Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/071ad484-5df0-3550-b370-4c3a2c60f315.roa
File:                     071ad484-5df0-3550-b370-4c3a2c60f315.roa (raw, json)
Hash identifier:          ZSGal0LmSYISlYz4X+NMey8G3LPSiSdjubvX6q/wzNg=
Subject key identifier:   5C:E9:5A:13:64:A8:AE:DD:CC:BE:40:A7:D3:C6:C1:D2:97:08:F7:96
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584E3E5F46A8E266B03BA3714E00
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/071ad484-5df0-3550-b370-4c3a2c60f315.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     54004
IP address blocks:        134.202.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:46:a8:e2:66:b0:3b:a3:71:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=f1b2dc37-ee2e-40a8-b6e7-63848b70a5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:3a:57:23:af:89:69:19:2a:cf:9b:95:78:
                    93:60:23:aa:01:d4:c2:36:3c:16:bb:29:7d:dd:81:
                    e3:5c:bf:51:52:e7:ba:bf:fc:d3:df:a1:cd:d3:cd:
                    18:af:59:07:31:1c:1d:5f:a5:67:1f:84:57:a0:46:
                    8c:d1:3e:0f:03:05:50:80:89:68:54:59:72:da:3b:
                    8a:6f:db:c9:14:40:47:28:66:96:d9:04:04:10:f9:
                    84:57:33:50:dd:5a:be:c1:81:19:a6:d3:b3:d1:b5:
                    1e:b3:3f:21:84:6c:5f:66:a9:12:60:61:7f:a6:c4:
                    66:71:23:f4:4f:2b:5a:3d:d5:74:1e:4e:bb:d4:e7:
                    e0:2e:8e:74:27:34:d2:e6:17:fd:3b:ec:85:c5:3b:
                    4d:70:68:c4:0e:51:73:68:fc:1f:e0:45:83:dc:6d:
                    69:10:53:be:87:c2:0c:58:19:7a:bb:06:da:45:0a:
                    d8:c0:d4:8e:d7:48:02:d9:2b:79:61:bd:ee:8a:4f:
                    5f:ee:f6:55:f1:b2:c1:80:a0:d6:b7:d9:a9:1f:31:
                    8a:30:0f:b8:84:15:6a:e5:0b:04:98:de:f0:66:1f:
                    38:5c:ce:8a:54:27:4f:ca:ff:44:cc:50:0e:70:e1:
                    9e:ff:f7:75:3a:36:e4:b9:84:5c:77:75:62:4e:0b:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E9:5A:13:64:A8:AE:DD:CC:BE:40:A7:D3:C6:C1:D2:97:08:F7:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/071ad484-5df0-3550-b370-4c3a2c60f315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:8a:7b:12:60:ea:b1:74:8d:26:a0:33:d0:38:20:fc:8f:71:
         70:63:8e:1c:0a:ab:0b:10:d0:71:03:79:a1:0e:d1:51:01:25:
         7f:47:3e:85:da:9e:66:dd:2f:3a:15:00:b8:e4:79:dd:e0:35:
         3c:3f:fa:4e:03:4f:78:7b:e1:b5:e4:3a:d3:28:d2:ff:7f:61:
         30:b3:9f:48:01:1c:c6:fe:8c:4f:00:ac:65:cc:b3:76:1b:f1:
         81:98:d6:7f:eb:95:4d:41:45:94:b5:fe:3b:22:df:77:53:b0:
         93:90:df:61:d2:89:88:5a:8b:8f:b4:f7:e8:ed:f6:51:7d:f3:
         fe:1d:0c:ff:cf:03:2b:b7:f0:6e:75:03:7a:c3:8f:60:0c:48:
         ac:82:26:2e:eb:11:a9:d2:45:63:9e:05:04:e1:d9:63:f8:ef:
         2c:1b:ff:49:e8:27:14:ee:f3:9a:75:6d:6e:fc:7f:99:e7:10:
         39:9a:54:e3:c8:b8:3e:05:9f:95:4d:a9:8a:a5:e3:27:8d:76:
         7e:79:76:7f:73:f4:9f:23:fa:7a:74:a7:40:77:63:d5:1a:3b:
         bb:21:73:5b:d8:e5:fe:08:85:66:d2:60:9a:89:9d:b4:96:27:
         20:70:46:b1:e1:a8:89:94:d1:ed:13:b3:ff:0e:6e:27:e6:09:
         3a:f7:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:49:02 2026 by rpki-client