Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa
File:                     2e020565-2650-3731-84b4-b30e83f1cb6a.roa (raw, json)
Hash identifier:          uGjXrR+TAL1xK5w5gI8gCkbMj937iZqhQU7IazWslyg=
Subject key identifier:   6B:20:69:F7:72:E8:B8:4D:95:E5:9B:39:9C:C7:5D:A6:27:7A:D6:A2
Certificate issuer:       /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Certificate serial:       010D0C9F4328584EEA87613CA4271F4B1DB53414
Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     32145
IP address blocks:        131.109.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:61:3c:a4:27:1f:4b:1d:b5:34:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=5c4f9b9b-a3a4-4594-b72b-db46b8ad8273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ed:76:3d:87:10:e4:b6:b0:24:64:32:ce:bf:
                    57:20:32:f1:50:be:73:f2:73:0a:73:50:62:10:e8:
                    c2:e1:87:73:15:6c:16:41:f0:c6:ef:90:a7:2e:b8:
                    7b:bf:4b:ef:ff:1e:ae:7c:2a:61:41:4d:b0:8a:4d:
                    98:6e:45:13:e0:d9:bb:fe:04:4b:d6:0f:fe:45:93:
                    8c:b1:16:09:d1:70:43:c5:67:76:cb:a9:39:5b:e9:
                    4b:49:66:b2:3b:f6:19:1c:b4:c6:31:62:01:03:0e:
                    ee:cd:76:2e:25:af:57:8c:d9:82:14:62:48:d9:46:
                    ef:b5:90:4e:a7:17:49:31:6f:43:3c:46:27:a8:eb:
                    26:fa:bb:8d:1b:d3:99:11:a3:3b:8b:26:ba:1e:2a:
                    30:14:f3:68:ab:a7:a4:5d:5e:5b:c4:57:c2:7c:88:
                    80:11:28:41:f9:77:d0:8d:68:c0:22:7f:e6:71:8c:
                    f3:e7:78:ba:e7:08:db:81:d4:01:d2:8b:9c:a6:a7:
                    14:55:33:b4:b1:96:0e:20:81:d4:e5:31:92:25:5a:
                    a4:86:8c:f7:af:e4:3d:27:d1:fe:38:b3:de:5d:97:
                    af:69:67:e0:ff:25:29:b8:a2:65:cf:4f:db:24:ec:
                    5d:b3:fa:6b:44:c1:b7:61:14:cf:96:d7:19:a7:b6:
                    94:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:69:F7:72:E8:B8:4D:95:E5:9B:39:9C:C7:5D:A6:27:7A:D6:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2e020565-2650-3731-84b4-b30e83f1cb6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl

            X509v3 Authority Key Identifier:
                keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.109.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:d5:da:37:1c:35:e3:51:ac:91:67:fb:60:f9:ac:0e:19:71:
         f0:68:0a:ce:3d:f1:d9:58:73:96:ff:51:20:72:7e:8b:7d:91:
         10:a8:d4:fb:2a:dc:d6:f1:29:7a:2d:17:8e:dd:52:5a:f2:bc:
         1b:65:7f:dc:d6:0c:30:54:b9:a9:6a:b2:49:a4:26:28:d0:8f:
         ec:98:d0:21:97:37:c2:ff:cf:c8:65:7f:f6:5b:eb:a1:60:d3:
         44:21:1f:3d:1c:a3:ef:e7:07:35:ec:5d:5c:e6:95:c5:c0:6c:
         a0:fa:e0:c9:32:ec:88:54:4f:d1:7e:7c:79:62:d9:a7:80:5e:
         54:03:05:f4:8c:27:4c:86:bb:6e:8b:74:79:ae:58:44:cc:12:
         6c:65:35:b5:f8:2e:fa:f6:b5:bd:35:44:cb:bc:65:18:65:aa:
         66:4d:fc:d3:5c:14:67:27:e9:67:74:21:f2:23:f4:44:2d:04:
         20:e9:3b:23:d4:42:91:f8:ec:b6:1c:47:9f:be:4e:aa:a0:e5:
         81:63:7c:83:96:66:61:09:c1:02:89:3e:b8:20:52:cc:59:3e:
         50:ed:74:b8:f9:46:ee:16:8e:28:a1:64:2d:4f:ac:df:97:1b:
         dc:ea:d7:46:33:5b:fe:f0:0e:28:2d:b9:05:81:fe:0e:bf:2d:
         28:b1:9f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:06:19 2026 by rpki-client