Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/c1d11926-9630-3895-8ba0-c512beb364e7.roa
File:                     c1d11926-9630-3895-8ba0-c512beb364e7.roa (raw, json)
Hash identifier:          QJIe9bLx2/H9ADpuCFFKeJM2RWlrcmPkUiaMLmF/Zm0=
Subject key identifier:   BB:69:30:F7:5B:EE:F1:C7:73:EA:80:18:5C:FE:67:DB:F6:E5:D1:26
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584D5F7FA6D8F32201857F9A0780
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/c1d11926-9630-3895-8ba0-c512beb364e7.roa
Signing time:             Thu 02 Apr 2026 13:00:30 +0000
ROA not before:           Thu 02 Apr 2026 13:00:30 +0000
ROA not after:            Wed 01 Jul 2026 13:00:30 +0000
asID:                     29831
IP address blocks:        137.119.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5f:7f:a6:d8:f3:22:01:85:7f:9a:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Apr  2 13:00:30 2026 GMT
            Not After : Jul  1 13:00:30 2026 GMT
        Subject: CN=30b591df-b5d9-479d-90c3-c433ef01d0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:93:36:4b:13:4f:40:85:09:9a:5a:f5:83:c1:
                    2b:12:b9:e6:95:d7:1b:3e:0a:2e:ab:b8:af:22:f1:
                    cc:c8:ce:19:9e:6b:7b:ff:ed:49:58:8e:96:02:7f:
                    90:da:e5:4b:f1:50:af:f8:52:27:f4:ab:04:bf:a1:
                    a8:07:8d:7d:a5:52:2f:53:46:14:96:4d:5c:5e:cc:
                    1d:5d:6f:31:3a:d8:d6:84:6a:a6:28:a8:53:67:ad:
                    38:77:90:8c:3d:69:6b:c0:3d:d4:17:f0:b8:1a:99:
                    97:90:e4:59:8a:db:ed:18:cf:17:97:5d:b2:6a:3d:
                    53:49:d4:73:18:e1:63:64:8d:81:e7:64:b9:19:e3:
                    58:30:ac:3d:3b:6f:87:12:a7:ef:a1:a5:97:fc:24:
                    ba:b6:e5:b2:dd:41:76:c3:f9:cf:4a:98:ca:ac:c5:
                    15:62:f4:dc:ab:54:d1:bf:00:b9:2f:d8:4d:de:4b:
                    f7:e7:9a:22:8d:2e:3e:2d:9a:8b:68:86:95:69:26:
                    8c:9c:b0:6b:d9:24:9c:9a:4d:24:51:dd:c2:f2:e0:
                    32:e0:a9:1a:da:a7:6b:10:e8:5b:1c:1d:43:08:f9:
                    b5:66:03:b2:24:c3:bf:ef:0a:cc:84:0b:01:f8:c3:
                    32:db:14:b1:9d:de:ba:7c:1a:9c:07:6f:20:81:08:
                    57:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:69:30:F7:5B:EE:F1:C7:73:EA:80:18:5C:FE:67:DB:F6:E5:D1:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/c1d11926-9630-3895-8ba0-c512beb364e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:95:a7:dc:a3:a5:7d:d3:bc:3c:4c:59:db:a5:50:86:6f:a7:
         7c:7a:57:04:54:e1:47:5d:34:de:36:5e:e7:ec:67:90:d9:37:
         2e:47:78:34:56:33:47:f4:80:42:0d:8a:86:df:14:81:a9:3e:
         33:5f:1d:c7:02:81:b8:f2:95:8f:38:c1:d4:df:f8:87:0d:d1:
         0e:d1:77:0f:e1:c4:dd:b5:54:e6:63:63:57:ea:1a:47:af:a7:
         1b:6c:3a:a8:25:69:db:1c:18:31:90:6f:3b:b8:3b:f9:a2:14:
         ee:c6:21:8d:64:b7:c1:4a:8d:a1:a4:17:a6:f3:84:52:13:33:
         c5:23:db:5e:26:8b:e4:56:07:0d:fb:6c:42:45:c8:38:7d:ae:
         d9:3d:4c:b6:04:72:7f:53:c8:15:f4:95:87:31:05:b5:af:a5:
         65:8c:5d:a9:13:66:fa:b4:57:00:61:77:9e:99:de:d0:3d:46:
         5d:09:25:34:1e:8c:5d:af:f6:0c:fd:23:41:46:33:3a:58:1e:
         be:60:f6:d8:4a:f6:95:ef:cc:a1:a8:b0:2a:5d:40:1b:28:0c:
         51:f0:85:7d:ce:42:98:9a:37:f6:eb:68:f4:fd:19:91:59:32:
         e1:b0:eb:f3:34:b0:78:44:00:12:52:3d:0a:a0:e6:b2:19:88:
         19:1e:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 11:39:59 2026 by rpki-client