Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/ece36813-2691-3fd6-8afd-09858d213bb2.roa
File:                     ece36813-2691-3fd6-8afd-09858d213bb2.roa (raw, json)
Hash identifier:          NhmCIh7lvDyjOhlcm2UAI013J9dLwuU6JklUe+Imr2g=
Subject key identifier:   02:D9:A9:A4:61:9D:93:F1:B9:0E:88:F4:55:7F:3F:E1:B5:E3:08:E7
Certificate issuer:       /CN=5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1
Certificate serial:       010D0C9F4328584D343A1B35622B5AB173377B00
Authority key identifier: D5:5F:28:4B:7E:2B:3C:C6:97:CF:45:E2:95:D1:58:C1:14:60:FA:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/ece36813-2691-3fd6-8afd-09858d213bb2.roa
Signing time:             Wed 18 Mar 2026 01:00:33 +0000
ROA not before:           Wed 18 Mar 2026 01:00:33 +0000
ROA not after:            Tue 16 Jun 2026 01:00:33 +0000
asID:                     400980
IP address blocks:        130.51.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:34:3a:1b:35:62:2b:5a:b1:73:37:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1
        Validity
            Not Before: Mar 18 01:00:33 2026 GMT
            Not After : Jun 16 01:00:33 2026 GMT
        Subject: CN=436ecda9-3f84-433d-a0eb-22c7f31141fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9e:72:b2:18:7f:cf:b0:45:a4:eb:c9:e6:19:
                    b6:c6:39:da:86:7a:da:ca:53:b6:dc:36:5f:1d:cf:
                    9f:13:73:1b:49:68:97:e6:39:4d:5b:30:19:58:0d:
                    3d:5c:27:14:c9:b1:0b:ee:24:a2:9b:2d:36:b0:6c:
                    93:6f:9a:4d:a3:78:52:78:1f:79:93:b4:3f:43:bf:
                    83:b8:8b:84:2c:8e:e9:69:9d:26:85:a2:18:97:4c:
                    e3:22:90:7b:31:e2:fa:e1:45:d9:41:f9:f3:a1:3c:
                    b0:3e:04:76:05:95:03:27:05:69:1c:35:11:3c:29:
                    a5:66:a2:85:4f:a8:c7:29:75:72:e9:a0:80:b7:18:
                    4c:9e:88:36:c5:2d:94:00:53:b3:96:d2:32:df:88:
                    91:ff:d7:0a:d5:b5:32:c9:82:fd:d5:35:dd:3e:3b:
                    70:1b:6e:d4:3e:2b:0f:7f:38:da:90:ca:e8:40:29:
                    07:c1:0a:86:03:50:89:24:aa:eb:63:a7:ba:cf:2a:
                    0a:e5:5f:d0:69:d2:0c:0e:45:db:78:45:09:d9:ff:
                    63:b9:63:da:47:66:d3:d7:58:2e:cb:43:ee:ff:86:
                    07:63:73:7e:51:a0:09:30:76:8d:6b:c4:a9:5a:4c:
                    5b:0d:48:b8:c3:bb:46:98:80:58:bc:13:f3:d0:02:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D9:A9:A4:61:9D:93:F1:B9:0E:88:F4:55:7F:3F:E1:B5:E3:08:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/ece36813-2691-3fd6-8afd-09858d213bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.crl

            X509v3 Authority Key Identifier:
                keyid:D5:5F:28:4B:7E:2B:3C:C6:97:CF:45:E2:95:D1:58:C1:14:60:FA:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9d2c1b-0e6b-46ab-a6be-7ec1f40afcb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:55:4a:05:6a:6c:7e:9d:2a:34:3c:42:52:84:a6:25:fa:ca:
         05:6b:69:e2:59:61:4d:1b:f4:73:c8:a3:0a:84:7e:d4:8d:d3:
         fa:f1:51:c2:f8:16:34:4a:85:45:cc:e3:ed:bb:59:96:f2:5d:
         e9:26:22:94:a9:84:2c:0e:7a:b8:fe:f9:85:6a:7f:4e:66:59:
         d0:19:7f:a6:2c:b7:8e:63:bd:40:fb:3d:6c:52:22:41:ee:8a:
         da:de:91:2f:9e:72:f1:48:32:a1:c5:58:64:6f:30:27:6b:e5:
         5c:3d:23:5d:87:59:8c:8b:58:3c:98:13:50:3a:e7:0e:43:98:
         84:4d:65:70:e9:9f:4f:8d:ec:10:38:d5:ad:51:e7:08:c6:17:
         83:43:03:bd:ce:14:24:64:45:ce:65:4c:be:ed:f0:58:5b:45:
         63:f2:9d:1e:c2:a2:1a:d5:7f:53:a1:ac:a8:2c:7b:d2:f5:ef:
         2a:98:42:3c:b6:a1:97:de:cc:a1:2b:4f:e6:30:c1:aa:c9:b5:
         63:e8:2f:4d:bd:22:73:89:ba:53:2f:93:0c:cd:25:b0:8d:e3:
         92:3d:2b:4b:b4:05:46:e1:40:43:f4:de:62:5f:fa:d9:46:be:
         7e:c2:9c:dc:89:2a:98:b3:f3:ca:e3:24:88:09:95:c4:69:a1:
         f7:b7:0c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:19:55 2026 by rpki-client