Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ade7b0eb-f8c4-3a00-ba7e-b82dd44cf583.roa
File:                     ade7b0eb-f8c4-3a00-ba7e-b82dd44cf583.roa (raw, json)
Hash identifier:          L2S8MOy0N1EYhNju/62wzbckltZpLuYhAFPY9Gq0R70=
Subject key identifier:   18:81:3C:26:5B:64:20:17:DA:41:BC:E3:96:E1:57:56:AA:69:B4:D8
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584D6EDA61AEFADFF072DE211470
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ade7b0eb-f8c4-3a00-ba7e-b82dd44cf583.roa
Signing time:             Wed 08 Apr 2026 01:00:24 +0000
ROA not before:           Wed 08 Apr 2026 01:00:24 +0000
ROA not after:            Tue 07 Jul 2026 01:00:24 +0000
asID:                     31898
IP address blocks:        132.145.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6e:da:61:ae:fa:df:f0:72:de:21:14:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Apr  8 01:00:24 2026 GMT
            Not After : Jul  7 01:00:24 2026 GMT
        Subject: CN=885e12b1-ab18-4035-8b5b-bc4516c6dae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:21:db:26:1c:3d:50:cf:1b:b1:b7:e6:ae:e4:
                    45:d4:23:e7:79:6f:b9:1a:36:6d:6e:40:3a:50:30:
                    a8:0d:aa:99:c3:3b:82:94:fa:6a:44:d8:d6:50:b0:
                    62:65:55:92:c8:4f:31:b2:57:91:29:36:06:18:cb:
                    43:f5:31:fc:0a:23:79:a7:ea:8f:b0:ed:d5:48:07:
                    ca:c7:74:e0:db:57:07:d6:1d:e6:ec:39:b5:ed:3f:
                    a8:2a:7c:6d:44:d3:73:f9:b1:aa:c0:f7:49:d9:9c:
                    62:a6:8b:65:91:e3:52:b9:04:65:a8:e9:30:36:32:
                    ef:13:7d:39:7d:7d:e5:32:0c:8e:50:66:47:3a:ec:
                    13:96:a0:03:c9:6d:0e:6e:1c:4b:d3:cd:a2:e7:f7:
                    17:ed:8a:82:95:7c:6a:4e:0b:db:77:9b:ac:4c:72:
                    62:59:5e:ee:56:9f:c5:a2:e0:fe:48:b3:d0:9b:f2:
                    a9:d9:e2:46:b8:8e:3d:fc:7d:a8:0e:9c:f8:c4:bf:
                    8d:9c:37:eb:38:1c:14:aa:9e:e5:ca:33:96:70:3f:
                    a8:72:1c:a3:9d:b8:1b:33:51:a0:ea:9b:28:dc:8d:
                    67:54:a0:3a:d9:9f:81:3a:88:db:06:e8:cf:c5:a1:
                    5c:34:c5:a8:66:66:1f:f3:ef:15:4a:a1:4e:2e:45:
                    46:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:81:3C:26:5B:64:20:17:DA:41:BC:E3:96:E1:57:56:AA:69:B4:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ade7b0eb-f8c4-3a00-ba7e-b82dd44cf583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.145.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:c8:59:12:f1:71:fe:23:2b:c6:0a:dc:32:3a:36:6c:fb:b1:
         ce:d0:9d:d9:78:b3:aa:b2:2a:6b:87:a9:38:63:c3:45:33:9a:
         3a:97:5c:e5:49:87:b1:f4:41:68:54:3a:c4:0d:97:27:12:28:
         20:a9:cb:76:88:b2:d8:a5:1d:6c:82:a1:70:69:c5:f3:0e:94:
         0c:f6:50:15:d3:ee:21:14:0a:75:c8:63:da:28:93:b1:dc:87:
         4c:9a:c0:06:d4:29:71:6d:cd:14:9c:bc:6d:2f:e9:58:b3:84:
         51:08:63:89:40:7d:e6:e6:23:3e:ff:59:27:aa:06:3d:55:38:
         3e:ad:eb:ad:6e:74:47:47:30:9d:d9:74:54:88:1f:23:02:31:
         9f:93:d0:b8:62:95:66:c4:cc:22:0b:b4:ac:a0:4c:d9:2e:5d:
         6b:99:b5:c9:86:0d:3d:53:cf:e2:c7:cd:58:8d:33:2f:c2:01:
         f4:7b:91:e5:31:34:0f:a6:56:79:13:f6:1a:ff:bc:06:c2:c4:
         10:9c:24:07:10:07:15:71:41:27:c9:98:d2:da:b0:87:c9:97:
         12:19:49:7f:7d:09:30:30:64:89:11:c3:9c:ae:9b:46:f5:b2:
         c4:d6:11:b4:b8:d8:20:be:64:5c:e3:5b:c2:26:5f:81:27:55:
         9d:51:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 14:39:04 2026 by rpki-client