Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa
File:                     8357b082-17dc-3d36-87f1-8e0746d54610.roa (raw, json)
Hash identifier:          uWicFGpvvkk7rlZwx/heCzKnX/fotww/8uwDcVEK/RE=
Subject key identifier:   63:2A:FC:FE:E5:F1:90:E2:BC:C9:34:94:4E:7D:95:04:49:40:FD:D3
Certificate issuer:       /CN=d9e22f6d-5551-4712-9f95-3008c51223ec
Certificate serial:       010D0C9F4328584D44FA43FD791E833EB8379E80
Authority key identifier: 28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     16430
IP address blocks:        131.95.0.0/17 maxlen: 17
                          131.95.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:43:fd:79:1e:83:3e:b8:37:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9e22f6d-5551-4712-9f95-3008c51223ec
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=fa17aa75-3ed3-49e6-a3c3-3f677a7cc3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:f8:c9:74:ab:31:55:4b:d5:d2:13:2e:18:01:
                    f5:0c:dc:de:f4:70:bd:81:bf:01:48:f9:0b:40:aa:
                    c2:32:6a:e9:4e:5d:89:9a:c9:2e:50:65:8a:43:af:
                    03:ab:71:13:ae:0e:cc:ee:7c:b0:86:c1:ab:ea:3a:
                    18:fe:16:f3:a7:94:0e:ae:cd:de:f1:5a:73:13:2f:
                    c1:d6:5c:35:37:1c:c7:6d:a3:db:73:1a:cc:54:9d:
                    ca:81:1f:22:9b:f0:32:cf:51:1d:35:66:e2:fd:24:
                    e9:c3:4b:d5:3d:86:3b:fe:88:32:ac:55:a3:c9:4f:
                    3c:fe:d3:37:79:77:89:d0:6c:96:9d:27:b8:4d:21:
                    f6:be:1b:5f:0e:fe:c0:51:74:f2:3b:2e:c3:5c:65:
                    c7:5b:af:be:99:5e:71:e7:62:97:59:8c:bb:89:14:
                    fd:8a:7d:27:6f:f9:16:f8:61:30:2f:1a:7f:f8:4f:
                    73:8c:2c:14:19:11:a2:21:3b:a3:93:43:80:7a:f4:
                    73:84:12:bb:11:2b:d4:51:dc:04:79:65:a1:2a:f5:
                    a2:5b:43:17:0b:2d:78:eb:c4:6a:07:6f:76:8c:c5:
                    ec:19:05:29:f7:26:89:d1:f7:7c:2e:a3:83:a7:ac:
                    d3:a7:14:f2:e6:31:9a:a1:a7:00:77:c5:3e:98:58:
                    8e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:2A:FC:FE:E5:F1:90:E2:BC:C9:34:94:4E:7D:95:04:49:40:FD:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/8357b082-17dc-3d36-87f1-8e0746d54610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec/d9e22f6d-5551-4712-9f95-3008c51223ec.crl

            X509v3 Authority Key Identifier:
                keyid:28:C8:30:4D:BD:D8:4A:C0:1E:3B:86:1E:E5:4A:31:65:B6:B7:97:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9e22f6d-5551-4712-9f95-3008c51223ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.95.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:a0:c3:e8:59:42:27:a4:fe:35:68:b8:40:51:8f:be:5b:
         10:8b:10:fc:ca:0e:2d:72:d4:16:5c:55:2a:80:c3:05:7c:f6:
         9d:e5:be:e7:67:df:ba:e4:dc:e6:53:ab:ee:66:53:a1:4a:71:
         66:80:d9:c6:44:c0:9c:85:4b:3a:f9:4c:5a:09:de:f9:38:6d:
         55:0b:aa:ba:25:86:29:47:c2:84:d3:91:60:31:61:8d:f1:49:
         c7:4c:74:92:9d:0d:42:5d:28:5a:a9:d9:4d:97:2c:b3:6b:9e:
         65:f9:6d:3a:1c:49:7d:c6:d3:2f:2f:1e:63:70:28:dc:7b:39:
         50:f3:86:b8:da:bd:24:70:39:27:21:18:38:73:8d:2a:5e:77:
         d8:6d:91:b4:55:4e:a2:ff:f2:72:f6:6e:b5:a7:e1:39:f7:04:
         28:dd:28:f2:4d:76:b2:5b:56:0a:84:22:08:af:91:c3:aa:56:
         12:bf:24:40:9b:09:82:89:45:d3:b2:b3:4b:2f:8a:09:cc:54:
         3e:de:5b:4e:4f:27:5b:73:6f:7c:a4:24:5d:29:53:47:e0:98:
         80:5b:f2:ac:50:fd:3e:00:2b:38:bc:8d:f4:49:29:04:12:56:
         43:53:53:0c:e6:ab:28:d3:4c:e4:42:56:d7:d4:b6:f6:e2:37:
         8b:51:dc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:44 2026 by rpki-client