Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa
File:                     12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa (raw, json)
Hash identifier:          X82eRJLTDXgYfTNi8nC8QsnKMGdeO+DxKwdaFEai+e8=
Subject key identifier:   5B:40:3D:A0:35:67:CB:57:1B:0E:1D:01:DD:54:2F:8B:0B:58:20:EE
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584D492A6E721AB9D9CED7C10F40
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa
Signing time:             Wed 25 Mar 2026 13:00:41 +0000
ROA not before:           Wed 25 Mar 2026 13:00:41 +0000
ROA not after:            Tue 23 Jun 2026 13:00:41 +0000
asID:                     54600
IP address blocks:        130.51.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:49:2a:6e:72:1a:b9:d9:ce:d7:c1:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Mar 25 13:00:41 2026 GMT
            Not After : Jun 23 13:00:41 2026 GMT
        Subject: CN=7eab6432-acb0-4c4e-94b1-81f9e774f61f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:77:28:f3:7d:6a:9b:f3:34:89:25:e2:62:
                    bb:40:18:91:e9:b1:92:6d:33:bd:5d:80:75:13:67:
                    6f:67:3f:4d:4a:af:f4:7a:8c:c7:22:b1:5b:5d:8b:
                    20:33:95:f5:20:99:1a:da:14:34:9a:1a:71:05:60:
                    40:85:4a:b8:7c:da:16:10:86:11:25:52:77:e7:82:
                    76:4d:c7:f8:c0:9e:f1:f1:43:bd:a0:e2:7c:e0:c4:
                    ee:06:c9:06:b8:21:4d:3d:e3:5b:da:0b:8d:3f:40:
                    49:dc:73:4d:9b:c4:3a:11:fa:a6:be:f4:18:d6:67:
                    c3:de:54:c3:68:7c:c2:8b:4c:ef:51:1e:7c:41:fa:
                    7d:8c:58:75:61:6a:a2:87:81:73:f0:aa:e3:b5:d9:
                    cf:31:03:51:e7:b7:19:53:4e:b5:2e:b8:01:10:a1:
                    e7:73:39:e1:62:22:a9:b6:52:2c:0b:e7:3c:c0:04:
                    0b:79:09:f8:7d:f9:b9:e7:69:31:76:e8:1b:5c:04:
                    df:31:36:db:f6:ca:b5:02:77:10:20:e5:d6:04:d1:
                    be:93:8a:8d:cc:aa:39:a1:e6:f0:7e:8c:a4:6f:05:
                    d8:25:9a:4f:43:14:c8:20:72:86:fd:67:9f:2f:d7:
                    bc:3c:4c:71:0e:0a:a4:67:7a:b4:d8:db:e8:18:24:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:40:3D:A0:35:67:CB:57:1B:0E:1D:01:DD:54:2F:8B:0B:58:20:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/12f21b5a-6e5d-339e-9173-6bd6aa699b77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:b9:4e:05:30:c2:74:b0:61:05:1d:f0:e5:a4:a4:68:b6:ae:
         d9:65:7d:2a:a2:e6:62:c9:5a:2b:87:c9:aa:2b:1e:cb:a2:9f:
         c3:c3:41:14:e2:2e:4f:64:c7:67:9e:0b:39:0e:96:30:0c:d5:
         6a:79:75:5f:75:ea:eb:71:83:4c:ea:cf:dd:67:4d:ae:b9:05:
         a8:5a:34:76:3e:60:e6:90:cc:ac:16:fe:3c:cd:db:43:ed:cf:
         1f:c1:ac:f3:93:3f:a0:e1:bb:47:74:00:b4:ec:37:c9:3e:93:
         0a:7e:be:82:99:d6:30:56:50:81:25:0c:49:bc:e4:d1:32:34:
         48:9d:d2:28:9a:94:1e:bd:f2:a8:98:22:48:93:57:e5:f7:c1:
         b7:92:79:7f:f4:71:8f:94:bb:dc:98:ab:f0:80:3e:b6:d7:75:
         9e:e4:9f:c3:d2:ba:d0:e8:d8:b6:08:49:4d:34:8f:ce:a7:45:
         54:b7:f5:cd:d3:ce:e7:7c:97:70:00:f7:95:d4:d6:f2:7d:df:
         b9:7e:9a:ac:b4:38:9b:5b:98:52:fb:74:3a:9a:2d:b8:82:22:
         ae:34:e9:eb:ec:32:2f:82:87:f5:f0:d2:cf:25:0b:5e:a7:c9:
         68:8f:7f:4a:5b:61:76:43:74:30:31:38:6a:87:25:fd:24:97:
         fb:a4:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:41:32 2026 by rpki-client