Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aa460fd-e42f-3608-9335-77aaae092d13.roa
File:                     6aa460fd-e42f-3608-9335-77aaae092d13.roa (raw, json)
Hash identifier:          IrnVo6ZZko1hjILNS1BKPRfswq56YDsa+1MYj5Ge1Hc=
Subject key identifier:   D4:04:B7:93:7D:D9:23:4A:F8:97:FC:A3:C9:5A:FD:D8:9D:F8:8B:7A
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584D44FA751E341EFCA5F136CC00
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aa460fd-e42f-3608-9335-77aaae092d13.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     23013
IP address blocks:        128.241.1.0/29 maxlen: 29
                          128.242.180.112/29 maxlen: 29
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:75:1e:34:1e:fc:a5:f1:36:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=b2ad61dd-c751-482d-b992-67b3a3061fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8e:b8:62:3d:2f:aa:02:4f:ac:11:c3:13:c9:
                    dc:1c:e6:66:f8:88:d7:d9:fb:ea:41:b1:1f:e9:34:
                    af:91:19:e9:ed:1e:7c:48:a6:61:9e:17:85:65:16:
                    c4:9a:95:dd:0a:dc:29:54:07:6b:0f:56:6b:ba:05:
                    bc:35:10:e2:ac:4d:71:15:9a:a1:dc:b6:6c:f6:9f:
                    e6:9c:89:2b:63:2e:b5:63:aa:e1:5e:d0:1e:c9:26:
                    d4:91:ae:82:77:f5:9b:e9:41:9e:ed:cf:7d:61:b7:
                    97:3c:9a:bd:90:69:a7:c0:39:06:51:10:3b:e1:4a:
                    f7:fb:51:89:8b:18:98:67:30:d5:c8:e0:48:cf:8b:
                    05:4f:e4:90:34:58:d9:30:86:d7:94:61:b6:34:4e:
                    1f:82:14:29:75:73:7f:44:0b:9a:da:a1:ce:94:f1:
                    9a:92:ec:0f:16:d3:df:73:f4:04:ea:c7:85:dd:72:
                    54:1e:fb:e6:bb:91:50:3b:85:5e:e7:27:d9:a7:2b:
                    73:5b:ca:9b:6a:84:00:93:1d:60:71:8c:a0:c8:f3:
                    88:14:75:a1:27:02:2f:65:b9:f5:a1:ea:6f:98:ed:
                    8f:a4:d2:0c:11:7c:de:fd:36:ba:8f:79:04:f7:60:
                    63:69:a9:e0:6a:bd:26:af:c3:01:81:23:e8:fb:4f:
                    75:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:04:B7:93:7D:D9:23:4A:F8:97:FC:A3:C9:5A:FD:D8:9D:F8:8B:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6aa460fd-e42f-3608-9335-77aaae092d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.241.1.0/29
                  128.242.180.112/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:d7:7f:aa:35:c3:a6:44:64:ad:15:6e:2c:8a:03:ae:f3:da:
         18:5b:d3:a1:76:b1:d4:3a:fb:be:2e:b2:ce:70:fc:43:24:aa:
         e4:6b:fe:bb:60:ad:84:ec:e7:ba:8c:a3:45:39:ec:1c:0d:69:
         2c:e3:bf:6c:64:f5:5e:5e:eb:69:c4:ee:93:5d:c2:59:8c:10:
         c8:f9:0b:aa:a0:1b:8e:68:fa:f9:00:e8:8c:66:48:32:e3:8e:
         1c:6c:4d:57:6f:8b:c0:57:41:87:53:d2:50:e4:fc:a1:c5:ad:
         b7:90:1c:d1:75:fd:b2:e1:3b:48:75:36:7b:7d:a8:9f:ca:39:
         5b:be:7f:85:72:70:dc:9a:a5:a2:8c:30:d9:7f:9e:78:e7:1a:
         0c:67:65:0b:71:e3:1e:fc:e8:ff:dd:dd:4b:71:37:1b:6b:f4:
         75:17:ba:29:40:58:13:e8:ea:94:ee:05:5d:46:ec:cc:45:d0:
         fe:59:7c:20:0e:e4:59:38:b0:c5:bd:4a:ec:68:0a:8b:1b:41:
         7d:fc:e1:9b:ea:d2:2d:91:8c:d4:e8:46:09:2f:65:6b:75:61:
         f4:0c:2c:d6:f5:4a:bf:2d:7b:23:20:1d:fb:2d:00:6b:80:97:
         74:e3:0f:c4:56:a6:2c:f9:71:2c:8b:fd:7b:62:95:3a:9b:6d:
         bc:38:f3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:27:23 2026 by rpki-client