Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a6091126-5698-3d7b-9b6e-5ffe37b7fdd1.roa
File:                     a6091126-5698-3d7b-9b6e-5ffe37b7fdd1.roa (raw, json)
Hash identifier:          XcG4osCNBDuXdv3OTzZjZwiTVw91EkjZU1gIRa3zU+8=
Subject key identifier:   BA:1D:8F:B5:B6:A9:DE:84:08:25:F3:60:5D:89:8E:A0:6C:59:17:4C
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584E50848E47241669BA7A570D00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a6091126-5698-3d7b-9b6e-5ffe37b7fdd1.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     12189
IP address blocks:        131.153.120.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:8e:47:24:16:69:ba:7a:57:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=c6e44530-49e8-44e3-8e5e-e1a683706d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:c4:ed:78:c8:0b:3a:e5:7d:d1:90:3f:f6:
                    98:61:e7:a9:74:49:b4:6f:0b:53:04:79:8c:96:39:
                    38:81:07:89:73:59:9c:89:f8:59:27:f5:02:aa:73:
                    e0:57:0b:ff:ba:df:f5:c6:e6:48:b5:0a:96:c2:7d:
                    c9:83:2a:f2:e8:65:2f:1d:5c:e5:dc:24:40:86:77:
                    87:ab:6f:0c:00:87:db:08:4c:c9:fb:50:26:d1:96:
                    33:c3:d1:0e:b4:8b:ba:67:dd:23:1e:06:a2:43:dc:
                    ad:61:ef:af:57:49:ea:51:82:7f:25:d3:67:5a:d9:
                    22:8a:15:39:d7:78:ee:f5:62:3b:b4:fa:7c:21:6d:
                    29:69:e7:c2:e4:1f:9e:46:3f:5b:66:7a:af:01:ca:
                    5d:ee:26:86:34:61:a6:28:36:c1:e6:e9:48:d9:35:
                    0f:ed:35:84:ac:15:f9:f1:01:7c:0b:db:2e:2d:4c:
                    f1:bf:d8:b6:13:e3:ac:2d:61:7a:17:ae:bf:52:0d:
                    57:b4:8e:d7:8d:50:20:8b:45:41:5c:4d:d5:2d:96:
                    8c:e0:c6:fe:7c:d9:e1:bc:55:37:68:97:5e:de:0f:
                    f0:b3:b9:61:80:f9:a4:d4:e1:04:53:44:f1:fd:5d:
                    b3:d5:47:8c:2b:4a:50:5d:c2:48:7f:da:56:41:d4:
                    b7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1D:8F:B5:B6:A9:DE:84:08:25:F3:60:5D:89:8E:A0:6C:59:17:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a6091126-5698-3d7b-9b6e-5ffe37b7fdd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:2d:29:e2:e8:90:2e:8a:cd:6b:c3:65:e7:b7:0f:a2:f2:59:
         64:9a:f1:26:6b:35:ae:c1:90:9a:a5:35:c7:1b:1e:e1:36:18:
         7e:d7:eb:52:37:5d:20:cc:4e:46:79:4e:a2:77:37:11:49:b8:
         4e:cb:0c:ba:69:e2:63:bd:a8:ae:ef:be:46:bf:60:43:cc:48:
         87:1c:36:f4:1c:46:54:96:ac:63:6f:b5:6c:c1:9d:0c:7e:3d:
         fb:b2:a2:a5:5f:ac:af:b2:03:32:13:e1:02:c1:36:3f:ca:1a:
         24:d0:03:e7:76:5f:6b:bb:41:b4:f4:ef:3f:9e:71:20:94:c4:
         c0:70:72:ef:3c:49:00:9f:ab:05:f5:36:48:4f:ea:69:a3:e8:
         e5:ee:c4:7c:fd:32:b5:bd:32:92:4c:b9:2c:6d:8c:ac:6b:17:
         93:5e:a2:91:dd:c5:1d:7e:fd:73:a3:f9:b4:80:10:41:6c:86:
         f6:2f:e4:f9:fa:6a:43:42:fe:b4:c4:99:c7:52:95:6c:e0:3e:
         16:67:21:31:cc:9e:0e:4a:d8:33:fb:82:87:ce:75:da:27:5c:
         07:56:95:ab:3f:ad:fe:61:fd:60:27:90:05:42:78:d0:a2:84:
         9f:b9:d4:0c:23:8d:68:97:3d:43:ce:82:53:9e:1d:bc:ee:80:
         24:97:2f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 21:50:57 2026 by rpki-client