Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa
File:                     195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa (raw, json)
Hash identifier:          TA2GxfpeoADT/BBk+JnrgHas4hBQZ3wwGTtxZ+Eal8k=
Subject key identifier:   0C:1F:BF:51:B4:18:79:26:8E:3F:08:19:B4:41:2F:19:DD:76:85:C9
Certificate issuer:       /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
Certificate serial:       010D0C9F4328584DA3E5637592B9CF33657AF1C0
Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa
Signing time:             Mon 27 Apr 2026 01:00:24 +0000
ROA not before:           Mon 27 Apr 2026 01:00:24 +0000
ROA not after:            Sun 26 Jul 2026 01:00:24 +0000
asID:                     401398
IP address blocks:        134.195.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a3:e5:63:75:92:b9:cf:33:65:7a:f1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f
        Validity
            Not Before: Apr 27 01:00:24 2026 GMT
            Not After : Jul 26 01:00:24 2026 GMT
        Subject: CN=4cce8070-84b1-4066-949e-43237e5fba59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:80:d0:54:a1:45:76:34:01:75:3e:9b:0c:
                    22:ac:89:94:62:80:5a:b3:87:5c:ad:dc:50:17:ba:
                    59:66:32:84:79:f7:97:f2:af:a3:46:82:e0:56:75:
                    f3:1e:ec:87:2f:f3:8e:19:bf:7d:a4:7d:7e:ba:6a:
                    e9:62:8c:cd:ca:55:06:81:e5:f0:57:2b:92:c6:78:
                    c5:e7:c5:c0:91:a8:a1:91:c5:15:84:2a:a0:4e:bf:
                    6a:06:01:07:23:88:f7:d1:a1:d1:9d:ae:82:ad:ce:
                    9e:dc:bf:49:ad:1c:56:55:64:c2:ce:d6:ce:a4:ca:
                    26:a8:bf:19:ec:92:c3:8f:fa:45:1d:d6:02:b1:f6:
                    a7:90:77:e5:de:09:89:7b:01:a0:36:ca:85:42:dd:
                    29:2d:17:d7:7b:00:4a:68:fa:5e:01:70:7c:4d:d7:
                    b8:96:46:28:5e:a8:63:58:48:32:d0:67:a6:e0:6c:
                    25:e0:94:a4:b0:a1:fb:c7:29:f7:98:d7:f2:e8:b4:
                    40:e9:ab:61:8c:84:04:3f:da:39:70:90:ab:88:5b:
                    99:7d:fa:9f:35:72:90:b9:3a:f5:47:78:08:a2:72:
                    ce:53:75:3f:48:f9:42:f1:97:84:98:1c:bf:bf:2f:
                    d2:ff:2b:fb:c7:8a:23:c7:ee:ac:89:a6:97:1c:e7:
                    90:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1F:BF:51:B4:18:79:26:8E:3F:08:19:B4:41:2F:19:DD:76:85:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/195c860d-8be0-36cb-b093-dc0e0ba0a59c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl

            X509v3 Authority Key Identifier:
                keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:04:4b:5c:ad:ee:25:e2:dc:ff:c3:69:9b:f1:f6:c5:33:89:
         cd:c5:aa:aa:bb:92:4b:97:73:7d:b7:b4:e6:28:89:c2:be:7b:
         08:bd:63:be:a6:e3:35:32:d1:e7:ec:9c:9e:5e:be:96:2e:6d:
         2c:cc:c8:57:ee:60:23:37:c4:62:78:1f:18:cc:b8:89:a8:6d:
         ec:1b:68:a9:f5:6b:af:de:ec:b4:47:a7:3f:36:46:51:0e:41:
         14:77:c8:6e:f6:ae:66:64:1a:b0:3b:83:c4:47:a1:35:33:04:
         f9:27:83:4c:fb:58:22:b9:a2:dc:d5:2c:84:c2:27:dd:b8:d2:
         df:36:89:f6:90:f2:87:c1:e3:07:ea:c5:36:45:be:a7:b5:59:
         1e:34:9d:c4:de:7e:54:11:87:2e:dc:b9:2b:9a:47:8c:ad:71:
         ca:54:da:c4:04:08:90:88:b4:9a:1c:65:d6:c3:ee:8d:6c:67:
         27:2a:7d:59:05:e4:24:a2:dd:80:3a:21:da:37:17:6f:97:fc:
         07:d3:0d:dc:77:f0:a6:34:ed:d3:a5:58:f2:de:96:11:0f:9e:
         09:af:c5:0f:d1:1e:f4:79:a2:c8:4f:55:27:35:57:c2:48:3e:
         0e:0b:f1:46:fa:2e:23:43:3d:f3:f5:99:33:73:86:42:4e:5a:
         47:41:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:40 2026 by rpki-client