Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/31016496-cc89-3953-8c7b-1d9c5466f6da.roa
File:                     31016496-cc89-3953-8c7b-1d9c5466f6da.roa (raw, json)
Hash identifier:          Cv3BM4yuTN+mlvrT/W65t92EsGZMkhn70guU4fljODc=
Subject key identifier:   1B:DD:67:0E:B9:F5:0E:08:A8:0C:48:BC:8A:19:34:09:2F:26:85:E5
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584DC13598739BCC2F8EA1AACA08
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/31016496-cc89-3953-8c7b-1d9c5466f6da.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     16589
IP address blocks:        134.202.16.0/21 maxlen: 24
                          134.202.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:98:73:9b:cc:2f:8e:a1:aa:ca:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=101774f5-364b-4198-a2c0-893850bfa0d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:2c:52:95:7f:0f:ef:da:39:05:37:0c:e5:
                    c7:d0:bb:b5:07:1e:49:b3:62:40:78:a9:18:27:bc:
                    7d:64:13:64:bd:89:1f:32:6f:c3:60:34:1a:b6:ea:
                    ed:34:c0:48:c0:a7:74:f5:d3:45:a7:62:63:93:93:
                    29:87:6f:d6:55:2d:cd:19:16:ba:7c:c6:0b:bb:db:
                    73:e9:0e:a6:56:64:61:a1:26:24:7c:cf:1e:c0:43:
                    bc:c6:43:32:2e:e5:f3:45:f3:85:b5:08:b5:d4:09:
                    86:fe:c1:ea:97:f6:bc:03:aa:e5:9d:32:d5:be:ed:
                    46:94:2a:c5:76:24:29:ef:91:48:71:10:87:04:0d:
                    76:44:8f:37:cf:9b:94:5e:0c:e1:83:21:c1:8b:89:
                    b7:38:9c:6d:5c:80:a8:76:64:fd:7a:44:55:fb:0b:
                    81:75:cf:66:5c:e4:36:b1:83:1b:a6:89:72:69:1a:
                    7a:f9:d3:19:5c:b7:6c:7c:0d:81:71:9b:48:46:f3:
                    e1:03:8a:8a:bd:b1:b2:94:60:0f:9b:7c:e2:e3:3a:
                    36:cf:c0:09:08:63:92:4c:2f:52:70:79:95:66:07:
                    e5:ff:71:68:e4:8a:d6:4e:cd:db:05:f8:17:6a:8c:
                    dd:e1:3d:af:83:4d:1b:bb:42:a7:02:f9:1d:97:fc:
                    4f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DD:67:0E:B9:F5:0E:08:A8:0C:48:BC:8A:19:34:09:2F:26:85:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/31016496-cc89-3953-8c7b-1d9c5466f6da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.16.0/21
                  134.202.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:ba:34:4c:ab:57:39:58:e6:c6:9e:80:40:f9:72:82:8c:c1:
         37:24:e8:38:7f:31:80:fb:86:34:57:73:ff:90:95:a2:38:bb:
         64:4f:43:85:f4:21:76:ba:ea:dd:be:5f:15:37:6a:03:87:90:
         ad:d0:71:24:8c:41:82:91:fd:5f:4a:25:a9:66:ce:45:5c:f2:
         5d:32:2e:0b:33:52:7c:c7:c1:78:d9:b9:d6:42:0c:5a:d0:ab:
         36:f3:77:9b:d3:3c:b7:22:e5:86:97:8a:f9:22:ae:52:00:2d:
         99:e5:c9:61:b8:cb:52:61:f7:88:87:b4:8b:a9:74:5d:c5:67:
         cf:c6:ce:1a:66:0f:ba:56:99:4a:8d:6d:40:e4:a4:4d:75:e9:
         95:8d:8c:11:8e:65:fe:17:c6:c0:f6:a7:bf:2a:83:ba:af:b9:
         18:86:0e:a3:3c:c0:2b:18:6c:0c:13:c0:75:47:1d:99:49:fa:
         f4:01:70:c4:46:8e:9e:15:05:81:99:a5:3a:44:70:a6:ad:ff:
         a2:13:06:dc:ba:1c:8c:fe:ed:6a:39:1c:c7:45:a3:11:6e:55:
         21:29:00:ce:1c:d8:40:16:36:4b:b3:ed:b0:ad:0c:27:a4:9a:
         0d:51:ae:5d:59:e2:50:6b:ef:6b:99:da:44:03:be:04:2c:67:
         03:2d:b8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:45:13 2026 by rpki-client