Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/01be4928-8a68-344d-a3d5-d793593a237c.roa
File:                     01be4928-8a68-344d-a3d5-d793593a237c.roa (raw, json)
Hash identifier:          YBc71gb7Arq/XNstenzLhq508m8xQ5tCyXKdwvE5zRs=
Subject key identifier:   13:4E:EE:63:45:8C:DB:A2:0E:95:90:52:62:80:B0:C3:F9:EF:FE:A4
Certificate issuer:       /CN=c04d5752-0429-45a3-a347-607b7dc70707
Certificate serial:       010D0C9F4328584B84F61BE8367206EA1FFFD200
Authority key identifier: 9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/01be4928-8a68-344d-a3d5-d793593a237c.roa
Signing time:             Tue 14 Oct 2025 13:30:17 +0000
ROA not before:           Tue 14 Oct 2025 13:30:17 +0000
ROA not after:            Mon 12 Jan 2026 14:30:17 +0000
asID:                     400556
IP address blocks:        130.12.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:f6:1b:e8:36:72:06:ea:1f:ff:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04d5752-0429-45a3-a347-607b7dc70707
        Validity
            Not Before: Oct 14 13:30:17 2025 GMT
            Not After : Jan 12 14:30:17 2026 GMT
        Subject: CN=ae4ad241-8572-4ed4-8085-bce431e42a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ec:66:04:70:7b:84:48:73:2a:de:d5:90:30:
                    f2:10:75:d4:a4:d0:46:51:c6:99:6a:8f:04:22:36:
                    0a:99:ee:ef:76:76:4c:43:7c:32:1e:4e:e1:7b:c6:
                    b7:eb:a9:29:80:7b:15:f2:6f:3c:6a:dd:ea:94:30:
                    a1:93:71:27:96:32:54:b5:70:57:23:a8:f7:aa:fb:
                    45:df:cf:43:e1:f4:2e:a1:11:79:49:00:d3:87:11:
                    4d:57:2d:5b:c8:66:74:25:bc:43:33:61:18:4c:08:
                    fd:7f:f2:21:3c:e9:c1:af:79:d2:e2:f4:ba:09:55:
                    d7:4c:d3:2d:2d:47:72:89:1a:ec:2e:91:4b:55:9e:
                    b0:8d:57:fb:aa:cf:60:eb:08:49:13:31:d4:d6:9e:
                    b4:67:2f:bd:05:b9:ad:ac:79:fd:5e:61:5a:c4:a1:
                    3b:b0:30:1a:4b:b0:71:c8:ef:11:e1:ef:a9:29:c2:
                    c3:a5:b7:ec:73:45:a8:4b:4f:f8:56:6c:12:5c:69:
                    b9:9e:26:e4:3e:4b:b1:20:ea:a7:4e:a3:7f:e4:c1:
                    e6:6d:d9:02:3f:84:de:c0:48:19:96:09:d9:ca:51:
                    87:5a:5e:c9:52:28:0e:05:28:0c:5c:72:ef:74:58:
                    91:d4:ae:fc:3e:48:79:b8:6d:f8:93:19:28:47:13:
                    22:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4E:EE:63:45:8C:DB:A2:0E:95:90:52:62:80:B0:C3:F9:EF:FE:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/01be4928-8a68-344d-a3d5-d793593a237c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707/c04d5752-0429-45a3-a347-607b7dc70707.crl

            X509v3 Authority Key Identifier:
                keyid:9A:BF:C2:54:66:DF:73:F4:CD:FE:24:4F:FD:AA:10:9E:13:7B:0B:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c04d5752-0429-45a3-a347-607b7dc70707.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ab:75:60:4f:fc:ff:d4:87:c5:70:14:46:99:3b:82:7f:ed:
         cb:53:df:68:db:b5:08:d5:a5:73:23:99:1d:3d:7a:55:e4:f2:
         5b:1e:3d:76:0d:b0:cc:ae:0a:9c:c7:a4:12:4b:1a:96:2a:f7:
         99:83:3d:72:9d:3b:36:5f:98:98:5e:b1:b4:68:6c:a0:85:c6:
         e2:86:95:6e:f0:dd:26:cf:aa:c6:12:86:21:44:bb:d7:8f:f9:
         55:95:61:f9:52:db:d9:71:e9:3c:ba:d0:bf:33:87:2e:d2:3d:
         51:26:d7:a5:0d:d6:07:0d:e1:a8:ec:c2:b7:40:7a:51:9a:e0:
         26:5d:53:66:29:db:57:9b:bc:5c:04:a5:f4:18:5f:83:d5:73:
         fe:59:47:9d:71:09:a7:65:69:b1:da:24:50:20:9e:cc:79:91:
         85:34:9b:17:5b:61:52:14:4b:49:1f:ce:91:58:a7:97:2d:e4:
         af:d0:b8:51:7e:c5:05:62:a5:01:4f:7a:62:b8:81:42:78:3a:
         37:d8:09:0f:f0:87:5b:d5:87:c9:08:5d:c4:02:d5:49:1b:37:
         79:7f:3b:97:61:59:5a:be:aa:e7:3c:a9:e8:05:17:73:6d:a9:
         9c:a5:cb:83:00:c9:f1:78:e6:42:86:45:70:36:0e:6a:81:f5:
         4c:af:d0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:26 2025 by rpki-client