Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa
File:                     cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa (raw, json)
Hash identifier:          jn1ShgrHOj/J9ROMB/7Pt679BI+rnuiGW3S2tvghMAw=
Subject key identifier:   99:92:C3:20:27:6D:C9:B8:5F:FB:4A:D7:9E:00:C1:C1:C7:1B:37:4E
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584E54B493CBEF7ED6770AC424C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa
Signing time:             Mon 29 Jun 2026 09:00:12 +0000
ROA not before:           Mon 29 Jun 2026 09:00:12 +0000
ROA not after:            Sun 27 Sep 2026 09:00:12 +0000
asID:                     19437
IP address blocks:        131.153.200.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:54:b4:93:cb:ef:7e:d6:77:0a:c4:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Jun 29 09:00:12 2026 GMT
            Not After : Sep 27 09:00:12 2026 GMT
        Subject: CN=270626cc-8ec6-4e73-8bb5-fb9c628ae54d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:85:86:c4:a5:8c:87:ad:20:8f:2c:e2:06:cf:
                    19:e5:13:99:2e:a8:66:90:c2:aa:82:8f:85:e2:ec:
                    f2:b8:8f:a4:dc:3d:0b:ad:aa:65:b2:66:97:ea:a3:
                    82:22:15:44:1e:16:10:9e:05:ba:6a:1f:88:37:cb:
                    63:e4:d5:41:58:2e:5c:db:66:12:bf:98:f0:7c:03:
                    37:23:73:63:67:f7:7d:2f:57:7f:63:55:75:7f:aa:
                    f2:9a:e9:de:3b:b5:49:77:36:a9:9c:24:f2:4a:22:
                    51:e6:5a:d1:6c:4a:09:c3:f8:76:37:e8:a7:d5:e9:
                    bf:7a:6c:3a:00:00:e7:90:90:e8:e0:0b:ff:09:db:
                    d6:a5:21:d7:c4:1b:de:a5:2f:50:d3:b5:28:f1:16:
                    bd:63:41:50:0d:3e:68:d6:e9:6f:72:54:d1:b4:d3:
                    aa:4a:95:d5:bb:09:4d:02:4e:29:7d:57:01:00:73:
                    fd:1b:9c:a6:cc:25:d9:ee:44:86:35:b7:83:cc:cf:
                    7f:29:69:4f:2c:d3:7e:aa:21:7b:c1:80:c4:e7:99:
                    4a:40:02:48:6a:16:87:d1:25:6d:a9:e9:0e:83:9e:
                    96:e9:c0:35:ec:80:e2:ee:7f:05:b7:46:0e:05:7f:
                    f2:33:13:da:ef:16:5c:43:79:10:b4:50:06:74:86:
                    42:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:C3:20:27:6D:C9:B8:5F:FB:4A:D7:9E:00:C1:C1:C7:1B:37:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:be:af:7f:80:90:33:7f:af:a5:52:19:10:d1:d4:a5:70:c0:
         81:a5:55:38:c4:9f:80:45:24:5c:bf:55:48:55:17:05:04:d0:
         1a:70:5a:dd:d5:45:73:f0:f1:9a:79:f4:05:9d:9d:99:6a:0d:
         80:cd:40:eb:b7:00:fe:d0:df:87:5c:d4:5a:ea:f2:6b:1a:f0:
         7a:07:1e:58:76:82:4a:c3:32:ec:7f:8d:81:90:40:41:ec:02:
         5a:53:44:40:db:7a:ac:b9:f7:a2:8a:fd:09:80:29:ef:70:3a:
         6e:b7:a9:f5:5e:4a:b2:64:41:c3:6b:33:62:26:cc:45:9b:26:
         6f:36:91:43:d0:f4:55:93:59:d9:d4:2e:b1:6d:45:a8:23:b3:
         e5:51:b8:16:f0:be:09:bd:d7:ff:02:30:de:f3:09:a9:bd:91:
         db:56:38:ce:2c:d2:7a:fc:80:6d:9a:4a:38:a8:88:5b:95:d2:
         b3:b4:bd:e6:5b:64:45:74:e3:b4:a3:1c:88:58:f3:6a:89:02:
         09:3a:e5:2e:f4:ea:36:ad:f9:7d:de:40:42:4e:65:fc:38:20:
         df:76:c3:ea:00:a5:5c:c8:a8:c5:87:8c:36:0e:70:5a:e7:f8:
         f5:11:f7:39:e8:4c:ae:08:8d:a5:f7:67:d5:1e:21:82:53:7a:
         f8:20:61:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:57 2026 by rpki-client