Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa
File:                     cf435177-d899-3b98-b125-e7e093fe112a.roa (raw, json)
Hash identifier:          SCr02DcmMCwjEvIAeEDxEIZ3AIO1K4+QTnf5cF8VuVM=
Subject key identifier:   1B:65:C8:C2:18:5E:DE:6A:B9:E6:A0:D0:6F:EF:53:92:F0:97:9D:81
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584E7204C89709E532FE8989D240
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa
Signing time:             Thu 09 Jul 2026 21:00:11 +0000
ROA not before:           Thu 09 Jul 2026 21:00:11 +0000
ROA not after:            Wed 07 Oct 2026 21:00:11 +0000
asID:                     21976
IP address blocks:        130.156.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:72:04:c8:97:09:e5:32:fe:89:89:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Jul  9 21:00:11 2026 GMT
            Not After : Oct  7 21:00:11 2026 GMT
        Subject: CN=522a5c8f-cad6-424a-8601-ba4a94fa6934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:e9:f5:1a:f5:b0:e1:fb:87:a6:9a:66:5d:
                    24:07:6e:2e:a3:dd:e8:62:f6:e7:82:cc:5d:77:2d:
                    86:41:58:b3:3b:2a:48:af:10:68:45:0d:8b:22:e8:
                    2b:4e:93:72:52:8a:e6:d0:ee:13:de:3a:7f:d9:65:
                    b1:db:7a:65:28:2e:0b:0c:dc:a0:9f:2a:f6:77:6a:
                    a6:e2:45:90:cd:df:99:d5:d0:0e:d3:7e:95:c7:8c:
                    72:2d:b5:b2:3a:da:0e:33:e7:de:7c:8a:10:e4:fa:
                    e9:c5:9a:e2:78:34:24:58:0a:2f:8a:ce:1e:3b:b2:
                    9b:7f:58:b7:9f:43:7a:4d:91:f9:26:ad:40:af:58:
                    d4:ad:2b:ba:ab:83:0b:ce:9c:d5:36:c8:fd:1f:68:
                    6a:03:84:20:f5:e3:0c:97:99:5c:75:15:ac:90:1b:
                    ec:7f:2a:5e:58:98:8e:74:f8:e8:b2:2e:b7:cc:c7:
                    06:3b:37:0e:9e:29:66:f1:c5:ee:db:33:d7:97:58:
                    0f:3e:61:fd:6d:44:b1:2f:01:76:39:93:6a:a4:a4:
                    ed:69:ab:fe:5b:be:44:28:f4:da:8e:8b:2a:64:b1:
                    cf:ab:32:24:56:5e:91:bb:2f:41:4c:6b:f3:c5:e3:
                    d2:7c:3f:7f:24:b5:dc:d3:2f:99:ec:50:07:b2:f9:
                    c5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:65:C8:C2:18:5E:DE:6A:B9:E6:A0:D0:6F:EF:53:92:F0:97:9D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/cf435177-d899-3b98-b125-e7e093fe112a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:76:93:5e:f0:d6:ad:05:06:8d:54:15:1a:3f:78:0d:1c:a6:
         7f:89:54:d8:b8:87:e5:0c:a8:aa:bd:97:4e:fa:c0:73:78:8b:
         a5:63:d2:d4:0c:d2:45:13:57:fe:04:38:9b:e9:96:11:03:a7:
         34:c2:6c:43:3d:b2:9a:7f:9c:9e:6b:71:2f:48:8e:b1:82:8f:
         66:35:54:89:3b:f0:7c:12:25:e8:56:59:de:16:7a:da:6b:c2:
         07:fc:25:42:0e:b7:c9:49:8d:ee:7d:f4:fa:cb:a5:87:9d:35:
         9d:42:c6:af:13:39:71:f2:bc:d5:79:39:80:cf:ba:e1:cf:32:
         63:30:9b:08:2e:5b:c6:b2:2c:1f:87:e6:1a:30:e5:ac:94:37:
         ed:80:96:cc:d3:d3:29:ef:e7:7d:b5:fc:71:0d:53:18:91:bd:
         a9:9a:b6:07:a6:5a:fa:2f:c6:64:12:7d:d2:da:f1:fc:36:eb:
         4a:18:83:00:22:0c:be:01:f7:91:98:95:5d:18:fe:ac:47:ce:
         91:41:6f:f8:5f:51:b4:78:71:00:18:db:2e:1a:c2:3f:66:e9:
         0b:16:15:eb:75:da:67:d7:12:29:3d:df:e6:ed:f6:2c:1a:ae:
         20:eb:43:df:8c:f8:e0:50:34:e1:83:85:86:2b:75:72:0d:54:
         28:e2:b5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:55:21 2026 by rpki-client