Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7f05a679-b4c3-375e-bbec-aeb09c9d2a58.roa
File:                     7f05a679-b4c3-375e-bbec-aeb09c9d2a58.roa (raw, json)
Hash identifier:          2HGgXm8DZdlgAlxu1tf4VqkpNrSNputCgC1jTxrkgAY=
Subject key identifier:   B8:A9:A5:27:6F:A7:1C:36:18:5C:D9:55:31:84:E0:E5:7E:3E:9A:C8
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584DDD2083AE87A7ECB27F10EFD0
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7f05a679-b4c3-375e-bbec-aeb09c9d2a58.roa
Signing time:             Sun 17 May 2026 13:00:32 +0000
ROA not before:           Sun 17 May 2026 13:00:32 +0000
ROA not after:            Sat 15 Aug 2026 13:00:32 +0000
asID:                     203724
IP address blocks:        131.229.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:dd:20:83:ae:87:a7:ec:b2:7f:10:ef:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: May 17 13:00:32 2026 GMT
            Not After : Aug 15 13:00:32 2026 GMT
        Subject: CN=4649de92-36e4-4ed9-ba45-b9babc0b60e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5d:aa:17:83:16:4d:32:48:cd:6d:0d:57:ed:
                    9e:11:f8:cf:a8:fb:68:21:8c:99:34:e0:56:7d:6c:
                    46:84:2d:6b:e3:af:bd:9d:f5:b9:06:15:95:be:26:
                    0e:25:be:11:c8:35:45:6a:28:3a:75:e7:0b:f0:17:
                    4c:ab:bc:2b:98:5c:28:01:5c:2d:6c:14:30:40:f6:
                    c7:2b:7f:13:f1:59:76:a5:c7:e3:93:9d:23:6e:3b:
                    b8:1c:d3:52:ee:39:7b:83:7b:d6:2c:77:b3:53:e7:
                    85:f8:40:23:e5:5c:a2:c3:8d:53:f0:08:bd:eb:66:
                    99:06:ae:7f:bb:2a:46:26:64:b6:95:10:fb:37:22:
                    ed:3e:44:16:a9:e9:e0:88:58:b0:52:f2:7e:d8:53:
                    2d:10:54:fb:f6:45:b2:eb:9b:28:00:33:11:13:6b:
                    ec:dc:cd:33:06:ee:6d:8e:89:0c:ef:9a:4e:e2:5b:
                    e7:cf:34:e7:59:34:c5:32:b3:26:7e:35:cf:8f:24:
                    e9:a7:92:8b:ca:a7:b8:dd:15:6d:dd:c6:73:a4:a9:
                    ce:ac:71:16:dd:8b:fc:7c:3a:59:72:ef:07:86:92:
                    0c:ae:d7:94:8f:87:15:79:e4:a2:09:84:1a:5e:0a:
                    f9:3f:62:2e:f2:a5:18:83:a8:9a:ec:f0:a2:46:3b:
                    da:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A9:A5:27:6F:A7:1C:36:18:5C:D9:55:31:84:E0:E5:7E:3E:9A:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/7f05a679-b4c3-375e-bbec-aeb09c9d2a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:a5:0c:c0:ee:f1:a1:45:1d:99:b3:ae:45:e5:2b:9b:8c:
         70:1f:a2:e6:d4:6f:8e:72:f5:fd:e5:cd:7e:9f:a0:bc:ed:a3:
         e3:90:a5:3b:83:f5:55:9a:07:0a:d3:96:7f:27:0e:39:68:80:
         10:85:c7:3c:d4:22:be:42:be:03:61:a7:1d:f8:b1:7b:be:89:
         e9:51:d6:af:c7:71:b5:cb:d5:b8:41:a6:9b:28:26:69:14:0c:
         e2:18:65:3e:79:eb:57:92:45:ca:61:1a:fb:ad:2b:24:d7:6a:
         e9:75:da:86:27:a7:77:67:f9:40:66:58:e0:76:cb:05:60:15:
         bd:a3:3a:57:b2:c0:12:02:c9:44:09:6e:75:af:31:d3:26:72:
         d2:03:13:f5:78:46:e1:86:f3:3b:6d:58:74:3c:16:d1:15:7f:
         dc:15:93:2a:35:fb:41:d5:77:4d:da:f6:6a:cc:88:30:d0:09:
         c1:e0:56:06:0c:36:1b:25:93:3e:ad:73:e2:64:65:b7:b4:62:
         c7:bc:56:ce:9f:4f:09:7f:ec:46:8c:c7:ac:22:5a:e8:22:89:
         0f:e0:08:ae:bf:e9:9f:d2:ce:b6:55:fc:58:e2:d6:d2:c4:1d:
         85:9e:97:56:1c:b4:23:34:b5:33:72:c8:26:4a:48:d4:7a:56:
         42:d2:93:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 21:02:51 2026 by rpki-client