Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/deb380e8-4894-3d4c-9569-436d09dcf0b3.roa
File:                     deb380e8-4894-3d4c-9569-436d09dcf0b3.roa (raw, json)
Hash identifier:          L8RQ8Fuvzg+L03cHp6ATr21Q6w+4Shw8+0ji7c1NBkM=
Subject key identifier:   84:08:AE:24:38:B6:EC:55:81:11:FC:8B:18:DA:E9:8A:69:60:EB:D1
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584DA2801692D7E71550419EAA40
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/deb380e8-4894-3d4c-9569-436d09dcf0b3.roa
Signing time:             Sun 26 Apr 2026 13:00:30 +0000
ROA not before:           Sun 26 Apr 2026 13:00:30 +0000
ROA not after:            Sat 25 Jul 2026 13:00:30 +0000
asID:                     393804
IP address blocks:        157.96.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a2:80:16:92:d7:e7:15:50:41:9e:aa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Apr 26 13:00:30 2026 GMT
            Not After : Jul 25 13:00:30 2026 GMT
        Subject: CN=1f1aa0ff-1547-4f2d-8bd5-6b0dd9c81f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6b:fb:81:7a:48:e9:11:c4:5b:7d:e6:a0:11:
                    97:4b:9b:ee:90:ed:37:df:a0:ff:aa:46:8d:3f:56:
                    71:1e:62:3f:ae:b4:a8:b5:c5:c8:bc:9e:1f:59:de:
                    ef:13:b2:02:e2:e4:a5:06:49:bc:20:21:04:76:e9:
                    de:30:6b:0d:94:d1:89:f9:8b:55:2d:27:28:a6:ad:
                    9e:86:7d:87:60:09:d5:c0:b8:f6:7e:d1:5b:bd:ba:
                    a9:e9:10:10:45:bd:a2:98:2b:a6:ab:34:43:a9:f5:
                    ac:b6:d1:8b:fb:0b:83:cd:5c:81:10:b0:c1:77:df:
                    e5:f0:cd:d1:97:0c:f5:c0:9d:16:b4:a1:6d:16:57:
                    01:9f:59:5a:34:30:20:f8:6a:6c:19:cc:d0:7b:01:
                    00:6b:3e:15:a1:e4:35:93:22:03:69:a2:37:bb:f1:
                    b4:2a:a9:0c:38:97:77:a5:bc:aa:a4:fd:b6:4b:8f:
                    63:32:a3:8c:90:0c:43:18:a5:ee:49:54:3f:da:12:
                    26:f5:1c:25:89:0f:c6:cc:89:cc:ba:c2:99:98:da:
                    bb:35:4c:9d:79:83:b9:9d:23:cf:9f:ce:f7:4d:f2:
                    fe:16:e4:6e:ff:35:0a:ad:2e:f5:ce:e3:bc:bb:ed:
                    c5:77:fc:3e:79:9e:81:bd:3a:fc:e6:10:6c:62:4e:
                    51:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:08:AE:24:38:B6:EC:55:81:11:FC:8B:18:DA:E9:8A:69:60:EB:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/deb380e8-4894-3d4c-9569-436d09dcf0b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.96.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:06:f3:de:37:7b:ac:db:67:0c:80:46:0f:df:bc:6f:9c:5b:
         2c:d5:b2:ea:75:dd:22:33:87:0d:7c:82:15:68:48:2e:a4:57:
         68:d0:d3:3e:ec:8a:72:99:42:ce:a9:03:00:15:0b:a3:75:64:
         57:cc:af:5f:ac:81:0c:c9:fa:90:e8:84:61:d8:3f:bf:dd:cb:
         b1:21:42:05:fa:67:10:78:7b:9c:f3:a8:62:0d:ca:ac:bc:47:
         ec:ea:5e:15:20:d8:ed:fc:65:1a:cb:91:38:56:be:cf:93:23:
         63:7f:f3:ad:74:3f:43:1b:80:de:07:1d:54:1f:0f:3b:d3:68:
         2f:8f:dd:fd:7f:ed:5f:a9:59:0d:7c:78:45:bd:fa:ae:a4:ba:
         fe:ad:ae:8b:bc:eb:a0:73:6e:be:7f:a7:00:d7:ac:17:eb:06:
         64:d2:99:91:2a:b8:38:84:74:60:ce:b7:a4:8d:a8:9c:d7:c2:
         53:f2:6f:a7:37:29:60:74:b4:63:12:88:e2:41:bf:1f:19:13:
         a3:e3:7d:09:fb:e0:27:3e:89:4b:0e:12:56:8d:4b:7e:bc:db:
         bf:8d:d3:5c:cd:87:f1:03:48:23:51:d4:e5:2a:6c:8c:ea:74:
         d5:68:a2:83:f9:2b:2f:e3:cd:0d:b8:4c:96:2f:0d:51:75:0b:
         6e:43:f6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 04:31:03 2026 by rpki-client