Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/787dadad-99b6-389c-9971-13fee67f4a17.roa
File:                     787dadad-99b6-389c-9971-13fee67f4a17.roa (raw, json)
Hash identifier:          6AEKhp4XTuuwhVRKG01ekw41wMgBF2PkRD8IgvQmQf8=
Subject key identifier:   E1:C6:39:BA:E1:27:CC:45:DF:2D:C1:C6:C7:B5:28:B5:CA:59:59:A3
Certificate issuer:       /CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
Certificate serial:       010D0C9F4328584E5009115439B697E439945EE4
Authority key identifier: 9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/787dadad-99b6-389c-9971-13fee67f4a17.roa
Signing time:             Sat 27 Jun 2026 16:51:27 +0000
ROA not before:           Sat 27 Jun 2026 16:51:27 +0000
ROA not after:            Fri 25 Sep 2026 16:51:27 +0000
asID:                     834
IP address blocks:        130.51.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:09:11:54:39:b6:97:e4:39:94:5e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9aab8b4-16b6-4ccb-befe-b6d79a384b26
        Validity
            Not Before: Jun 27 16:51:27 2026 GMT
            Not After : Sep 25 16:51:27 2026 GMT
        Subject: CN=51cc9ee9-f398-49ab-8018-91e1ab05cfeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1f:5d:29:b4:00:4a:20:81:f3:96:0c:c9:d7:
                    0c:e8:a5:8e:ed:4f:aa:f3:36:c2:98:3b:7e:04:a0:
                    67:bf:73:73:b3:f8:5e:6b:03:e6:f0:eb:a7:5b:5d:
                    7f:6a:db:66:81:b5:f8:20:75:dd:85:20:fb:b4:c0:
                    b0:51:89:a2:05:ce:ce:a3:b1:ec:ed:a3:8e:f2:99:
                    29:d3:e4:59:4a:06:3b:8c:8a:f2:c4:e4:51:83:c0:
                    e8:bd:f3:2f:62:67:e6:06:b8:cb:52:12:f9:89:a2:
                    c9:fd:b3:05:57:7b:ee:b6:6b:54:bb:40:2a:78:96:
                    f7:46:2c:09:7e:4e:a7:e3:a0:ce:de:60:10:99:c5:
                    6a:1a:ba:2c:11:50:c2:a1:ba:da:30:bf:19:1a:a5:
                    b5:26:71:77:f2:cb:67:04:a8:fa:d4:72:61:58:05:
                    2f:fe:b4:8d:3a:0f:06:6d:8f:86:4e:0e:8d:25:ac:
                    cf:bd:eb:80:88:dd:d6:8c:d0:14:bb:f4:62:62:05:
                    ce:c0:d7:27:c2:55:2e:ff:65:37:7b:8e:c3:54:3a:
                    39:0b:2c:35:f7:dc:ca:99:9b:be:c5:95:c8:56:84:
                    0f:a6:47:2b:84:f6:14:6b:ef:54:aa:09:75:48:d6:
                    5b:45:81:b9:19:5c:5b:89:3c:8d:4c:27:ce:08:43:
                    7b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C6:39:BA:E1:27:CC:45:DF:2D:C1:C6:C7:B5:28:B5:CA:59:59:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/787dadad-99b6-389c-9971-13fee67f4a17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.crl

            X509v3 Authority Key Identifier:
                keyid:9A:1E:CE:C2:A8:64:6C:6D:EC:A1:85:90:FF:24:B5:A0:B2:44:21:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d9aab8b4-16b6-4ccb-befe-b6d79a384b26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:ea:4c:b5:2a:e5:d6:02:e4:00:de:2c:df:1b:cf:f6:84:
         71:59:d9:9d:d1:64:6c:2a:ed:b3:bb:e2:67:93:c5:ee:7e:f0:
         26:ed:b7:bd:32:85:5a:33:1f:0e:c0:9e:ab:9a:b0:4c:4a:14:
         c6:e9:bd:12:7d:0a:23:dd:43:2e:56:55:35:83:b2:81:ab:cc:
         d2:e2:42:50:ff:da:71:5c:42:0f:6d:2b:b2:a1:d2:0a:df:b6:
         b3:62:bc:df:b5:d9:7a:dc:48:0e:58:e9:89:48:76:06:ed:15:
         3f:fb:74:24:c0:ab:f1:ea:25:3b:4a:64:c4:17:0d:eb:b3:4a:
         d0:f5:42:82:7e:56:e5:d1:8b:38:9d:96:7b:f9:02:f5:ac:ba:
         ba:79:32:23:a3:0d:da:3e:56:d1:bc:63:3a:89:14:d0:61:0c:
         fe:ad:fe:26:06:c0:7e:82:63:45:13:0d:71:7a:2d:7c:1c:4a:
         66:a3:ae:95:a6:80:ac:c5:09:89:67:08:fe:22:58:85:ce:7d:
         d5:b7:6d:66:bb:d8:c6:9a:25:b7:cd:13:4c:70:2d:58:05:95:
         d5:cb:d7:dc:ed:39:27:63:2e:5d:b6:74:78:6c:1b:3b:0a:89:
         b7:dd:58:8e:b9:af:48:79:d3:94:2e:14:78:a4:43:a9:e1:09:
         db:66:99:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:00:28 2026 by rpki-client