Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f67391c2-20e4-37c0-ac45-d0c74eab5ae6.roa
File:                     f67391c2-20e4-37c0-ac45-d0c74eab5ae6.roa (raw, json)
Hash identifier:          TyeVkeG9OMrgyg4EG/A2bYBaD51hnO20xcVufs4zYWA=
Subject key identifier:   21:3B:4C:72:FF:41:29:73:BC:FC:89:65:B8:6A:FB:E1:8F:F6:2E:CB
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F9A68A9937D8746CA7289F080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f67391c2-20e4-37c0-ac45-d0c74eab5ae6.roa
Signing time:             Sat 24 Oct 2026 01:00:12 +0000
ROA not before:           Sat 24 Oct 2026 01:00:12 +0000
ROA not after:            Fri 22 Jan 2027 02:00:12 +0000
asID:                     701
IP address blocks:        157.130.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9a:68:a9:93:7d:87:46:ca:72:89:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct 24 01:00:12 2026 GMT
            Not After : Jan 22 02:00:12 2027 GMT
        Subject: CN=ab011191-144a-4f5f-b913-b1207a128799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ba:fb:2a:5d:dc:84:47:dc:69:c0:ea:dc:39:
                    fe:7e:48:aa:43:05:e3:6c:4c:4a:30:70:5a:b6:3c:
                    ef:c4:2e:70:fb:8a:80:16:9f:0a:a2:20:c8:9a:05:
                    10:5e:98:5e:dd:02:2f:8a:63:24:fa:ca:1c:5a:74:
                    30:ca:9d:aa:6e:7c:12:09:4d:4e:1f:fd:17:cb:96:
                    ac:d8:a9:af:13:1d:9e:63:e7:3b:43:09:86:4e:e4:
                    52:29:f1:5e:a4:3c:90:8d:9d:8d:31:38:27:b9:17:
                    27:42:4e:c2:06:5d:6c:f5:69:91:9d:b7:7e:a0:01:
                    e8:fb:b9:d6:bc:ad:3d:1c:3a:bb:c3:c8:b7:da:aa:
                    42:3f:3f:bf:02:b0:c8:87:fb:00:6f:42:6b:c1:20:
                    99:b4:a0:4c:89:12:da:58:87:82:5d:a6:02:0d:d8:
                    3b:0c:52:47:8f:74:bb:16:a1:32:d9:06:d8:0b:d4:
                    63:51:bc:87:cf:ef:cb:3c:88:a3:4a:f1:8d:19:33:
                    c0:8b:e2:54:dc:0f:c5:39:4d:5c:11:26:43:7c:75:
                    b8:9e:da:14:b2:0b:cc:6d:f1:ab:2c:72:5d:ec:fa:
                    0b:07:d0:17:79:c5:44:e6:89:a2:18:1d:a2:39:51:
                    fb:c7:df:07:af:0f:c3:c8:67:fa:c9:de:b0:99:71:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3B:4C:72:FF:41:29:73:BC:FC:89:65:B8:6A:FB:E1:8F:F6:2E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f67391c2-20e4-37c0-ac45-d0c74eab5ae6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.130.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:57:67:11:7b:0a:0c:62:b0:f8:76:de:35:3a:67:88:96:89:
         da:95:e2:c8:a4:11:65:2c:32:78:4b:59:87:2a:21:4e:7c:36:
         4d:30:77:df:0e:51:64:4e:aa:3c:d9:a9:ad:fa:45:e4:6c:13:
         c3:06:e9:62:ef:ea:bd:07:ad:d6:a2:ef:59:4f:64:64:ff:e3:
         16:90:88:4a:cc:fe:93:e3:b3:6b:b2:38:01:41:c3:7b:78:60:
         9d:13:cf:60:ed:20:3d:4d:23:20:0e:01:81:77:12:a1:9c:1e:
         88:54:a1:09:b4:73:e4:39:6d:fb:fc:2d:c1:92:cb:c8:67:eb:
         8c:c7:93:7b:35:bf:40:66:f7:45:5c:4f:e6:24:07:d5:80:34:
         6f:90:51:68:f1:f2:d8:67:2d:11:be:0a:92:91:49:f2:86:15:
         3e:97:96:a3:6a:5a:81:7e:af:eb:0b:1b:3b:3f:b5:19:ab:ba:
         ac:c8:88:98:3f:0b:e1:aa:e3:7c:b0:ae:9e:a0:ee:14:dd:54:
         aa:94:76:95:5c:c9:5a:b9:d2:27:a3:20:e8:5f:3e:f0:b2:c0:
         b4:80:06:a4:60:31:5c:d3:e7:24:1e:fb:bd:1d:f6:95:bb:ab:
         be:d8:44:99:f7:35:81:58:bf:d4:fb:11:b7:fa:85:9d:5b:f5:
         1b:ce:f9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:23:17 2026 by rpki-client