Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/d9a535df-85dc-3aef-a8ba-25df7920f550.roa
File:                     d9a535df-85dc-3aef-a8ba-25df7920f550.roa (raw, json)
Hash identifier:          y4J6NPwDR1m+OaOMyXX7ARE6ivCCF2oIumdH6MI00dA=
Subject key identifier:   C1:1B:23:E5:77:48:49:84:DF:D4:DF:34:65:E3:1A:8F:39:81:F1:3B
Certificate issuer:       /CN=f195db10-ef56-4145-99a8-ea6962c2a136
Certificate serial:       010D0C9F4328584D2BDA1E9071E207F800430720
Authority key identifier: 49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/d9a535df-85dc-3aef-a8ba-25df7920f550.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     14618
IP address blocks:        172.81.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:1e:90:71:e2:07:f8:00:43:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f195db10-ef56-4145-99a8-ea6962c2a136
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=261f034f-3d18-40f7-bc79-5a6aab0020a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:51:d4:67:77:54:47:64:f5:0b:56:81:26:18:
                    b2:96:9f:87:23:40:cd:c9:bd:b5:f3:ee:08:cd:ab:
                    fc:e4:62:71:80:11:39:cb:84:67:d7:1c:6d:de:3f:
                    8e:cb:46:7f:aa:de:36:67:a3:c5:3d:cb:b7:c5:66:
                    5b:54:f4:75:ec:dd:a7:04:25:24:84:24:be:a8:cd:
                    2b:b3:61:24:ad:07:bd:18:f7:3b:90:a8:9d:8c:20:
                    d3:97:ce:4f:80:c1:5d:82:9c:4a:88:98:ff:7a:a0:
                    07:33:3b:8b:03:79:c5:83:93:3a:67:26:8a:4f:1c:
                    b8:8b:7e:df:dc:21:97:2a:84:38:63:f6:7f:8a:7b:
                    cb:53:3c:d0:41:8d:f2:f7:13:4d:2b:ea:08:fe:12:
                    db:97:3b:f2:00:b7:05:06:f3:3c:71:1e:b3:4d:03:
                    d5:e0:20:c1:6b:2d:a2:39:fb:ce:24:96:bb:ac:48:
                    e2:e8:a3:a1:1e:5c:5a:df:e2:a8:32:28:c5:86:79:
                    13:75:6d:a9:6f:e8:b8:13:b7:5d:4c:54:f2:32:45:
                    1e:29:29:6d:7e:46:01:d2:a4:a5:5a:33:bf:dc:cc:
                    06:3a:28:f8:f0:96:6e:f3:70:1a:d7:01:4e:c6:97:
                    72:6c:77:a2:8a:14:51:79:9f:66:04:af:dd:75:c6:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1B:23:E5:77:48:49:84:DF:D4:DF:34:65:E3:1A:8F:39:81:F1:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/d9a535df-85dc-3aef-a8ba-25df7920f550.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl

            X509v3 Authority Key Identifier:
                keyid:49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6d:5b:d6:78:c6:cf:b1:61:50:9e:6b:1c:af:f4:ce:d6:87:
         ae:a3:e4:ad:91:bc:2f:e2:d6:83:26:bc:b2:e6:d1:1c:2d:c8:
         9a:ec:d8:8e:6e:e8:24:d8:78:e0:37:e8:84:36:12:37:39:45:
         24:f7:3f:63:6b:b2:8d:93:e1:25:3f:3d:00:3b:26:9b:14:b9:
         13:ef:4f:6e:13:8d:7e:d3:4c:0e:ce:c6:9e:28:a6:5c:b7:3f:
         26:bd:04:21:8e:03:2e:30:2c:6e:2e:33:12:45:31:07:2c:27:
         c1:50:f6:c8:d7:ae:55:23:8a:c5:a0:91:dd:61:c4:50:12:c0:
         d8:1f:c9:ce:42:03:a7:1c:15:5a:1a:78:30:59:a7:5c:7b:d9:
         50:4a:e2:90:8f:f8:17:48:47:45:8d:33:c0:f4:25:92:e6:fa:
         57:3a:3a:dc:28:a3:4b:f5:aa:cf:52:81:6b:75:7c:a2:16:04:
         6e:0b:a8:36:ac:d1:6f:1e:08:55:63:8e:b9:8a:6c:35:51:b4:
         3b:c5:31:27:82:f9:ef:91:54:34:09:e8:30:35:02:6d:61:99:
         7c:00:60:48:33:bf:1f:d8:73:83:f2:54:79:fc:cf:a2:86:e5:
         54:ea:00:32:09:ff:e8:1c:c3:46:76:90:6f:0a:94:f8:00:3a:
         a4:4b:dd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:05:27 2026 by rpki-client