Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/a2210f4c-0770-3810-b9f5-511ddd5f8ce9.roa
File:                     a2210f4c-0770-3810-b9f5-511ddd5f8ce9.roa (raw, json)
Hash identifier:          l1vvOfS7xO9G2W6/wPDy2XJ+Ktpjbjhy0Xb9Rzms6wg=
Subject key identifier:   23:21:9A:92:09:A4:2F:53:64:F1:1F:6C:5E:67:7D:B3:EE:1C:C1:5C
Certificate issuer:       /CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
Certificate serial:       010D0C9F4328584DDA55DA4E52C9DFA3A83589A0
Authority key identifier: 9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/a2210f4c-0770-3810-b9f5-511ddd5f8ce9.roa
Signing time:             Sat 16 May 2026 13:00:31 +0000
ROA not before:           Sat 16 May 2026 13:00:31 +0000
ROA not after:            Fri 14 Aug 2026 13:00:31 +0000
asID:                     13335
IP address blocks:        131.219.0.0/20 maxlen: 20
                          131.219.0.0/21 maxlen: 21
                          131.219.0.0/22 maxlen: 22
                          131.219.0.0/24 maxlen: 24
                          131.219.1.0/24 maxlen: 24
                          131.219.2.0/24 maxlen: 24
                          131.219.3.0/24 maxlen: 24
                          131.219.4.0/24 maxlen: 24
                          131.219.5.0/24 maxlen: 24
                          131.219.6.0/24 maxlen: 24
                          131.219.7.0/24 maxlen: 24
                          131.219.8.0/22 maxlen: 22
                          131.219.8.0/23 maxlen: 23
                          131.219.8.0/24 maxlen: 24
                          131.219.9.0/24 maxlen: 24
                          131.219.9.0/25 maxlen: 25
                          131.219.10.0/24 maxlen: 24
                          131.219.11.0/24 maxlen: 24
                          131.219.12.0/23 maxlen: 23
                          131.219.12.0/24 maxlen: 24
                          131.219.13.0/24 maxlen: 24
                          131.219.14.0/24 maxlen: 24
                          131.219.15.0/24 maxlen: 24
                          131.219.16.0/24 maxlen: 24
                          131.219.17.0/24 maxlen: 24
                          131.219.18.0/24 maxlen: 24
                          131.219.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 02 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:da:55:da:4e:52:c9:df:a3:a8:35:89:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe
        Validity
            Not Before: May 16 13:00:31 2026 GMT
            Not After : Aug 14 13:00:31 2026 GMT
        Subject: CN=849ded18-f5bc-42ec-ac11-8d176cc2f109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:97:68:fa:c3:18:7e:54:ca:71:11:cf:88:
                    ca:a9:c0:3e:03:32:77:51:86:28:a6:39:2f:d9:f4:
                    55:31:7c:f8:7b:26:93:b8:32:78:f9:10:ea:d3:22:
                    2f:e6:76:d3:b4:25:f2:64:6d:02:21:67:15:1b:e4:
                    8d:fd:0b:1f:d2:6a:bd:b8:4a:48:62:c8:16:d2:01:
                    21:b1:1d:e8:5a:3b:da:6c:c2:fe:47:38:d5:af:fb:
                    13:74:ef:30:34:52:cb:fd:39:bf:a1:b5:cb:e6:a1:
                    71:d1:48:eb:20:45:a6:d7:09:02:05:d9:80:e8:15:
                    4a:1b:08:c4:d7:2e:fa:43:84:71:a3:cb:d2:a8:b7:
                    a2:7b:54:6e:8f:6d:2a:0f:f9:9d:22:da:bb:f8:e7:
                    52:97:43:4b:c6:bd:af:f4:cc:7c:07:35:ca:55:31:
                    c9:e6:e3:18:41:b3:35:b3:0c:2c:74:9c:f9:8b:1d:
                    25:a7:92:6d:0f:90:d5:e4:3d:14:14:6a:b7:18:6e:
                    8e:6e:e9:66:64:6c:75:f4:08:bc:a1:5e:61:3b:10:
                    99:98:50:ba:40:38:66:83:2a:18:5b:eb:d5:90:3b:
                    42:f9:4e:08:ae:cf:11:e4:73:23:68:86:fb:15:58:
                    f5:d2:1f:76:5a:68:d8:08:e4:ba:68:70:7c:2b:e3:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:21:9A:92:09:A4:2F:53:64:F1:1F:6C:5E:67:7D:B3:EE:1C:C1:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/a2210f4c-0770-3810-b9f5-511ddd5f8ce9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.crl

            X509v3 Authority Key Identifier:
                keyid:9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.219.0.0-131.219.19.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:ca:a8:61:a3:66:9d:22:d4:95:e7:af:1b:16:9c:83:4d:
         3a:a2:c8:e8:bf:a8:92:1a:7c:d2:58:fa:a7:38:5e:07:f8:53:
         fb:a9:59:5e:2b:ca:0b:99:8c:e5:4a:c2:cf:b3:eb:f4:a5:59:
         97:89:5e:f3:51:2a:08:b1:9e:e9:48:3e:9c:fb:15:a6:c3:0c:
         14:6b:7a:b3:6c:c4:b2:b3:8a:b8:10:d1:a8:4e:36:01:13:a2:
         40:87:f4:56:90:d2:e9:0a:a1:70:ef:15:b9:39:37:51:61:b7:
         2a:9a:70:a3:fe:9d:25:94:68:84:a9:ed:dd:01:d6:01:f2:5b:
         11:9d:e8:96:c8:8b:44:0f:33:1d:74:e6:84:e5:0a:6b:cf:a0:
         d4:01:e8:e7:c7:ee:b9:66:1d:1c:10:e7:19:9c:d0:bd:fd:6c:
         63:79:e5:34:c8:77:4c:bd:5d:63:5d:98:d8:f5:07:70:36:ff:
         14:d2:27:03:70:9b:4a:9b:da:4b:6c:83:87:ad:bf:db:2c:36:
         29:e1:0c:85:ae:ae:f2:28:64:5a:ad:49:4b:01:d6:27:95:fe:
         e5:9f:f2:85:c2:a1:43:1f:7a:3e:77:5e:bf:35:f4:8b:8f:6f:
         01:94:46:c3:20:3c:49:6d:36:6b:0a:79:48:c8:f1:d5:f6:03:
         d6:d3:9f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:08:18 2026 by rpki-client