Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/134b9ef1-8da5-38b2-a704-b3e95ee29d3c.roa
File:                     134b9ef1-8da5-38b2-a704-b3e95ee29d3c.roa (raw, json)
Hash identifier:          /+hjr9ENO0DuI8X69PYyDQuX8lIZFwxH7PjRd+M01do=
Subject key identifier:   C7:79:91:62:4E:D2:BF:67:A9:4C:82:C0:E2:8A:24:BB:CB:D3:99:5F
Certificate issuer:       /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial:       010D0C9F4328584DA6B032B3168AA928204CBCC0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/134b9ef1-8da5-38b2-a704-b3e95ee29d3c.roa
Signing time:             Tue 28 Apr 2026 01:00:24 +0000
ROA not before:           Tue 28 Apr 2026 01:00:24 +0000
ROA not after:            Mon 27 Jul 2026 01:00:24 +0000
asID:                     198949
IP address blocks:        2620:147:130::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a6:b0:32:b3:16:8a:a9:28:20:4c:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
        Validity
            Not Before: Apr 28 01:00:24 2026 GMT
            Not After : Jul 27 01:00:24 2026 GMT
        Subject: CN=138f3a9d-639d-4c0d-8ae8-d227b3277fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9b:a1:dc:0f:c3:fb:12:cd:9c:b2:73:02:52:
                    13:6e:a3:ec:36:75:6d:98:a0:ee:47:c8:72:ca:68:
                    e9:6a:b5:3b:14:c3:b1:27:1e:6c:00:90:88:24:1a:
                    b4:a0:91:64:2a:91:db:41:25:8b:b3:65:f3:83:ad:
                    da:ca:54:42:f6:62:3a:bb:f3:e8:a4:82:d5:e7:e9:
                    3d:b0:c8:9e:4a:b6:55:15:d7:34:08:26:1d:db:c0:
                    1a:fb:e5:06:74:a6:60:41:2a:b1:44:d6:d3:d0:9e:
                    92:e1:cf:1c:51:b4:f5:03:7d:19:0b:8f:d6:b4:37:
                    48:eb:59:df:07:47:36:26:e9:9d:d8:ed:cf:5c:15:
                    29:b0:3b:95:16:a3:65:fd:eb:88:d8:fe:03:cd:a9:
                    a2:8f:e2:60:52:8f:de:b7:89:d1:93:c6:08:47:b9:
                    01:5c:c8:32:35:6a:fc:20:39:d7:29:b5:8b:55:9f:
                    0f:60:5d:ab:50:33:e0:53:ab:b8:cb:37:f3:31:66:
                    31:ec:12:bc:3c:70:4c:3b:37:58:f3:6f:d6:ff:2b:
                    c0:61:bb:c6:e8:f4:55:60:cb:a4:a4:94:4b:ea:45:
                    a7:72:20:7c:d3:76:93:2f:40:d9:11:2f:09:c3:77:
                    df:74:ae:be:84:64:f5:99:b5:91:34:89:3a:df:a4:
                    88:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:79:91:62:4E:D2:BF:67:A9:4C:82:C0:E2:8A:24:BB:CB:D3:99:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/134b9ef1-8da5-38b2-a704-b3e95ee29d3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl

            X509v3 Authority Key Identifier:
                keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:147:130::/45

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:86:04:4e:2e:9d:f8:e5:42:70:df:15:d3:28:7b:19:73:b5:
         04:97:d3:e0:e1:db:aa:16:26:4f:10:38:b2:97:c6:7f:37:8c:
         b7:d6:0a:12:f7:e4:4b:fa:af:20:1b:36:2c:75:e2:3f:d8:a7:
         4a:73:c5:46:a7:42:22:c6:d8:aa:15:d2:bd:69:e3:b7:49:da:
         52:13:59:8a:d6:0f:81:e3:25:22:08:2c:af:35:db:e5:01:5c:
         e6:df:31:36:e0:36:01:3c:24:f0:7a:00:d9:20:34:1c:43:0a:
         96:62:eb:c8:62:24:a5:9d:bb:f6:16:03:03:59:8e:f4:50:a5:
         40:bd:17:84:dd:42:81:c6:a2:20:d7:86:f5:17:20:38:92:e6:
         47:63:92:a9:d0:49:68:d5:b4:17:b5:9f:5f:7b:f7:50:91:86:
         f9:55:a3:8d:c7:32:a4:f8:02:86:8f:3d:51:4c:f5:59:8a:24:
         3e:8b:16:62:c2:ab:85:f5:db:70:3a:28:08:ac:5e:f4:af:32:
         1f:34:b0:84:78:43:a4:54:28:5e:4c:82:6a:a8:d1:b9:76:1b:
         2f:61:87:69:5c:22:a3:7a:ad:96:da:74:62:86:a2:00:a9:5e:
         a2:4a:8c:4d:af:11:00:16:03:e5:e3:8a:04:c3:82:26:f0:03:
         be:1f:7c:6b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msDKzFoqpKCBMvMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk
MTM4ZjNhOWQtNjM5ZC00YzBkLThhZTgtZDIyN2IzMjc3ZmVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpuh3A/D+xLNnLJzAlITbqPsNnVtmKDuR8hy
ymjparU7FMOxJx5sAJCIJBq0oJFkKpHbQSWLs2Xzg63aylRC9mI6u/PopILV5+k9
sMieSrZVFdc0CCYd28Aa++UGdKZgQSqxRNbT0J6S4c8cUbT1A30ZC4/WtDdI61nf
B0c2Jumd2O3PXBUpsDuVFqNl/euI2P4Dzamij+JgUo/et4nRk8YIR7kBXMgyNWr8
IDnXKbWLVZ8PYF2rUDPgU6u4yzfzMWYx7BK8PHBMOzdY82/W/yvAYbvG6PRVYMuk
pJRL6kWnciB803aTL0DZES8Jw3ffdK6+hGT1mbWRNIk636SIiQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMd5kWJO0r9nqUyCwOKKJLvL05lfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMTM0YjllZjEtOGRhNS0z
OGIyLWE3MDQtYjNlOTVlZTI5ZDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiABRwEw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAiGBE4unfjlQnDfFdMoexlztQSX0+Dh26oWJk8QOLKXxn83jLfW
ChL35Ev6ryAbNix14j/Yp0pzxUanQiLG2KoV0r1p47dJ2lITWYrWD4HjJSIILK81
2+UBXObfMTbgNgE8JPB6ANkgNBxDCpZi68hiJKWdu/YWAwNZjvRQpUC9F4TdQoHG
oiDXhvUXIDiS5kdjkqnQSWjVtBe1n19791CRhvlVo43HMqT4AoaPPVFM9VmKJD6L
FmLCq4X123A6KAisXvSvMh80sIR4Q6RUKF5Mgmqo0bl2Gy9hh2lcIqN6rZbadGKG
ogCpXqJKjE2vEQAWA+XjigTDgibwA74ffGs=
-----END CERTIFICATE-----
Generated at Wed May 13 15:53:37 2026 by rpki-client