:74:c4:11:
         cb:af:7f:be:09:14:2e:3e:b0:8b:50:44:10:be:77:cf:2d:09:
         65:20:57:9f:1c:ef:1d:fb:32:a2:31:10:f3:83:38:b8:27:e0:
         9b:22:e2:67:72:66:b0:c5:fa:7a:20:ec:cf:ac:41:d8:63:1a:
         41:e2:fb:5b:fb:49:4d:e6:ab:bd:ef:b2:b1:a3:12:b7:7f:f3:
         fd:30:70:8f:3c:98:17:0b:1e:cb:d9:fc:30:0c:9b:40:6d:a2:
         0d:ae:84:01:c6:48:6a:a6:47:1f:97:50:5f:5e:45:e7:4e:c0:
         c4:4e:c7:28:27:45:dc:e6:da:a3:38:cd:ea:19:2c:3e:8a:07:
         33:34:11:e3:36:49:ac:6d:ed:ec:3b:49:87:42:cc:99:88:ef:
         d6:09:8a:3f:06:4a:5f:c4:4b:d7:fb:71:08:80:b3:e9:c7:38:
         28:0a:d2:2f:a7:e3:11:1e:d7:07:c8:30:bb:e1:dd:df:92:bf:
         5f:0f:4c:42:d5:78:a1:7b:3c:68:a8:28:ba:04:40:0f:d8:60:
         11:78:87:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 16:23:17 2026 by rpki-client