Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/df322361-fe51-3a0d-a06d-4c70a1b4e0b7.roa
File:                     df322361-fe51-3a0d-a06d-4c70a1b4e0b7.roa (raw, json)
Hash identifier:          AHy3tfdboj6HR/erR5ORMwDvhsS+QmdYMNywHVMxiJU=
Subject key identifier:   E2:BF:DE:7A:A2:27:11:52:0F:38:7B:1F:C6:D0:CE:CA:33:BC:A4:C5
Certificate issuer:       /CN=d976d803-9006-4b37-9d12-23e5108d0e94
Certificate serial:       010D0C9F4328584F7783653FE3CF8B4883E2C500
Authority key identifier: 78:E1:07:6B:F3:61:E2:7E:0E:D0:08:5C:7F:63:E4:47:5C:8C:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/df322361-fe51-3a0d-a06d-4c70a1b4e0b7.roa
Signing time:             Sun 11 Oct 2026 13:00:12 +0000
ROA not before:           Sun 11 Oct 2026 13:00:12 +0000
ROA not after:            Sat 09 Jan 2027 14:00:12 +0000
asID:                     401918
IP address blocks:        134.49.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:77:83:65:3f:e3:cf:8b:48:83:e2:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d976d803-9006-4b37-9d12-23e5108d0e94
        Validity
            Not Before: Oct 11 13:00:12 2026 GMT
            Not After : Jan  9 14:00:12 2027 GMT
        Subject: CN=6e01f235-6ef3-4154-9ab4-9b23c497680b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a3:ce:50:63:b9:1f:25:70:13:3e:fc:ba:2c:
                    35:6f:c7:45:4c:53:df:f9:a6:b4:86:55:7f:93:09:
                    ea:91:f5:4f:90:b7:62:da:ee:ee:31:2a:55:59:66:
                    fb:c0:0d:ee:fd:13:5d:b0:be:dc:66:45:4f:58:05:
                    bd:a0:2e:65:9a:93:f8:32:c9:ee:f5:3d:7c:fd:5c:
                    0c:c8:66:45:14:4e:be:01:27:0e:53:56:70:7e:13:
                    ba:03:41:78:3c:a9:69:30:3e:b7:6b:9d:2f:b9:89:
                    1e:59:e5:4e:e0:3f:f1:ef:ce:9f:c1:6f:01:08:02:
                    01:7b:94:7b:ed:fa:c8:3e:b9:d8:0a:c0:19:21:cb:
                    89:f2:ba:98:10:65:8c:9b:06:ec:9f:aa:ae:a4:2b:
                    dd:72:d5:1f:29:fe:82:40:07:dd:51:de:04:3b:d1:
                    f2:95:5c:57:b7:97:9d:dc:ad:83:ff:24:bf:f6:b3:
                    1f:92:39:f4:c0:2a:c0:45:dc:dd:77:eb:35:51:ea:
                    21:36:9b:7a:74:06:b3:95:99:f3:b1:02:7f:1e:6c:
                    74:b5:72:d7:17:14:69:8b:8d:8f:1d:97:1f:a0:4d:
                    7f:04:9b:0b:7f:5e:51:b5:3b:85:5e:a6:b4:32:57:
                    25:53:37:9d:ae:ef:a5:f1:81:4a:b7:44:49:d2:2b:
                    c3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BF:DE:7A:A2:27:11:52:0F:38:7B:1F:C6:D0:CE:CA:33:BC:A4:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/df322361-fe51-3a0d-a06d-4c70a1b4e0b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.crl

            X509v3 Authority Key Identifier:
                keyid:78:E1:07:6B:F3:61:E2:7E:0E:D0:08:5C:7F:63:E4:47:5C:8C:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e9:a0:77:f1:53:17:4a:9e:0a:f0:ea:a5:61:9d:23:f0:6e:
         cd:d0:47:96:f5:65:79:f6:f9:5e:ab:7a:66:c9:67:87:69:7e:
         4c:e5:63:5b:9e:74:b7:d5:3e:ea:a5:f9:3a:74:ad:3b:9a:a5:
         17:5a:14:c7:49:26:ee:be:ea:9e:4e:9f:0d:37:e7:53:d3:11:
         9c:88:81:45:ed:e0:c0:73:1b:0f:27:f2:4e:bb:02:48:fb:1c:
         ec:97:5b:fa:3e:1c:0d:29:4a:fd:f2:36:a0:bb:aa:00:59:56:
         99:39:8b:b8:0f:2e:20:02:a9:6d:c8:f0:db:0c:c0:9d:4c:7f:
         35:b9:62:ad:29:0a:50:88:a1:41:34:d1:b6:ba:ae:b8:22:ed:
         6a:18:04:31:dd:6a:38:7e:84:64:d2:95:98:15:cc:01:0a:09:
         0c:32:78:92:e9:f2:5a:fb:d6:e9:3d:ba:6d:70:7f:16:32:f8:
         26:34:e2:64:09:c1:bd:0d:3b:2e:ae:22:a7:e9:fd:a8:e7:e9:
         76:4c:85:b4:d5:d4:bd:f7:39:26:9c:6f:8f:4a:69:eb:0f:15:
         e7:5c:10:63:5a:5a:10:39:1d:03:5c:8f:6c:04:ab:57:b6:b7:
         93:fd:32:d9:2b:85:17:d3:9c:50:78:ac:f8:f2:bc:9f:30:1f:
         aa:c5:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 21:12:53 2026 by rpki-client