Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/65d46b64-8915-3bb5-b972-041508c1dcc2.roa
File:                     65d46b64-8915-3bb5-b972-041508c1dcc2.roa (raw, json)
Hash identifier:          GGb/2wSEDpMJKrrFljkugTVZ7TRnbtYCFqfXd/KRtZI=
Subject key identifier:   9E:A8:51:11:82:76:5A:19:BB:A4:FC:1E:EA:CD:C6:30:6F:36:4B:D7
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D300A23BE8036246ED308C3C0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/65d46b64-8915-3bb5-b972-041508c1dcc2.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     14114
IP address blocks:        157.133.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:23:be:80:36:24:6e:d3:08:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=ac5897ca-8d83-4738-bd62-12200b73e3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:9f:07:c6:54:4e:4f:cc:6e:04:fc:63:52:3e:
                    fa:07:5c:8c:a6:0e:e2:17:f4:f5:05:67:da:ec:77:
                    8a:e0:cf:3c:c9:b2:3f:34:ba:ab:3f:a9:91:3b:a5:
                    a5:2c:b3:19:92:d9:22:92:69:76:e6:e2:0f:44:86:
                    6d:15:55:0a:48:d5:ed:c7:d0:a5:89:2b:33:2c:b2:
                    e5:23:58:47:84:a0:88:f0:ff:6d:2b:2d:89:1c:f7:
                    f9:55:24:90:90:e5:e3:37:fa:c2:39:7c:04:43:77:
                    57:53:b7:1e:5d:91:2d:f3:18:35:55:f5:4a:37:45:
                    5b:2a:c9:54:cc:39:a5:6a:6c:cf:3d:1b:f8:3c:02:
                    f6:4f:d8:5b:ef:7a:82:8d:bc:81:01:fe:cc:3f:a0:
                    22:99:a7:0c:01:4b:e3:e1:e0:d9:9e:e4:3f:ab:2a:
                    a4:63:1d:c1:23:1b:fa:f0:99:be:d8:6b:62:e3:2a:
                    d5:e9:b7:ea:93:59:91:aa:fc:a0:c2:36:50:73:62:
                    dc:7e:4b:57:40:78:56:d0:ce:b4:2a:e3:c8:76:42:
                    a9:6d:83:00:09:f7:f4:74:89:4f:63:01:94:28:99:
                    5e:71:d3:24:d5:0a:98:86:68:5b:89:be:ab:e7:9b:
                    7b:6e:98:40:53:e8:62:1a:c2:e1:19:46:da:8c:7a:
                    06:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A8:51:11:82:76:5A:19:BB:A4:FC:1E:EA:CD:C6:30:6F:36:4B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/65d46b64-8915-3bb5-b972-041508c1dcc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6a:0c:22:70:71:ad:73:42:eb:0a:b8:0b:22:12:82:37:28:
         86:c9:05:97:5b:6c:16:0d:ff:9d:ed:30:e1:02:d4:e2:f7:5d:
         e3:2c:13:67:67:fb:30:16:d9:12:0d:a5:78:6c:c8:48:8d:00:
         d5:f9:4e:4c:29:56:45:db:9e:b3:f3:15:64:14:2a:2f:d9:d4:
         04:69:57:95:ed:46:70:cd:2e:53:81:77:3d:0d:91:17:4c:f7:
         9b:90:95:e1:93:72:ea:9c:c7:47:74:fc:f7:c2:8b:1c:4d:63:
         4e:28:14:2a:08:cb:e6:de:f7:8f:f8:c3:8f:b6:7c:73:49:d6:
         88:e2:97:9a:0c:ff:ae:a5:73:b6:85:08:c9:3d:59:61:e5:b7:
         eb:3c:2f:fb:fd:27:78:01:eb:69:30:67:8a:d4:5a:1e:d7:58:
         a8:d8:e1:4c:c1:02:dc:fa:9f:dc:5d:8b:e9:d2:eb:23:ec:ed:
         8c:59:dd:12:a1:eb:11:73:a7:f8:3e:ea:08:43:0d:97:65:0d:
         76:dd:51:07:2a:f6:37:93:57:e6:8c:29:dc:12:4c:b9:59:26:
         9b:0e:83:9c:59:77:dd:4e:20:e0:0f:59:54:e8:6c:b9:8c:47:
         e6:70:8c:12:aa:50:fe:ab:12:8c:ec:7d:3c:88:78:70:c1:ac:
         4d:d7:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:15 2026 by rpki-client