Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2a50901f-0d25-3890-8e17-0f072557c998.roa
File:                     2a50901f-0d25-3890-8e17-0f072557c998.roa (raw, json)
Hash identifier:          9Sf0k01PNIWb7OBZH6PNwgbj18Va5nk3AL4j1aLlOVA=
Subject key identifier:   BD:8E:D1:D5:AB:25:1A:D9:35:31:86:AD:04:A4:3F:F1:CB:68:4E:8A
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584DE58088E2A6A27B11C906A200
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2a50901f-0d25-3890-8e17-0f072557c998.roa
Signing time:             Wed 20 May 2026 13:00:31 +0000
ROA not before:           Wed 20 May 2026 13:00:31 +0000
ROA not after:            Tue 18 Aug 2026 13:00:31 +0000
asID:                     61138
IP address blocks:        130.12.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 May 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:80:88:e2:a6:a2:7b:11:c9:06:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: May 20 13:00:31 2026 GMT
            Not After : Aug 18 13:00:31 2026 GMT
        Subject: CN=088f1a24-85c1-4a66-9d8b-b0e5faecd16f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:98:45:70:c6:f8:50:85:4c:ef:9e:b9:cb:67:
                    21:89:92:59:df:7d:28:12:09:09:fe:77:82:d4:3c:
                    91:19:1b:9a:59:2e:e6:29:d1:97:1d:56:fb:6f:d2:
                    0d:51:e7:34:ed:68:d7:d1:eb:99:e1:e6:fb:e7:0f:
                    86:10:1c:b1:02:c3:32:b2:08:02:b3:25:5a:eb:a1:
                    45:1e:68:d7:75:58:38:7d:d2:b6:57:8d:b4:59:7b:
                    b6:c1:a7:35:61:42:50:7f:77:b9:8e:f1:07:5f:a3:
                    9a:c0:34:98:d4:ea:df:5e:7e:f2:da:b4:64:76:8c:
                    e7:a6:e2:60:28:7b:99:e0:35:60:b9:8e:ad:86:32:
                    c5:0a:8e:53:d0:40:34:7b:68:bb:58:cd:a6:21:56:
                    60:36:d2:29:33:c7:bf:df:07:5d:e1:41:05:f7:ae:
                    87:e0:e2:93:47:4a:b1:14:7e:9e:c0:3c:71:98:f7:
                    2e:bb:15:1c:d0:3b:67:9f:da:74:28:12:31:85:27:
                    2d:9f:3a:f4:61:bf:dc:06:70:bf:6d:0b:d3:b9:98:
                    32:6a:91:80:5c:55:d5:00:7f:0b:97:f7:10:2d:1c:
                    2a:f3:9e:e4:68:cd:cf:d9:1e:d5:85:f3:0f:59:e1:
                    26:79:01:6f:b7:53:0d:51:26:11:dc:49:be:f0:e4:
                    04:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8E:D1:D5:AB:25:1A:D9:35:31:86:AD:04:A4:3F:F1:CB:68:4E:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/2a50901f-0d25-3890-8e17-0f072557c998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:59:a0:29:1d:70:93:a6:03:c0:36:91:38:2a:fe:f8:cc:ee:
         17:71:8c:72:9e:53:30:87:d1:7d:4e:c7:0d:ff:05:6d:62:93:
         93:3a:7d:9c:08:db:ed:4f:8b:d8:05:61:41:0a:1f:3d:0b:8d:
         22:f0:2e:84:5f:48:af:a1:70:43:f9:bc:36:26:71:79:73:10:
         e1:aa:61:d6:ef:5d:d4:7e:72:d3:45:48:4a:39:5b:05:49:bc:
         28:a5:20:df:11:c2:9c:18:fe:8f:3f:76:df:71:18:78:25:8d:
         05:6a:ca:4c:a9:e9:9a:ae:32:2e:c8:45:5c:5f:c6:c0:d5:7c:
         f1:15:00:90:9d:31:15:6a:eb:e5:56:fb:2f:b3:0d:71:c4:8d:
         15:0c:27:2a:47:ef:92:2d:52:33:ec:86:4f:69:b6:61:46:96:
         da:21:8b:e7:68:9e:bd:65:15:bc:5c:df:0f:95:dd:56:7d:0e:
         dd:8f:f9:61:d3:33:8f:ab:63:55:c6:80:ea:bf:b9:15:56:f6:
         e4:75:df:70:6b:19:82:3a:ba:d6:5f:71:86:df:d6:d0:06:bc:
         9d:1b:cd:31:c3:2e:f7:35:79:8e:dc:41:e2:b5:31:c0:47:5a:
         40:fe:42:16:11:8c:63:20:05:f7:72:51:64:d6:ba:4e:7b:52:
         aa:8a:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 05:12:29 2026 by rpki-client