Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/ef34b9ba-0a80-3971-b20c-014fb8ea9d25.roa
File:                     ef34b9ba-0a80-3971-b20c-014fb8ea9d25.roa (raw, json)
Hash identifier:          KVYhy807YUO6E2fi02O83u1OZjhK4V/AIPJTN/XRJj8=
Subject key identifier:   EF:BB:1D:D9:97:B6:7D:55:DD:9A:5D:92:60:90:6E:A2:75:62:A2:D9
Certificate issuer:       /CN=dfc6770a-8775-4ba8-9d91-68facba79b33
Certificate serial:       010D0C9F4328584F57682E0AD8CB6F7E86D80880
Authority key identifier: FC:15:E4:40:61:B7:C4:E7:24:7E:68:F9:54:6D:00:9F:25:56:D2:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/ef34b9ba-0a80-3971-b20c-014fb8ea9d25.roa
Signing time:             Wed 30 Sep 2026 01:00:12 +0000
ROA not before:           Wed 30 Sep 2026 01:00:12 +0000
ROA not after:            Tue 29 Dec 2026 02:00:12 +0000
asID:                     134094
IP address blocks:        131.143.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:57:68:2e:0a:d8:cb:6f:7e:86:d8:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc6770a-8775-4ba8-9d91-68facba79b33
        Validity
            Not Before: Sep 30 01:00:12 2026 GMT
            Not After : Dec 29 02:00:12 2026 GMT
        Subject: CN=9042b998-ec1a-4672-bc58-1fc4b29f2af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d1:b7:51:d8:db:57:8a:ed:99:14:c9:47:44:
                    bd:94:82:ce:82:be:d3:21:c0:79:ab:ee:00:c1:6f:
                    7c:5f:e2:bd:55:45:ad:99:c9:76:18:db:56:32:8c:
                    53:22:de:94:38:1e:08:68:6a:dd:66:59:19:0d:99:
                    21:14:9f:e2:e8:bb:f6:73:77:2d:a6:bd:13:a2:ca:
                    e1:e8:2f:fc:29:1a:5b:e8:7f:d8:05:c6:fc:e8:54:
                    9f:4d:cd:c1:57:98:92:08:8e:63:12:6f:30:e5:91:
                    84:5f:f9:6f:9a:9f:5f:7e:82:7e:4a:3c:f0:e1:92:
                    4d:e1:a6:54:ec:65:d0:29:fb:5f:5c:c6:5f:f8:40:
                    dd:d7:54:22:56:bc:f6:9a:58:bb:29:88:cd:e7:0a:
                    96:c5:63:17:33:d9:6f:9f:79:f6:12:94:4b:b8:c6:
                    e3:13:0e:1b:db:63:da:dd:c0:55:8a:0a:58:7a:9b:
                    10:40:fc:b0:f3:3e:6c:70:f6:cd:d5:9f:67:52:8d:
                    3a:34:55:03:6b:62:b0:8b:4a:76:d2:73:53:40:53:
                    3a:c6:2b:55:67:62:98:d1:76:34:c1:fa:67:45:07:
                    a2:95:2d:d3:fe:5c:c4:c1:cf:69:c1:c1:9c:7b:2c:
                    fc:59:38:03:0e:c5:ed:75:4a:d6:a7:e7:47:f5:15:
                    da:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BB:1D:D9:97:B6:7D:55:DD:9A:5D:92:60:90:6E:A2:75:62:A2:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/ef34b9ba-0a80-3971-b20c-014fb8ea9d25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33/dfc6770a-8775-4ba8-9d91-68facba79b33.crl

            X509v3 Authority Key Identifier:
                keyid:FC:15:E4:40:61:B7:C4:E7:24:7E:68:F9:54:6D:00:9F:25:56:D2:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfc6770a-8775-4ba8-9d91-68facba79b33.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:fd:8f:a2:29:26:6c:f7:e5:36:c4:35:b5:e1:28:f7:a5:8a:
         71:0d:16:a3:95:9f:ee:94:42:43:28:1e:ba:32:86:1e:67:98:
         bf:bf:4c:49:74:7a:45:6d:72:24:45:60:ba:08:96:cc:c5:6c:
         18:a7:83:3f:4f:17:55:1c:ea:14:b2:1a:b3:54:31:db:97:ff:
         b8:f6:d9:ee:d1:f1:08:43:6d:06:d9:9d:b5:a3:70:66:7d:7d:
         81:42:fc:17:39:91:0c:4e:7c:bd:a7:70:91:51:d2:d2:b9:b8:
         ec:7d:43:6e:cc:f6:73:dc:0c:44:45:98:d9:b1:b1:58:32:ae:
         8b:f4:23:9a:e1:40:0d:4c:df:1c:9e:f1:cc:98:a9:fa:44:5e:
         99:64:95:f6:4c:c9:64:60:18:d4:ac:22:38:48:17:de:39:db:
         7b:cc:3b:41:d0:6c:d8:21:5e:76:a9:7e:6c:47:3e:bf:a8:b2:
         85:23:97:02:47:fa:32:de:5d:2e:77:92:d0:d0:61:ff:9d:29:
         5e:de:cb:8a:89:87:e9:56:f2:41:a6:de:13:4e:10:92:1b:e7:
         41:04:61:c2:ad:74:c9:c4:94:8c:d4:17:61:b9:43:88:10:9f:
         28:3e:f8:40:3d:3c:02:3e:1a:6f:16:4d:fc:11:b7:01:5c:79:
         94:73:f6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:36:43 2026 by rpki-client