Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/f0a3ca27-03cc-3e3f-b3cc-b1c29d03fdae.roa
File:                     f0a3ca27-03cc-3e3f-b3cc-b1c29d03fdae.roa (raw, json)
Hash identifier:          2Wl/ar7+E5DhZaWApoBwExFNbAgQ1aK1qjKHcUI5xnM=
Subject key identifier:   36:AC:92:23:67:1F:3E:D2:2E:FE:DA:C4:C1:0E:88:BC:6D:31:0A:B7
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584DBBA04634BD67A38BCB577D10
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/f0a3ca27-03cc-3e3f-b3cc-b1c29d03fdae.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     7922
IP address blocks:        134.202.40.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:46:34:bd:67:a3:8b:cb:57:7d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=0f0756e4-d4eb-43bc-bd28-dfabe6ea262b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f9:ff:2c:18:c1:ec:cd:d6:70:d4:1d:05:00:
                    9b:b5:e0:d9:7c:ef:8d:5a:9f:93:46:9e:34:0a:33:
                    fd:e1:6d:f6:a1:3d:5f:a2:ae:2c:ed:20:55:f3:f0:
                    00:2c:4a:da:79:f6:e8:2a:c1:aa:43:b4:57:7f:a7:
                    46:d9:ec:03:d6:83:d0:6e:41:d2:c7:8e:e2:59:f0:
                    56:33:0f:67:53:b0:7b:b8:87:92:84:3b:98:d2:fe:
                    47:3c:90:13:ff:cb:84:1d:19:f4:ec:2f:c4:89:50:
                    32:2a:17:45:68:e2:2f:54:73:3b:56:38:41:e5:5f:
                    1a:46:b8:3d:1b:c2:85:6d:b4:57:24:ee:ef:ee:8e:
                    20:c3:7d:41:c3:67:20:27:22:8c:35:38:a9:b1:e1:
                    00:f4:e5:8e:64:54:60:e0:be:ef:33:f7:ec:78:9d:
                    45:fa:7f:54:24:48:3a:22:12:ca:d4:11:82:e5:b1:
                    01:48:bd:04:94:13:83:8c:bb:38:c3:40:3f:9a:fa:
                    1e:24:8e:cb:1e:9e:85:94:c5:37:e4:86:8e:c0:cf:
                    3d:38:77:8a:75:72:6a:b3:5d:2c:73:9c:9c:17:77:
                    ec:70:1b:f4:31:82:33:b6:25:b8:c1:f8:64:c7:6d:
                    8f:78:c9:5d:e7:08:c0:df:e4:0f:e4:52:36:b9:70:
                    42:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AC:92:23:67:1F:3E:D2:2E:FE:DA:C4:C1:0E:88:BC:6D:31:0A:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/f0a3ca27-03cc-3e3f-b3cc-b1c29d03fdae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.40.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e1:7a:b2:05:56:e2:4b:2c:ff:f3:26:64:58:bb:6e:6c:fc:
         e4:d2:77:b9:70:05:e0:09:d6:04:01:26:b9:3f:9b:61:6d:db:
         15:01:24:84:e9:9f:96:5e:36:d9:aa:45:7f:f0:bd:83:df:39:
         21:8c:e0:04:2a:ea:b8:bc:69:88:9a:10:60:38:55:81:e2:48:
         43:cc:52:0e:08:af:38:3e:78:e0:76:06:21:81:3f:b9:cc:97:
         08:1b:43:5e:5f:2e:9d:ad:86:5d:0d:38:3e:5a:64:80:49:ab:
         d9:74:49:99:e1:0b:df:d7:a0:45:04:af:8f:c9:54:8c:e8:5c:
         c9:fd:ba:d3:db:e8:19:de:c1:d9:91:ed:41:34:90:f3:0b:1c:
         80:c9:fe:04:ae:d3:21:e7:0b:2c:63:5d:c2:a8:1d:56:e9:ad:
         7a:e8:f7:52:2f:13:91:6f:2c:e5:18:8c:cd:f5:eb:45:2f:9d:
         3d:14:71:ac:0b:5b:12:99:ec:46:09:1d:2d:03:48:eb:fe:0e:
         e0:eb:6e:c6:9a:d2:5c:4a:a8:0e:dd:48:39:8f:f8:87:bc:c5:
         03:cc:f8:f5:2a:24:e1:74:14:dd:02:61:be:e5:03:69:6b:9b:
         56:b8:cf:72:32:41:53:b4:e2:fd:c3:d5:72:cf:37:34:8a:74:
         8f:22:98:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:57:44 2026 by rpki-client