Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/654b5ba3-a06d-3bfa-b056-bb99147e64fc.roa
File:                     654b5ba3-a06d-3bfa-b056-bb99147e64fc.roa (raw, json)
Hash identifier:          q3/w3HKpAotQsLAevau9e2wxdOYwBR9WsUA44m1okpQ=
Subject key identifier:   CA:86:56:D4:3E:1F:62:81:BD:78:7A:42:90:4D:29:27:BD:67:0C:6F
Certificate issuer:       /CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
Certificate serial:       010D0C9F4328584DAF101D9087512C69D5109A00
Authority key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/654b5ba3-a06d-3bfa-b056-bb99147e64fc.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     199563
IP address blocks:        132.190.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:1d:90:87:51:2c:69:d5:10:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=71898ecc-a85b-41c6-8572-081759e81d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:60:64:c6:f0:60:ff:d3:8b:03:c4:97:e6:fd:
                    cd:d7:50:da:13:60:a8:5d:9b:ad:18:de:73:85:72:
                    41:4c:13:ed:8b:1d:5f:fb:de:13:e8:77:c0:da:ce:
                    56:dd:60:de:eb:8d:02:ee:d7:9a:56:18:0e:c5:30:
                    64:fe:9d:74:4d:29:ed:9b:ce:de:a2:24:25:08:0e:
                    4d:a0:72:97:cd:78:fc:48:6d:8f:b7:84:80:cb:d1:
                    d0:aa:a5:0e:7a:0b:7e:ed:1e:b8:40:2d:c4:6d:fe:
                    2a:81:fc:2e:65:d9:a8:5f:eb:18:3b:d3:af:fc:ba:
                    82:09:d2:d2:48:a0:60:96:fa:6b:60:80:e8:a8:b4:
                    13:71:5a:87:ac:bf:a5:82:70:85:4f:bd:a5:c7:25:
                    6a:9c:65:8f:10:e8:4b:61:95:e3:3e:40:6d:62:d9:
                    5a:75:6b:73:ca:ec:63:70:5e:a3:32:24:3e:11:76:
                    4c:6f:8a:32:d0:28:63:a3:65:86:f0:ee:c9:9b:60:
                    9f:4c:48:53:f7:8d:c6:69:32:07:ab:77:c8:ab:86:
                    4c:56:39:dd:2f:40:d1:ff:68:44:b1:40:9b:c1:2e:
                    97:92:16:5b:10:ee:85:80:de:b5:f9:af:a9:b2:0a:
                    f1:51:07:f7:04:d5:b6:cd:71:ce:47:f8:ef:8f:9c:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:86:56:D4:3E:1F:62:81:BD:78:7A:42:90:4D:29:27:BD:67:0C:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/654b5ba3-a06d-3bfa-b056-bb99147e64fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl

            X509v3 Authority Key Identifier:
                keyid:03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.190.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:7a:82:41:32:5c:2d:9d:b2:81:1c:55:92:7e:52:43:b1:a6:
         b9:10:88:c9:d6:25:2a:45:25:b7:a0:ae:71:11:ac:dc:c7:bd:
         15:92:7e:15:a8:91:0a:a7:94:48:84:97:ea:95:8e:cb:8c:45:
         ae:4d:51:90:81:a0:80:2b:6a:64:07:d9:20:f3:64:f5:1a:9f:
         4e:e5:37:56:6e:cd:68:87:e6:69:00:f4:cc:0b:e1:8e:0e:c2:
         3f:34:bf:e8:a7:ff:19:bd:9a:15:f9:d3:e4:b4:42:80:c1:f2:
         ce:61:72:46:cc:a1:ad:ca:d8:de:79:0d:6c:4e:18:98:8d:4e:
         a9:c6:69:81:d1:cb:b1:c6:2b:20:21:c9:e1:72:93:b8:7d:e5:
         a8:4f:4a:bc:8b:11:82:0f:1f:d8:27:89:b6:d0:0f:0f:79:cb:
         76:8d:48:6c:d7:0f:0a:a7:2e:2a:19:48:ec:ec:b6:14:0c:90:
         fd:b8:a8:8f:8a:99:25:dc:27:85:8c:07:93:19:86:7f:1d:0b:
         d2:bf:7a:70:37:e3:ea:e9:c2:92:4c:7d:44:32:cb:01:e4:cf:
         18:b4:25:10:a0:17:5d:d6:d7:31:f1:2b:37:9a:c7:c6:dc:06:
         e1:30:b7:2e:02:c6:68:15:45:5e:fe:f6:9f:da:c7:fa:6c:a8:
         40:4d:65:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:41:15 2026 by rpki-client