Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/9274aed5-f01a-363a-90f4-e1a09c8e091c.roa
File:                     9274aed5-f01a-363a-90f4-e1a09c8e091c.roa (raw, json)
Hash identifier:          5v81y04QUr5xJPd8PokZQl1qQSwf1nAfjtv7+6KoYHg=
Subject key identifier:   63:73:5B:14:B6:DA:39:09:1F:16:91:11:2E:7E:96:61:C9:5D:50:39
Certificate issuer:       /CN=f63b7eb8-acba-44a7-b922-bd22a4513564
Certificate serial:       010D0C9F4328584D8980109AF1C3403DCF907640
Authority key identifier: DD:15:DE:7C:46:31:9A:F3:CF:DA:3D:DA:D9:D5:18:98:2C:71:0B:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/9274aed5-f01a-363a-90f4-e1a09c8e091c.roa
Signing time:             Fri 17 Apr 2026 14:05:21 +0000
ROA not before:           Fri 17 Apr 2026 14:05:21 +0000
ROA not after:            Thu 16 Jul 2026 14:05:21 +0000
asID:                     19318
IP address blocks:        131.143.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:89:80:10:9a:f1:c3:40:3d:cf:90:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63b7eb8-acba-44a7-b922-bd22a4513564
        Validity
            Not Before: Apr 17 14:05:21 2026 GMT
            Not After : Jul 16 14:05:21 2026 GMT
        Subject: CN=8071c485-5def-41cb-8bcf-63de81169971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:0b:f7:40:db:7d:31:0e:a8:49:21:4d:1a:a5:
                    58:00:73:51:01:89:19:4f:7b:ba:69:68:ab:c1:ee:
                    e4:84:a3:91:d4:b0:91:cd:dd:67:53:3d:f5:cf:e0:
                    88:f7:c5:23:28:4c:13:9e:42:0c:9e:29:dc:d3:33:
                    4e:6c:c0:7d:12:19:7a:6a:3b:46:09:e3:0b:9e:22:
                    50:bd:1f:da:16:17:a7:05:cd:6e:68:4f:81:9a:3a:
                    53:db:47:12:f1:1b:dd:89:8e:98:5e:45:12:da:a7:
                    89:e1:1a:b2:51:76:48:9f:04:5c:e0:a7:b5:52:d6:
                    ce:87:31:31:80:cc:5e:9d:6d:ff:d5:f1:c3:36:06:
                    03:2e:8e:29:19:5f:af:1c:ef:e8:3a:8e:5f:6a:41:
                    f3:f1:ca:34:e1:4f:d2:4b:f8:6d:51:b7:78:24:f8:
                    f7:f9:f9:68:c6:c2:74:e2:4b:e8:a5:5a:60:d2:e7:
                    ad:fb:56:97:7c:e3:05:7a:c3:88:30:1e:f7:1f:03:
                    4a:57:6b:bd:60:f7:09:59:bd:f3:43:66:7d:15:c2:
                    f5:95:dc:9e:06:32:b4:40:8e:1b:4f:18:d4:64:6c:
                    74:58:37:65:5c:ac:a2:85:c9:27:45:7e:1a:d7:bf:
                    b5:8e:8b:5c:4b:4a:ab:7b:29:a0:9a:15:60:5d:7f:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:73:5B:14:B6:DA:39:09:1F:16:91:11:2E:7E:96:61:C9:5D:50:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/9274aed5-f01a-363a-90f4-e1a09c8e091c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564/f63b7eb8-acba-44a7-b922-bd22a4513564.crl

            X509v3 Authority Key Identifier:
                keyid:DD:15:DE:7C:46:31:9A:F3:CF:DA:3D:DA:D9:D5:18:98:2C:71:0B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f63b7eb8-acba-44a7-b922-bd22a4513564.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:6d:08:82:6e:be:90:62:9d:d3:12:99:6f:39:69:93:8e:d5:
         09:56:eb:de:6c:20:f7:ea:ca:c1:1d:64:d9:de:d7:7a:a8:76:
         a8:48:6c:c2:41:ce:29:17:da:e5:d4:4e:2d:27:14:bf:81:93:
         23:50:4e:db:e2:bb:e7:a2:38:3c:3d:91:53:97:fc:96:59:8f:
         90:72:a0:4b:d7:66:d1:23:60:39:35:79:7f:c7:47:72:ae:42:
         1b:2f:7d:df:c8:c6:e7:73:84:3a:77:50:28:13:82:ae:8a:22:
         14:4b:47:f7:5d:4b:4b:35:1c:88:86:e0:46:3a:2f:06:a1:51:
         fb:33:a6:d0:2c:9a:8d:d7:e7:45:8e:1b:1d:c5:57:96:50:4a:
         18:59:87:97:6a:c2:ec:f0:15:02:80:42:0d:14:7d:77:16:3f:
         4c:93:a3:94:7f:e8:60:1c:12:bc:bb:7e:0d:d7:3a:f7:09:24:
         00:52:bf:60:d5:0a:c0:f7:ba:91:a2:ce:cf:29:17:dc:ed:06:
         5a:23:83:dd:d7:aa:4a:b7:67:9a:d3:8a:22:1c:c5:40:7a:5e:
         d8:f6:fe:83:76:b7:26:f9:41:2d:9d:45:8c:6e:5e:2a:c5:f9:
         16:45:db:f9:7c:d2:c4:4e:f2:71:ff:d0:78:97:55:82:7f:63:
         78:a1:b5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 07:12:56 2026 by rpki-client