Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/5fdb7294-26b9-39ba-b4bb-dd85eae96b87.roa
File:                     5fdb7294-26b9-39ba-b4bb-dd85eae96b87.roa (raw, json)
Hash identifier:          uE7s9cfXB0yn7OaTiuRnBC7JTphhdMaAfwrAFTjn0sU=
Subject key identifier:   DA:9B:B9:F3:3F:B1:BD:43:3B:8C:85:A8:4B:86:FF:42:D7:DA:00:D4
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584EAFDE2497971BC9F4DCB5FF80
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/5fdb7294-26b9-39ba-b4bb-dd85eae96b87.roa
Signing time:             Sat 01 Aug 2026 00:42:34 +0000
ROA not before:           Sat 01 Aug 2026 00:42:34 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     834
IP address blocks:        134.202.176.0/21 maxlen: 24
                          134.202.240.0/22 maxlen: 24
                          134.202.248.0/22 maxlen: 24
                          134.202.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Aug 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:de:24:97:97:1b:c9:f4:dc:b5:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Aug  1 00:42:34 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=6cd02844-e70c-49cd-ae35-9c258abf4a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3d:77:50:91:e0:9c:94:6a:db:67:4d:f5:3a:
                    b8:e1:b2:cc:74:78:ad:52:43:2b:ac:59:13:0c:54:
                    df:be:7d:2c:4b:58:fa:07:a8:0b:3a:fc:5c:8e:74:
                    11:61:a0:2f:ca:34:94:ef:5b:bc:11:05:e7:cf:28:
                    0e:73:73:a0:40:05:1c:aa:ac:52:88:c0:10:a6:e3:
                    b3:6c:73:60:6a:84:4b:09:a3:a2:ad:54:0a:19:ec:
                    e3:70:84:53:3e:cb:61:9b:31:00:eb:d2:b8:93:24:
                    b2:72:b6:24:26:1c:6c:bd:a2:3a:72:89:b2:84:3b:
                    93:02:9a:79:ff:25:ba:ff:61:1b:05:26:97:99:f7:
                    4c:68:22:ae:85:e9:b4:b3:03:ea:a4:1a:21:ea:b5:
                    e6:e3:0b:e7:ac:9c:58:fd:10:60:e8:3c:cb:4c:60:
                    9d:46:bb:f8:1f:1e:85:b7:58:e6:d9:51:8b:4b:27:
                    66:30:ab:18:5b:d7:a9:61:c6:f7:8c:5e:97:5e:2d:
                    6a:a4:f9:6b:07:e0:d2:0c:63:29:0d:d6:90:21:f1:
                    dd:f8:ec:1d:47:44:cc:be:02:b4:86:53:ad:4e:ce:
                    46:61:66:ba:60:f5:34:89:48:59:43:de:1d:30:0b:
                    a8:54:b7:dc:43:87:24:5a:41:c5:be:0b:36:27:f0:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:9B:B9:F3:3F:B1:BD:43:3B:8C:85:A8:4B:86:FF:42:D7:DA:00:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/5fdb7294-26b9-39ba-b4bb-dd85eae96b87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.176.0/21
                  134.202.240.0/22
                  134.202.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:77:8d:a5:68:ca:ce:44:17:44:4c:f3:83:3a:c9:a8:90:6a:
         55:61:ca:1b:7c:9e:dc:56:3a:63:cb:02:f1:5c:f4:f6:d7:68:
         2c:3c:1b:e7:a3:75:c0:d3:e1:6c:76:c2:50:85:c3:5c:db:88:
         56:68:ba:af:ed:84:20:26:97:cd:87:ea:03:e2:0f:b3:79:f2:
         30:41:93:87:57:7c:05:84:e3:6a:ea:ad:39:9b:35:22:ae:5b:
         16:47:b0:cc:c3:54:73:b5:27:97:12:8a:eb:f5:29:02:08:bb:
         39:a1:85:24:e8:26:eb:f6:db:2e:d8:b2:d2:f3:f1:2d:a0:bf:
         9a:74:60:12:56:de:08:5c:1e:7d:31:c7:2b:b8:54:58:f4:7d:
         48:4f:0f:73:d9:18:12:53:ad:ff:fa:a5:23:74:17:0f:57:ff:
         5e:fb:d4:23:2c:2b:c0:4e:58:86:e1:9b:60:62:09:1f:fa:65:
         48:a2:05:9c:57:1c:b0:c8:66:43:76:78:71:c1:ff:30:cf:71:
         5e:98:80:ab:24:1b:a0:3f:8a:d6:e4:b4:44:95:8e:3a:ec:67:
         15:27:85:a6:1e:50:03:d7:d2:d9:93:a4:0a:ad:08:59:69:a6:
         67:f3:3e:fc:e2:fd:ab:87:fb:44:a8:91:db:49:dc:a4:a6:72:
         f2:5b:ee:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:21:49 2026 by rpki-client