Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/61c61b85-c6fc-381b-ad41-e0b702a29837.roa
File:                     61c61b85-c6fc-381b-ad41-e0b702a29837.roa (raw, json)
Hash identifier:          wgI19z6RkEq+SexnilnC3OS0K2MmSZX31pYkPFgZKXg=
Subject key identifier:   BF:49:86:5A:75:6F:CD:4C:CF:30:97:53:42:D1:26:FA:F4:19:6A:4F
Certificate issuer:       /CN=54f335e9-72b0-4332-86a1-4a11593d7ef7
Certificate serial:       010D0C9F4328584EFAB0A176D1AEB52DDF135140
Authority key identifier: 43:45:D2:28:E7:C6:DA:D1:82:D2:E1:A1:28:12:ED:E0:30:01:88:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/61c61b85-c6fc-381b-ad41-e0b702a29837.roa
Signing time:             Thu 27 Aug 2026 19:56:29 +0000
ROA not before:           Thu 27 Aug 2026 19:56:29 +0000
ROA not after:            Wed 25 Nov 2026 20:56:29 +0000
asID:                     214432
IP address blocks:        131.143.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/54f335e9-72b0-4332-86a1-4a11593d7ef7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/54f335e9-72b0-4332-86a1-4a11593d7ef7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fa:b0:a1:76:d1:ae:b5:2d:df:13:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f335e9-72b0-4332-86a1-4a11593d7ef7
        Validity
            Not Before: Aug 27 19:56:29 2026 GMT
            Not After : Nov 25 20:56:29 2026 GMT
        Subject: CN=7f6c58bc-6d3a-4e4f-9d41-2289b8d7bf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:83:26:de:61:c2:93:c3:04:21:49:76:c4:51:
                    b7:21:96:96:61:7a:61:e6:f3:10:31:90:9a:03:fb:
                    eb:b2:01:28:25:7f:da:c6:ea:a1:ca:98:26:b9:7d:
                    7e:cb:93:49:46:37:f7:8b:3c:f8:c8:18:61:5a:78:
                    6f:c8:6b:7b:bb:9e:c2:02:04:1d:41:a5:f0:86:fe:
                    45:1c:58:e8:84:29:b9:74:b2:b4:0e:d1:ba:cf:50:
                    2c:09:c0:81:b8:d9:1d:63:5f:9e:00:a3:e7:00:7c:
                    53:c0:82:54:84:b1:de:26:5c:34:4d:78:09:3c:aa:
                    af:2f:67:34:39:96:7f:0b:b3:4d:ee:24:de:d8:5f:
                    ec:b1:c9:fe:13:69:e1:1f:89:f4:cb:19:e8:db:73:
                    52:4f:4f:44:0e:97:bd:59:06:9e:9d:33:0d:b1:61:
                    1b:ce:66:a2:c1:5d:64:22:99:34:84:a7:f3:d5:d0:
                    59:58:ec:0c:d9:37:72:b7:14:0f:f9:3b:fa:54:a6:
                    56:03:82:d5:2b:04:cc:76:83:88:02:e4:e6:9c:be:
                    f9:b4:63:61:d9:0e:c1:8c:1d:cd:d7:12:37:bc:fe:
                    87:60:df:59:3f:d0:84:c6:6a:9c:f6:e0:0f:4f:19:
                    ac:e4:35:d2:c6:fd:5e:78:28:21:ae:52:77:95:33:
                    32:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:49:86:5A:75:6F:CD:4C:CF:30:97:53:42:D1:26:FA:F4:19:6A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/61c61b85-c6fc-381b-ad41-e0b702a29837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7/54f335e9-72b0-4332-86a1-4a11593d7ef7.crl

            X509v3 Authority Key Identifier:
                keyid:43:45:D2:28:E7:C6:DA:D1:82:D2:E1:A1:28:12:ED:E0:30:01:88:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/54f335e9-72b0-4332-86a1-4a11593d7ef7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:ab:8a:72:a9:66:27:68:cf:9e:a8:e5:67:35:7d:88:ce:c2:
         bb:e5:bc:c3:6d:aa:66:51:2d:a4:f9:75:29:9f:64:71:c8:db:
         e0:0c:65:57:13:40:5b:fe:9d:60:89:e6:34:09:59:9c:c0:4e:
         e7:9c:f7:11:6a:92:19:5c:8c:d6:7c:2f:75:31:16:50:d6:0b:
         25:55:c6:17:73:bc:0e:cf:7b:32:8c:f6:69:f8:2b:3e:21:25:
         cc:b7:27:d7:49:54:df:a3:52:31:43:7c:54:96:b6:c0:3e:3d:
         f8:f7:d3:f9:3b:ff:9d:ad:1f:10:82:a5:2d:6c:22:80:04:3d:
         08:e3:db:02:52:16:2f:55:53:1d:f2:f1:c2:45:29:16:c4:28:
         1c:12:b6:eb:4e:f5:d5:c9:92:14:93:9b:f9:ff:d3:63:9f:09:
         17:74:6a:be:49:d4:ac:a3:4b:a4:77:3a:f0:2a:ff:b5:fe:c7:
         f9:55:45:1a:76:96:64:65:13:cf:e1:23:ae:d1:60:8d:69:95:
         df:d1:9a:b5:e4:f7:fc:97:d0:dd:cf:e2:bd:e3:d5:25:9f:d6:
         52:de:20:c9:02:e2:f1:39:e0:1a:7d:eb:8e:cd:92:90:6e:0d:
         3e:31:71:75:e7:70:24:f4:42:18:b4:16:e0:42:9f:46:2b:8c:
         a0:f4:8f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 20:27:20 2026 by rpki-client