Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/65a44a31-945a-3144-bd1a-64ec60da9055.roa
File:                     65a44a31-945a-3144-bd1a-64ec60da9055.roa (raw, json)
Hash identifier:          PtujbX+uJfi49sprbZxtkvxF9aCw39eIGqv2kxn/hKg=
Subject key identifier:   04:3C:34:70:66:C9:EF:3E:D6:2A:4C:57:9A:36:EC:01:09:32:45:0E
Certificate issuer:       /CN=133f2e91-cc80-4b10-bfd8-32bfcceeb10d
Certificate serial:       010D0C9F4328584DF4DB392B6C06DC0B5FF9CA40
Authority key identifier: D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/65a44a31-945a-3144-bd1a-64ec60da9055.roa
Signing time:             Tue 26 May 2026 01:00:24 +0000
ROA not before:           Tue 26 May 2026 01:00:24 +0000
ROA not after:            Mon 24 Aug 2026 01:00:24 +0000
asID:                     8075
IP address blocks:        147.160.48.0/24 maxlen: 24
                          148.59.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f4:db:39:2b:6c:06:dc:0b:5f:f9:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=133f2e91-cc80-4b10-bfd8-32bfcceeb10d
        Validity
            Not Before: May 26 01:00:24 2026 GMT
            Not After : Aug 24 01:00:24 2026 GMT
        Subject: CN=0272dc68-6346-4c1c-b803-f2aaa2077ef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d9:62:ce:59:99:61:89:15:4d:49:b0:a4:55:
                    96:14:40:a3:a6:cb:e3:e4:f5:1b:89:43:68:ff:7b:
                    92:90:4c:fb:97:c0:ee:ab:f6:78:7a:d3:ba:0f:b3:
                    90:68:0d:c7:87:f6:a9:18:24:02:42:3a:83:49:34:
                    37:83:12:95:04:33:cc:0a:a4:ee:74:39:09:de:1f:
                    82:4c:db:09:9d:77:ce:be:67:68:0f:91:f1:ce:4d:
                    6c:79:e9:4e:22:d7:ce:c1:bb:69:c7:a4:db:80:81:
                    01:f2:ef:e5:75:6b:f1:55:77:17:e2:a7:63:b7:03:
                    f5:a2:cb:2b:31:64:48:5a:50:f4:b1:35:33:36:55:
                    ec:80:fe:42:7b:93:3a:dc:b6:1e:79:6b:00:61:78:
                    04:19:e6:99:5b:5c:17:59:e1:00:4e:38:19:c5:99:
                    0e:f4:18:69:f6:dd:f6:4f:fe:fa:86:6c:5a:b4:a5:
                    af:13:46:16:61:ff:a6:6c:b8:94:74:ef:e0:5a:7e:
                    63:68:83:34:c9:82:a1:a9:7e:42:8e:bd:60:61:de:
                    99:71:a0:d0:7d:fc:6d:3c:3e:f5:07:c6:16:06:d7:
                    aa:e1:ae:ec:42:a7:9d:63:a4:b1:78:22:de:d7:33:
                    36:88:84:43:9a:c5:ff:ad:e2:9b:55:82:16:52:23:
                    0e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3C:34:70:66:C9:EF:3E:D6:2A:4C:57:9A:36:EC:01:09:32:45:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/65a44a31-945a-3144-bd1a-64ec60da9055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.crl

            X509v3 Authority Key Identifier:
                keyid:D0:AD:09:8C:68:97:95:85:B7:74:B9:14:FE:59:D2:59:D5:D6:3C:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/133f2e91-cc80-4b10-bfd8-32bfcceeb10d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.160.48.0/24
                  148.59.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:c5:91:8d:da:71:9c:6e:f2:2d:ee:8b:8b:b8:8e:b8:e4:f4:
         47:0a:60:a8:9d:41:a7:8f:e8:22:ea:be:ff:20:f2:56:60:90:
         eb:1d:86:18:c5:22:01:18:41:d4:02:f7:e9:4a:2f:60:7c:0e:
         0f:8a:7b:00:ab:9b:d2:61:08:5f:26:14:13:5d:06:8b:f7:6a:
         f7:56:e9:dc:56:86:c1:fb:99:0c:c5:67:98:f8:af:39:9c:ff:
         f4:66:c4:25:a3:a5:d8:6b:5d:c8:48:49:c7:7f:ed:47:26:c0:
         35:51:53:31:9c:45:5a:fe:8b:5c:73:d0:ae:b9:6d:9c:12:7b:
         0e:73:ae:09:37:92:99:4f:32:de:9c:54:0d:78:a7:d2:e9:ec:
         da:f9:9e:b6:85:0e:be:d3:27:f2:32:8a:42:6d:d7:e5:b8:be:
         ca:03:bc:7c:e9:8d:54:1d:6e:6a:40:37:b5:66:48:71:71:c8:
         49:a9:4a:65:ed:fc:96:71:9e:bf:56:7a:75:b6:04:06:f9:64:
         8a:f4:ad:30:2a:68:52:26:eb:da:4c:a7:2b:41:0a:dc:86:46:
         10:a7:05:81:b2:de:7f:9e:b3:8d:35:8c:34:42:22:b1:22:e6:
         38:73:18:2e:f7:9e:61:28:0c:3b:67:62:9b:57:90:58:87:9e:
         45:49:b9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:01:41 2026 by rpki-client