Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/4f3e3026-6108-30d1-8cc9-5890c84a38ef.roa
File:                     4f3e3026-6108-30d1-8cc9-5890c84a38ef.roa (raw, json)
Hash identifier:          L3Azb/YghUKYwEPkBXiW8qsOQnGrYWmV1EdneeuIqs4=
Subject key identifier:   D8:1E:E8:C2:2B:CB:26:86:E3:05:86:13:04:3C:6B:13:62:8C:2E:67
Certificate issuer:       /CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9
Certificate serial:       010D0C9F4328584D492A6FC607A4287E81C15800
Authority key identifier: A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/4f3e3026-6108-30d1-8cc9-5890c84a38ef.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     397472
IP address blocks:        134.195.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6f:c6:07:a4:28:7e:81:c1:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=4779db4f-5585-4640-91b7-fde8684d2f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cb:fe:48:4e:9c:82:f4:6a:d9:b9:e0:e7:b2:
                    40:d8:f3:39:87:76:6c:aa:81:11:09:4b:ef:f0:e6:
                    09:26:58:4f:0f:7b:d9:90:3c:28:32:21:d6:41:75:
                    ca:4f:a7:ae:07:d0:1b:3f:9d:e8:f7:6f:d5:32:63:
                    12:1d:90:8d:4c:ad:36:fd:a6:fb:aa:86:75:3d:9f:
                    38:66:27:ef:1c:50:50:47:2a:65:f1:be:9d:02:9a:
                    c9:23:56:41:03:b1:7a:09:72:18:41:de:db:07:37:
                    5b:e3:fa:16:d6:4d:17:18:b8:ea:00:bf:e8:e0:6b:
                    7a:b6:cb:3a:f8:da:db:42:b1:d9:fa:bd:07:44:f0:
                    48:8f:fb:65:13:f4:1a:dc:c3:db:33:3b:1c:69:52:
                    e1:3d:16:27:fc:f4:95:63:03:c0:ea:90:8d:d4:2a:
                    9c:ed:0c:b9:37:79:fe:6b:49:02:0a:bf:8d:bf:91:
                    35:b2:a4:b8:93:dc:36:f1:0d:9f:d1:e9:07:95:9d:
                    29:e2:0b:08:34:ef:1e:43:c6:08:14:16:38:30:78:
                    6e:5b:d5:db:b4:e3:e2:7e:6c:3c:de:5a:3f:eb:4d:
                    f2:d9:98:f7:12:6d:3b:92:94:56:a6:bf:b0:ca:2e:
                    b6:e0:e2:61:cf:84:6d:6a:75:f5:f7:95:e0:25:8e:
                    25:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:1E:E8:C2:2B:CB:26:86:E3:05:86:13:04:3C:6B:13:62:8C:2E:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/4f3e3026-6108-30d1-8cc9-5890c84a38ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.crl

            X509v3 Authority Key Identifier:
                keyid:A9:DF:6F:56:4F:12:7B:EC:EC:ED:56:9C:DF:9C:D4:43:88:55:F4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/70bcbd68-41d6-4a5a-8d28-1b9a9a4c5ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:aa:09:7b:cf:91:23:ec:b6:6c:f0:56:23:7c:5c:1e:8e:5c:
         e1:1e:4f:86:0c:3e:f5:e7:89:ce:a6:2c:c7:47:c8:3b:57:fc:
         cf:df:a6:f0:21:08:dc:1c:d1:d6:52:2d:2f:e1:db:85:b4:c0:
         74:2d:ab:cd:4a:94:b6:34:93:9b:0d:1f:08:af:cf:da:17:1e:
         ee:5f:47:24:06:3a:6f:61:aa:64:bf:e8:f6:31:ba:5b:24:e4:
         22:16:96:4d:ca:88:a4:3f:13:65:84:39:65:f0:9b:f8:c0:43:
         6c:bf:52:8f:31:cf:96:58:e5:66:2b:7f:e1:1d:f4:17:59:ca:
         27:af:81:aa:37:50:63:dd:62:f7:63:93:07:65:7c:8c:9e:e6:
         47:5f:45:f4:2b:04:40:5d:7f:63:78:74:91:f9:52:fa:43:3e:
         31:e3:92:1d:2e:f9:bd:66:48:42:c8:ba:f9:99:78:38:a9:08:
         13:c6:ed:d3:56:00:43:75:1d:0b:a2:bf:37:2c:62:27:d6:86:
         8a:32:57:06:e4:1c:72:00:02:84:a5:24:36:c0:83:07:24:f6:
         9c:40:20:e1:e4:8a:67:a6:30:55:5a:01:00:40:5d:94:63:c6:
         ab:54:21:6f:1c:79:e8:66:64:d8:bc:39:a4:7b:1f:27:b4:49:
         45:e2:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:53 2026 by rpki-client