Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/59ddef71-2263-32fe-b0ad-4f909d6dc146.roa
File:                     59ddef71-2263-32fe-b0ad-4f909d6dc146.roa (raw, json)
Hash identifier:          Tuw2trz6NdOnBfWSarCYdXipdP1+sv6kpdXH11a6JZg=
Subject key identifier:   DD:61:38:F2:E4:92:81:A2:E3:E2:1C:E9:19:23:55:9F:F2:AF:C7:8F
Certificate issuer:       /CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8
Certificate serial:       010D0C9F4328584E9EAFD95A7096B87BDBCD3AA8
Authority key identifier: 4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/59ddef71-2263-32fe-b0ad-4f909d6dc146.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     13437
IP address blocks:        131.143.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:d9:5a:70:96:b8:7b:db:cd:3a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d980a0a8-78bc-4289-825d-1bb9a5a192c8
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=b10a7de1-daa9-4ae9-9815-ee7d29c53d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bc:5e:49:12:45:e9:f9:8f:d5:17:ad:4c:33:
                    6b:97:77:7f:f6:36:2b:3d:11:9c:f0:95:59:8a:2b:
                    a8:26:39:2d:7a:89:79:38:33:91:a8:0b:b6:71:19:
                    05:d1:e4:b6:52:24:af:4f:9d:a2:df:9f:7a:65:e9:
                    4e:aa:0b:41:50:ed:8d:65:80:14:7f:af:53:43:7d:
                    ac:39:37:be:ed:8f:53:f8:4f:3b:7e:4d:d0:ac:ee:
                    2d:a7:2a:02:b6:8c:c7:49:26:3c:10:a2:57:6b:22:
                    60:18:6f:a8:1f:00:37:bb:aa:01:6b:27:8b:2a:d9:
                    31:b7:a9:01:6a:ff:ef:4a:ac:b0:34:2b:8c:5e:80:
                    8c:98:42:47:0b:fb:92:04:21:0a:65:dd:a7:76:16:
                    00:ce:43:b8:29:7b:0f:4c:50:73:b5:34:da:ae:1e:
                    6c:78:53:2a:d9:f1:a0:4f:ee:d7:b8:3d:f0:40:17:
                    a4:e8:c5:0b:f9:98:c4:a6:90:df:7f:36:dd:c3:00:
                    63:ae:de:63:ca:88:b2:0c:8d:61:dc:21:b7:4d:e4:
                    c4:6b:f7:98:f6:e1:bf:53:37:a4:a6:d2:44:bf:31:
                    85:c8:e6:81:86:21:e5:71:8d:05:24:29:ab:3e:2a:
                    62:b4:26:88:b2:12:e2:95:02:39:81:fe:2b:8c:66:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:61:38:F2:E4:92:81:A2:E3:E2:1C:E9:19:23:55:9F:F2:AF:C7:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/59ddef71-2263-32fe-b0ad-4f909d6dc146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8/d980a0a8-78bc-4289-825d-1bb9a5a192c8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:0A:70:59:98:14:8F:A2:FD:3C:98:4A:E1:A6:2D:88:01:5D:FB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d980a0a8-78bc-4289-825d-1bb9a5a192c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:33:95:72:b3:16:4a:0e:af:ca:76:21:5f:b1:41:41:5a:ef:
         c3:a8:77:17:03:ab:23:a5:7c:1d:bb:67:78:15:50:3a:e2:6e:
         0b:6e:41:d6:03:ff:e3:56:fc:6c:9f:2a:52:47:47:f2:6a:b5:
         a3:be:b8:4a:23:65:ff:c1:ff:c6:61:e0:9b:57:a9:9e:02:80:
         8e:d6:8b:ad:38:06:97:af:62:2b:80:6b:78:bd:1e:80:65:b4:
         14:39:f0:a3:f4:9d:26:92:63:56:f7:6a:f2:a6:a6:f4:bb:af:
         5d:50:2d:4a:0b:ec:e3:06:96:5c:a6:fe:16:02:4b:8e:e9:c7:
         73:fc:6e:c4:95:87:d9:08:7c:db:e2:fc:71:88:fa:53:52:95:
         fc:b9:75:9a:c6:78:43:29:80:bf:21:33:84:b8:33:aa:a5:6b:
         94:8b:66:c1:6b:60:aa:c9:9e:91:7b:93:d6:be:8f:43:25:f0:
         82:a7:a3:a9:11:da:b6:4b:26:93:71:66:63:cb:ee:e4:a6:00:
         4c:27:21:18:24:9d:b1:f5:bd:61:f2:98:ea:88:77:d4:ba:04:
         ff:5a:5f:8e:70:86:ea:c4:93:55:a9:09:8a:f4:7f:95:86:4a:
         33:ca:c3:fa:81:bd:ed:01:4f:60:14:92:b1:58:b6:e6:be:8c:
         24:db:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:40:30 2026 by rpki-client