Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa
File:                     121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa (raw, json)
Hash identifier:          EXGkAUfZCoF1nPtGjW/Z1mTnBOqnggsjaAi+QvkYEY0=
Subject key identifier:   95:D6:E6:C6:E5:AE:74:F5:8C:9B:BF:3C:F5:AA:FA:24:66:C7:1A:94
Certificate issuer:       /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial:       010D0C9F4328584D95EFF39010443106C895AB80
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     398391
IP address blocks:        131.226.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f3:90:10:44:31:06:c8:95:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=ff37a0a4-b29c-40ac-88d0-e230f34896ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:28:0a:3f:3c:4e:ff:a0:c6:0b:57:14:69:b5:
                    d7:6d:f3:1f:ee:f8:88:d7:d7:fe:28:2d:56:c6:d8:
                    39:c9:6d:c3:49:32:15:28:65:b4:6b:94:37:d0:de:
                    13:bf:67:07:f1:1c:8f:23:3f:56:b0:85:90:cb:e3:
                    51:27:5a:bb:03:30:6e:24:c9:ce:1e:cb:f3:45:74:
                    ef:70:9c:7f:66:07:63:95:af:a7:c3:be:1a:5e:bf:
                    42:8f:ad:b4:30:09:a9:02:f5:05:dd:93:94:9e:03:
                    3c:26:5c:8c:79:18:b4:30:3b:7a:96:57:57:cc:f1:
                    d5:69:07:5e:bd:cb:39:0c:07:22:91:53:f1:6e:12:
                    04:65:41:b6:ec:fb:22:9e:a4:83:80:12:48:fd:55:
                    f5:9c:62:6f:20:95:3b:1f:2f:1e:34:18:f7:1b:71:
                    d7:ff:b7:2f:34:c0:35:7c:56:b7:97:dc:39:77:6b:
                    7a:02:a4:31:07:94:9a:83:c3:39:8e:47:32:14:e2:
                    34:f9:65:3f:dd:a0:c2:a2:11:80:2e:a2:8f:cf:25:
                    89:3c:ec:4c:25:44:43:f6:c5:8b:47:8c:2e:f8:af:
                    80:2c:b1:d8:41:25:66:a5:22:ed:7c:23:a7:8d:81:
                    42:c8:23:65:58:74:57:26:8d:87:49:26:d7:ec:14:
                    6a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D6:E6:C6:E5:AE:74:F5:8C:9B:BF:3C:F5:AA:FA:24:66:C7:1A:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/121574f4-e8e8-38cf-8b9e-3220f0bfad79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl

            X509v3 Authority Key Identifier:
                keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4a:96:47:dc:80:61:f3:10:55:90:b2:5a:c3:24:5a:41:29:
         34:5d:61:0a:08:84:83:fe:9a:1e:87:6f:a4:23:99:c0:9f:89:
         9a:bc:01:05:06:35:a2:39:43:fa:9f:c2:98:ff:ad:20:e8:13:
         69:9d:43:c5:86:30:61:2a:c8:e1:eb:55:fc:95:1d:93:68:4a:
         bd:e7:01:6c:32:75:da:93:3f:1a:18:b7:c5:3c:b3:15:31:3e:
         9a:94:fe:4c:57:50:3d:47:0e:0f:92:3f:58:ac:37:21:02:88:
         98:2a:12:9a:f5:0e:a5:19:42:28:4d:16:02:32:24:bd:c5:4c:
         bf:90:0c:1f:0f:46:d3:a3:b4:d4:31:1a:84:2d:9a:f6:28:a5:
         b6:96:1d:05:ef:44:d5:a0:15:b3:49:39:39:a0:77:85:66:61:
         b9:86:88:75:5a:07:73:ba:fb:e2:92:d4:0b:dd:f7:50:a9:ff:
         05:b4:5e:ae:75:9e:d1:ea:4f:af:14:94:d2:20:fe:42:84:ae:
         b4:c2:03:87:56:84:e0:eb:47:d0:9a:26:c3:99:78:8a:a4:41:
         4b:c8:ea:68:64:40:c1:76:39:be:fc:28:fa:8d:d6:2f:83:65:
         d4:1b:f2:ab:5b:d5:4c:46:85:f0:4d:9e:98:7b:04:66:4f:a5:
         5b:8e:3b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:46:00 2026 by rpki-client