Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3ad17ba2-6c25-32c3-a565-e1533bfb3d08.roa
File:                     3ad17ba2-6c25-32c3-a565-e1533bfb3d08.roa (raw, json)
Hash identifier:          0Im8t7atxCJ/fL00AIYhHdzdKD9nadKFzq2ZhaC7VsY=
Subject key identifier:   38:3C:BE:A5:7A:12:91:81:C5:E3:E7:B6:18:D0:EA:47:39:3F:14:28
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584DEDE098AD454F13C064641800
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3ad17ba2-6c25-32c3-a565-e1533bfb3d08.roa
Signing time:             Sat 23 May 2026 13:00:31 +0000
ROA not before:           Sat 23 May 2026 13:00:31 +0000
ROA not after:            Fri 21 Aug 2026 13:00:31 +0000
asID:                     203724
IP address blocks:        131.229.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ed:e0:98:ad:45:4f:13:c0:64:64:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: May 23 13:00:31 2026 GMT
            Not After : Aug 21 13:00:31 2026 GMT
        Subject: CN=8c9ec903-e85d-448d-846b-698f931e49d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b3:48:d1:69:6c:01:53:b4:0f:c1:e2:f3:66:
                    84:f3:5c:6f:d7:2d:21:95:d3:78:3b:40:46:fa:c8:
                    2e:22:a5:68:27:7a:8f:dd:57:dd:34:f2:1b:e6:58:
                    95:8c:4f:65:3e:3f:7c:65:2b:35:3d:1c:b2:d5:43:
                    b7:e1:33:d4:0f:6e:d6:f0:9d:d7:80:a0:22:f6:f4:
                    2f:02:c5:61:c0:34:e7:1b:13:53:f6:ba:d8:5d:23:
                    bc:fc:eb:29:17:2d:10:9e:cd:7e:95:cb:7f:06:29:
                    7f:b0:b9:0f:4c:d4:e7:64:e8:4c:0a:0d:f9:1f:d3:
                    38:e5:8a:76:6f:b1:50:0a:a4:0d:ab:98:5e:fb:63:
                    f1:2b:82:ba:fa:4b:3d:33:5e:49:75:cf:97:18:35:
                    fd:cf:a8:22:9b:15:ae:81:af:4f:8b:b7:95:61:50:
                    73:fe:52:50:f2:28:99:4a:13:5e:84:59:e5:6f:0f:
                    2e:1e:f3:65:f4:64:0b:db:84:ce:52:df:17:dd:66:
                    c9:31:24:8b:7b:d4:80:93:16:ac:54:68:90:7a:50:
                    41:5c:60:4b:61:4d:4f:b4:7f:4c:13:25:49:83:08:
                    a6:b5:15:33:da:9e:35:0d:22:44:95:e2:d7:a2:f7:
                    f1:c2:83:79:54:e9:11:c4:30:61:67:7c:be:f9:8e:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:3C:BE:A5:7A:12:91:81:C5:E3:E7:B6:18:D0:EA:47:39:3F:14:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/3ad17ba2-6c25-32c3-a565-e1533bfb3d08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:bc:9c:cc:bb:49:86:f2:d2:af:e1:11:be:73:7c:f4:ce:
         dd:ca:97:f4:b4:69:31:bc:47:b6:6d:75:ff:2e:ed:70:73:a9:
         00:aa:ad:e2:20:98:10:8e:f9:15:2a:d4:b6:70:63:79:08:cc:
         e7:fe:1b:1e:44:36:ba:7b:db:c1:24:af:1f:e4:5a:94:b4:9d:
         88:6d:b5:22:f2:29:f6:c7:09:ca:12:9d:4c:79:c5:fe:98:f0:
         7e:2c:32:b7:07:b6:49:3d:7d:62:8c:4f:32:57:d1:8e:bc:a2:
         a4:6c:f0:a4:a8:1c:63:48:be:13:b2:2d:48:9c:6a:6c:b2:fa:
         d4:2c:a5:5f:7d:a5:2b:68:06:b3:31:98:e7:83:27:d4:4c:94:
         61:58:8b:17:3b:e0:48:a4:53:43:8e:ff:d6:89:45:15:8b:21:
         9b:de:e1:6d:1c:59:ef:6d:10:58:ab:51:5e:cf:5d:e5:fc:68:
         21:bc:d9:55:fd:70:bd:a4:e8:8a:d0:93:67:39:6c:6a:79:c2:
         20:56:30:eb:24:6a:3e:bb:c0:5d:5e:42:bf:c1:b2:d5:6c:07:
         00:81:66:9f:49:c3:0b:92:74:5f:fd:01:99:4e:62:e7:09:74:
         fd:e9:46:4a:45:51:4c:9f:be:34:5a:66:3f:d9:c9:91:1a:24:
         81:90:61:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:02:40 2026 by rpki-client