Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fabd813-f011-3b9f-9020-b8c64c8503a2.roa
File:                     0fabd813-f011-3b9f-9020-b8c64c8503a2.roa (raw, json)
Hash identifier:          KvMrMg4AG9MfJ4uWWzWI69swuB3XNm+MtWlGe8er8Ew=
Subject key identifier:   D4:21:4B:0A:8B:FF:2A:59:EA:FA:35:B6:46:68:10:A0:2B:6A:C5:B7
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F8F3DB55CBC0B1F345BC85180
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fabd813-f011-3b9f-9020-b8c64c8503a2.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     3462
IP address blocks:        128.1.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:b5:5c:bc:0b:1f:34:5b:c8:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=491487fc-9c2c-4e3b-8584-3f946f850370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:3a:5c:5e:31:b7:4d:17:2d:52:de:a9:dd:
                    30:85:3b:d2:be:98:6d:a3:13:1c:08:ba:51:2d:19:
                    e5:f1:c5:e2:61:93:68:76:93:e1:70:2e:b0:ef:79:
                    a0:c6:53:54:7f:07:85:af:7a:62:83:c4:74:03:6a:
                    4a:c2:e9:20:36:91:1f:ed:11:4e:7b:37:e8:62:1c:
                    b7:dd:50:54:f9:a1:c2:8f:22:5b:80:c7:ab:c3:9f:
                    10:2d:a6:80:cd:0d:52:9f:da:ef:75:73:8b:03:70:
                    26:6c:7a:4a:4b:d8:ad:48:1b:18:fd:5d:94:41:6c:
                    6b:9c:47:a9:48:09:e2:82:37:44:fe:54:00:08:87:
                    72:85:7d:61:36:ae:60:0e:6a:1a:03:6c:22:37:cc:
                    3c:e6:3b:da:20:9a:e4:1f:53:25:72:72:27:b9:96:
                    99:84:7a:00:ae:1b:e7:89:bb:54:dc:6d:68:75:c9:
                    ea:45:1b:72:69:9b:61:96:98:92:56:cc:ff:e4:d8:
                    40:16:2d:90:d2:01:47:89:53:d5:03:69:93:f7:17:
                    38:38:94:cf:18:ac:72:f5:b0:b9:e6:64:fa:44:66:
                    11:7c:ab:e1:df:3d:20:43:8d:e5:90:fe:d2:30:da:
                    0a:6e:dc:14:09:81:98:a8:63:b6:17:bc:4e:b2:1f:
                    5e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:21:4B:0A:8B:FF:2A:59:EA:FA:35:B6:46:68:10:A0:2B:6A:C5:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0fabd813-f011-3b9f-9020-b8c64c8503a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:57:73:3a:51:4c:80:f7:7b:26:06:00:78:d5:83:f8:4d:24:
         fc:75:43:81:c5:ea:7b:cc:5a:8f:e6:6e:b5:88:b2:19:67:6f:
         36:6f:87:7a:99:ae:10:63:d8:8c:22:4b:d8:4a:ec:30:44:e8:
         be:8a:79:c7:a3:61:67:f9:01:7b:cb:7d:95:5d:01:f6:96:26:
         07:e0:89:74:53:a1:ff:6c:36:65:8a:f5:b1:27:7f:c8:8b:c2:
         bb:79:6a:a9:25:6f:62:23:d7:7c:31:aa:06:44:cf:fd:16:10:
         8d:47:71:6a:d2:7b:c2:ab:2d:37:5f:33:0e:a2:b0:a5:66:9d:
         8d:e2:46:fc:9b:ea:e7:65:93:d1:f3:73:77:3b:2e:d6:3e:c4:
         93:e7:3f:91:0b:fe:4c:3f:3e:1f:f0:e0:86:c0:16:7d:43:52:
         b8:a9:aa:36:22:ca:c1:76:31:c0:f9:4b:3b:c0:f6:f3:df:d6:
         6c:89:87:fa:ac:e9:00:ef:75:b8:34:eb:05:b9:09:40:5b:26:
         34:b5:07:e8:85:d2:42:c2:23:90:f1:26:15:3d:a5:3a:c3:56:
         aa:dc:ee:63:fc:1a:1f:b6:ba:25:d4:c2:a6:46:bb:86:fd:a2:
         48:ec:66:97:91:3a:65:e4:7d:8b:59:3d:bf:fe:af:8e:93:43:
         a5:92:84:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:58:26 2026 by rpki-client