Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa
File:                     6420c580-fa73-384a-87f8-f301e863e9de.roa (raw, json)
Hash identifier:          WEiAiqqTAczEep6wldiYenIO3IJEIhK5Yl7YFJ3KNxk=
Subject key identifier:   5F:F3:92:80:B9:67:32:31:79:6A:60:51:74:FE:F0:B4:ED:C3:39:5F
Certificate issuer:       /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
Certificate serial:       010D0C9F4328584F94D30821809FE88B3E4A0700
Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     198949
IP address blocks:        130.132.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:08:21:80:9f:e8:8b:3e:4a:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=91a41c4c-7e98-4f74-a9da-1e8166ed3910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:af:a1:dd:77:f7:c7:33:1f:44:74:76:da:
                    be:9b:a0:a2:d5:dd:be:82:ef:7a:37:f6:ec:f0:5e:
                    71:a1:a8:9f:69:e5:7c:c5:f6:c1:d8:b7:d5:c8:85:
                    02:77:07:44:11:ef:db:c2:fd:10:23:3e:8b:3f:79:
                    f2:a4:33:cb:25:6f:ff:e5:b0:8c:b1:d4:dd:04:c6:
                    44:36:dc:d4:24:b2:08:14:4c:7a:6b:f7:a6:bb:03:
                    2e:9a:b8:aa:ac:cd:9f:da:59:c7:d8:5d:de:5b:fe:
                    63:10:81:ad:e7:9a:f8:ef:8f:4f:fe:5a:e2:a0:48:
                    ff:de:fa:8f:40:18:26:8b:cf:5a:df:30:c0:49:39:
                    71:01:e7:23:52:7e:5d:c8:74:85:a5:46:dd:2d:e1:
                    a1:17:bd:b8:e1:ea:be:a3:30:2f:a5:88:27:dd:09:
                    7f:64:78:76:c7:13:a6:a7:bc:de:3f:80:3d:fe:1f:
                    e0:1d:93:91:e4:c1:6d:a1:fb:07:68:5a:25:52:b4:
                    bd:03:22:c5:ba:3e:12:e3:33:18:ec:9f:ac:b7:e0:
                    7c:63:98:10:8a:fd:b5:30:79:87:3c:2f:3f:4a:51:
                    60:87:67:31:86:91:c9:e3:9d:eb:6d:d8:64:23:b0:
                    34:8f:8b:99:32:7f:58:e7:cf:de:58:34:61:73:cc:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F3:92:80:B9:67:32:31:79:6A:60:51:74:FE:F0:B4:ED:C3:39:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl

            X509v3 Authority Key Identifier:
                keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.132.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:30:77:cc:7f:b3:36:94:0b:e7:db:0c:82:f1:fa:fe:e4:35:
         51:7d:48:92:3b:3e:c6:4d:a8:2f:29:5c:5e:ce:0e:b7:69:1c:
         84:5e:f5:ab:c0:28:05:4c:9f:18:89:9f:63:b2:55:f9:aa:fa:
         35:31:2e:9d:25:f0:ec:9d:78:6b:bb:df:89:ca:70:bd:6b:64:
         21:8f:0d:0d:e3:a1:37:af:1b:7a:54:12:67:a4:f0:8d:17:be:
         61:94:68:4c:7b:6d:bb:68:a5:a6:55:0e:28:42:53:1e:f6:40:
         75:dd:f0:85:1d:60:4e:39:47:bb:9c:13:67:25:20:6e:a6:22:
         f5:b7:43:84:69:86:48:f7:bc:fd:80:84:ce:ec:55:b4:08:ec:
         35:84:7e:11:c6:b5:7b:9e:a8:fc:8c:a0:00:e4:99:1b:05:0a:
         2d:32:77:b5:5c:f3:d8:b6:bd:1c:b8:ff:9a:5d:20:fd:af:83:
         b3:75:c7:ce:90:17:a9:ca:3c:f5:6c:82:e5:8b:be:e5:e9:f5:
         70:b3:b6:ac:26:04:7e:1a:a3:e5:38:d7:9f:27:15:d5:d2:72:
         9f:4f:04:cb:b9:0e:f3:e7:3a:ed:c9:e6:0e:0d:c3:35:5f:ec:
         5c:2f:8b:ad:69:07:63:ce:e9:b9:f8:21:f6:c8:40:a1:3c:69:
         28:0c:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:15:25 2026 by rpki-client