Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b3643a84-ea5d-357c-8bd6-98991f1c19e7.roa
File:                     b3643a84-ea5d-357c-8bd6-98991f1c19e7.roa (raw, json)
Hash identifier:          L7uKC3wWF1PkXpuRuMx1z0E+vCpT3RtTqLOFCc0dVqU=
Subject key identifier:   1F:7E:0E:7E:1F:8B:9C:95:1A:BA:4A:48:2D:91:8E:09:C5:81:AC:58
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584DCAFAF4C3BE528569DEF23C80
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b3643a84-ea5d-357c-8bd6-98991f1c19e7.roa
Signing time:             Mon 11 May 2026 01:00:24 +0000
ROA not before:           Mon 11 May 2026 01:00:24 +0000
ROA not after:            Sun 09 Aug 2026 01:00:24 +0000
asID:                     14114
IP address blocks:        157.133.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ca:fa:f4:c3:be:52:85:69:de:f2:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: May 11 01:00:24 2026 GMT
            Not After : Aug  9 01:00:24 2026 GMT
        Subject: CN=efebc65b-e6a5-4589-8217-cf12e1d132fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:12:1e:42:a4:e9:a6:36:78:32:cc:2a:1c:
                    64:a9:5d:c2:c5:a1:54:3d:1d:bb:ea:2b:34:fe:1a:
                    8b:7b:f5:9f:30:14:62:dd:af:46:6a:e9:0e:5d:89:
                    f4:e5:4d:3b:5b:bc:6d:87:fd:4d:21:b2:10:f9:fb:
                    64:1e:8a:69:5e:ce:b0:9b:2c:76:26:30:10:fe:cf:
                    f2:39:3a:3c:12:1a:5d:5d:30:ad:d3:d6:0b:39:74:
                    00:61:21:27:95:d7:20:de:e8:a8:5a:2a:f1:45:5a:
                    db:fe:10:e3:f9:db:c4:a1:ad:95:2a:97:76:ef:9e:
                    6b:b7:99:7f:38:fe:48:7f:29:10:98:59:43:11:1f:
                    61:81:e5:43:ac:77:fe:b5:a3:62:b4:88:0b:55:09:
                    7e:5c:9b:fc:f2:09:98:e9:c1:ee:97:dc:db:6a:21:
                    ef:46:c9:4e:5f:97:af:c1:82:ae:d6:83:3e:25:dc:
                    e6:58:b9:74:8b:e1:0a:62:29:29:b7:96:9b:e3:23:
                    bc:ec:92:ab:a1:5d:3c:2f:b5:45:0e:1d:e8:86:57:
                    00:72:27:db:1e:34:96:27:15:7d:86:89:ff:e9:83:
                    11:a9:45:dc:02:4d:49:ac:ec:5a:a9:36:a8:55:4a:
                    99:a7:3e:5f:6b:44:28:ae:16:bb:66:59:50:de:2f:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7E:0E:7E:1F:8B:9C:95:1A:BA:4A:48:2D:91:8E:09:C5:81:AC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/b3643a84-ea5d-357c-8bd6-98991f1c19e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:bc:a7:b0:19:bb:3e:f9:59:d2:13:08:80:69:4e:4f:9d:
         81:9c:0e:5e:ca:6c:b2:41:4f:8d:9c:d3:e8:3b:9b:22:6f:af:
         2e:b9:c9:82:e9:9f:4f:55:74:3e:27:4b:5e:5a:1b:79:f7:8b:
         6b:62:8e:26:5a:2e:3c:b1:28:b4:e5:6a:16:d8:99:a5:a6:0b:
         e2:b2:33:93:69:c7:49:c1:3c:10:3c:b1:bc:4a:a0:52:ec:75:
         d1:fb:d4:d5:1b:3d:ca:b1:2f:8d:bb:77:ca:5f:75:0d:c2:0f:
         bc:f9:de:40:b5:1a:5d:96:3d:b3:1a:38:c4:3a:b3:42:af:e6:
         40:46:84:8e:50:02:11:05:30:fd:16:df:d2:3e:cf:e0:99:a0:
         de:2d:84:9d:cc:32:e7:fe:fd:88:84:d7:50:18:92:04:d0:d3:
         cb:95:fc:76:b6:5b:3a:f3:3d:a1:e4:79:70:32:62:ca:c0:d8:
         fb:7c:8b:2a:fe:cd:8e:a0:44:9b:16:b5:97:b1:9f:2e:76:60:
         35:7f:61:a2:83:8b:1c:3b:83:ee:03:06:64:7d:47:1a:f7:be:
         5b:89:3a:7b:db:8a:8f:50:71:cf:7c:8f:d2:67:c7:17:fc:73:
         c2:90:90:d4:f6:0c:42:44:8c:84:fd:98:ab:44:d6:3b:f7:3d:
         a5:b2:f1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:23 2026 by rpki-client