Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/af77c18a-c300-313a-a88e-3c5a333fa72e.roa
File:                     af77c18a-c300-313a-a88e-3c5a333fa72e.roa (raw, json)
Hash identifier:          LZra4wPBbZTox3ODEdGVQQIMAaqgG/P3VVUkj9Rin/g=
Subject key identifier:   FB:2B:07:CA:75:D7:43:BD:27:41:B5:2D:03:2F:9D:2A:2B:8C:B7:CD
Certificate issuer:       /CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
Certificate serial:       010D0C9F4328584E921F9F668E601E786CF5A8C0
Authority key identifier: A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/af77c18a-c300-313a-a88e-3c5a333fa72e.roa
Signing time:             Tue 21 Jul 2026 09:00:12 +0000
ROA not before:           Tue 21 Jul 2026 09:00:12 +0000
ROA not after:            Mon 19 Oct 2026 09:00:12 +0000
asID:                     14618
IP address blocks:        130.150.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:92:1f:9f:66:8e:60:1e:78:6c:f5:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b052c0e7-788b-47d1-8126-ea94da7ceca7
        Validity
            Not Before: Jul 21 09:00:12 2026 GMT
            Not After : Oct 19 09:00:12 2026 GMT
        Subject: CN=4c74db40-9567-4096-b665-be86ae1082bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:fa:e7:13:0f:46:12:3c:c0:48:ed:26:ef:
                    1b:85:f2:a7:00:2c:24:6f:51:6f:71:80:94:29:0c:
                    a8:31:3b:bd:c7:ca:b6:06:80:88:f3:98:de:95:a4:
                    5f:1c:d2:5f:ba:c6:df:1c:48:83:c3:c3:c3:36:53:
                    1a:33:42:11:1b:48:05:a9:da:90:ef:73:8a:d9:5d:
                    9f:b1:44:62:e2:7a:82:1c:b0:c8:10:0b:98:dd:dc:
                    5e:29:4d:77:98:81:de:eb:60:ad:e9:25:52:ae:c9:
                    68:75:f1:b3:a4:a2:f2:c2:25:7f:39:bf:d8:b6:84:
                    8f:e8:39:e1:d3:5b:a4:18:42:0b:f0:4d:d4:ba:13:
                    0d:20:37:90:4f:a5:f0:b6:b2:75:c4:91:f5:12:11:
                    ac:e5:fd:3f:12:25:f6:95:a6:2a:e4:86:ba:d5:2e:
                    86:e6:49:da:29:f8:1f:f8:79:52:b1:1f:62:60:d8:
                    15:bb:35:06:4c:52:49:43:c3:38:66:0f:ac:be:05:
                    3e:62:22:dc:54:a0:8e:a4:5d:5e:19:af:b4:dc:bd:
                    2a:5a:4d:45:f2:e6:8f:11:9d:6c:f0:29:ed:fb:6c:
                    bd:00:a4:d6:f4:fb:de:81:8c:26:68:70:64:c1:d1:
                    a4:00:72:ad:08:3c:64:1a:47:a7:10:1d:05:1d:5b:
                    72:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2B:07:CA:75:D7:43:BD:27:41:B5:2D:03:2F:9D:2A:2B:8C:B7:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/af77c18a-c300-313a-a88e-3c5a333fa72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl

            X509v3 Authority Key Identifier:
                keyid:A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.150.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:2e:88:93:b8:f0:3b:65:56:ca:9f:e7:39:eb:62:e3:93:d4:
         53:96:ba:18:b7:9d:c2:3c:e6:a1:dc:7a:a6:2c:70:86:e4:d3:
         d8:41:dc:bb:ff:2a:db:25:5a:29:a1:16:a4:6f:34:e0:91:1a:
         7e:6c:e0:00:b1:19:32:53:de:ba:e5:87:20:6c:46:45:9b:9d:
         c3:a9:fb:f7:27:4d:4e:bb:94:cb:a9:2b:08:36:f7:30:17:c6:
         90:2f:5e:c5:6e:60:df:f1:08:43:c1:5b:c7:2d:78:70:3c:d1:
         43:af:6d:40:86:d3:9c:ab:99:63:7b:43:a6:74:52:ec:5c:92:
         81:7f:9f:ad:b0:46:b3:a7:f1:fc:69:6c:4c:30:7d:39:ca:7c:
         39:7c:39:7f:33:56:63:d7:50:c1:27:c6:6c:07:d0:a6:14:58:
         5f:19:00:10:05:5b:5c:3e:3b:a2:62:4e:1f:b0:89:5a:80:e1:
         30:06:e7:0f:4d:ad:c6:a9:0d:5d:12:ff:21:16:3a:07:2d:f1:
         6c:2f:e4:f8:37:b7:f5:d2:95:45:7f:9f:4e:cf:9c:19:30:f3:
         7a:c4:4e:c7:2f:f3:9d:9b:4f:fe:05:ce:40:eb:5a:87:d7:7c:
         7d:93:e7:4b:4b:d9:76:be:05:74:7a:e2:61:63:57:73:60:5f:
         79:61:c9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:30:37 2026 by rpki-client