Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63bab629-b969-309f-868b-b527a22090da.roa
File:                     63bab629-b969-309f-868b-b527a22090da.roa (raw, json)
Hash identifier:          +mmmas19GYANXU/IMcUnNrNF19T3T4JDTZ7XnCsDb1w=
Subject key identifier:   C9:59:83:78:46:84:B6:D9:05:0A:2B:E2:23:DB:8E:B6:0F:18:93:12
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CA5F747BF1C8D838DFDF7C400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63bab629-b969-309f-868b-b527a22090da.roa
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
ROA not before:           Mon 26 Jan 2026 02:00:32 +0000
ROA not after:            Sun 26 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        132.145.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:a5:f7:47:bf:1c:8d:83:8d:fd:f7:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Apr 26 01:00:32 2026 GMT
        Subject: CN=f84cc307-7c7a-42c8-baf3-82e7acfa3cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:82:4b:15:84:69:0c:93:8b:92:cf:1e:57:76:
                    79:cc:94:37:4c:58:45:11:c4:58:dc:54:96:de:3e:
                    a6:68:3d:01:04:b9:29:98:e8:b5:2f:1d:68:64:29:
                    e4:8c:36:e1:da:c1:e4:8c:84:f8:21:91:ff:53:d9:
                    cc:4b:d3:a7:ca:28:6c:3e:7f:44:2e:45:4f:09:96:
                    03:d8:62:52:50:10:89:4b:52:ed:90:f4:57:5c:c9:
                    64:be:44:1a:8a:9d:48:ae:89:6f:e0:e0:7c:de:54:
                    f9:e0:f5:7e:47:e4:74:00:29:1f:89:6b:5c:e4:9b:
                    8e:a4:f7:88:ef:dc:a5:56:bd:fe:08:52:ce:4d:7c:
                    06:29:85:bd:e1:0c:81:d8:2a:f0:25:7f:e0:01:8e:
                    19:22:af:d7:67:b5:e0:07:74:fe:bb:75:6c:ca:f1:
                    3f:2f:3e:cc:aa:e0:aa:9f:5e:e6:b9:fd:3a:6e:56:
                    a7:60:f6:c6:36:24:14:22:2c:bd:e0:79:43:ea:bd:
                    47:e8:ec:3c:a8:98:38:3e:59:6b:ec:fb:67:88:a9:
                    03:a4:cb:bf:ec:bc:29:a5:32:bf:6b:53:d6:b7:dc:
                    17:e4:be:10:ea:ab:91:ba:dd:06:6c:36:4a:4c:22:
                    74:36:08:6d:c9:6c:6d:58:17:f0:5f:34:bf:7a:6e:
                    74:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:59:83:78:46:84:B6:D9:05:0A:2B:E2:23:DB:8E:B6:0F:18:93:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/63bab629-b969-309f-868b-b527a22090da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.145.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d9:c0:4d:0c:4e:1a:e6:2c:09:e4:38:13:b9:d9:f0:1c:39:
         de:f2:06:90:bd:fc:2c:36:eb:9d:8f:e9:de:77:ef:25:73:98:
         53:1e:a8:de:e6:6a:74:94:e0:2d:b9:ab:74:46:2a:a7:4a:c8:
         3a:6e:b1:57:fe:6c:18:bc:8c:5b:18:ff:1a:cd:56:99:a6:60:
         4c:ae:e6:a4:e6:e3:3a:53:a3:33:bb:af:df:65:36:4c:a8:f4:
         db:c6:41:80:e7:8f:25:c6:41:01:ed:10:36:13:d1:d1:77:00:
         4b:1e:28:93:e1:d8:24:e2:d5:a8:96:16:27:1e:43:40:d2:fa:
         8d:90:f3:9c:fc:b0:c1:c9:44:a5:30:8b:f8:79:70:de:9b:9a:
         c7:ac:39:f9:55:72:59:20:a5:70:1a:19:e3:4a:f2:f2:70:10:
         8f:0b:c5:d2:d8:2f:b6:f4:0b:0f:34:8d:8a:db:ce:39:7e:51:
         10:63:cb:bf:41:69:67:4a:4d:bd:c1:84:7e:1e:a8:60:a6:68:
         bb:6b:c5:d2:64:d2:5e:76:99:2c:0e:92:9f:b3:b9:36:a7:98:
         a7:6f:fe:08:0b:a5:04:a8:6e:8f:2d:41:d4:5c:c4:a2:da:29:
         67:7a:bb:83:8e:a5:3e:7d:8b:65:a4:2f:83:94:43:b6:12:dc:
         35:7c:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:32:00 2026 by rpki-client