Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/fee1156b-27fd-3467-ac94-97fd20d994ba.roa
File:                     fee1156b-27fd-3467-ac94-97fd20d994ba.roa (raw, json)
Hash identifier:          3wG2R/Kf6xuVWdlRYE4htyqCyBFquNe7+kGxm+rEuq4=
Subject key identifier:   88:83:F5:E6:FB:64:C9:3C:20:ED:D8:FE:F2:21:63:89:C7:46:5C:32
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584F0D6CFE65FD6F1F1530D9C880
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/fee1156b-27fd-3467-ac94-97fd20d994ba.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        134.49.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:fe:65:fd:6f:1f:15:30:d9:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=facfa7cf-4786-49b6-bb88-c2bdee4338e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:d2:0d:5d:c6:86:3c:6d:6a:7e:2f:4f:4d:
                    5f:e6:ea:37:3d:d3:df:06:60:bc:13:31:51:ed:42:
                    5a:e8:9d:08:34:14:0a:e4:87:3c:d0:04:71:e6:54:
                    be:e1:14:ee:18:0b:b8:bf:db:57:80:86:15:be:68:
                    80:bd:40:8d:07:10:dd:b3:27:05:8c:d7:47:68:ae:
                    6d:3c:ae:f3:73:ce:b5:32:18:b8:83:54:99:3a:58:
                    63:b7:53:4e:12:1f:34:15:c6:f0:d9:c8:c1:81:24:
                    a8:e7:4f:1a:44:19:db:95:5a:50:41:7e:f8:8a:d6:
                    77:76:3c:5c:f1:23:62:f2:2d:a5:a5:7a:11:b6:07:
                    4a:e9:d5:aa:6b:4d:f0:f8:8e:76:d8:b8:ed:fd:be:
                    29:7f:fe:a1:9b:67:ae:43:f5:9a:68:80:37:ef:04:
                    10:dd:23:50:8b:7f:43:09:41:6f:8e:26:81:6a:2c:
                    09:d5:c8:a1:68:b2:a9:c3:9c:ed:b1:2a:41:f1:4e:
                    d2:c6:3c:ec:6c:dc:25:57:52:49:8f:54:90:d1:c3:
                    5f:fb:51:50:7e:15:a6:9d:17:30:36:ba:86:c1:40:
                    a7:3a:0d:f1:39:3d:63:4b:73:a2:6e:3e:a3:ea:2f:
                    0a:06:a8:09:ef:21:b0:1d:5a:55:12:a5:b1:e0:d2:
                    f1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:83:F5:E6:FB:64:C9:3C:20:ED:D8:FE:F2:21:63:89:C7:46:5C:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/fee1156b-27fd-3467-ac94-97fd20d994ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.49.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:86:bb:ca:57:9e:b4:ed:e2:31:21:52:35:b4:d5:5c:2e:43:
         eb:8e:5e:9d:11:b7:80:bb:84:db:dc:a0:e6:b5:10:ba:ea:3e:
         ab:75:10:2b:3c:1c:d7:f6:0e:ff:08:25:c4:1c:b9:49:1e:7e:
         84:ca:f1:3d:8d:55:13:54:f6:4d:8a:52:74:85:4d:c1:b0:bb:
         36:09:40:58:e3:b5:90:20:1f:54:bd:10:ea:52:ef:57:a2:7c:
         7b:69:22:9a:4b:d5:4e:a5:f6:ef:39:db:5c:0f:d2:34:b1:6b:
         55:c8:2a:9b:17:fe:f1:c5:ed:ef:e7:9e:e5:24:4d:fb:4a:fc:
         14:9c:e5:a4:75:30:1f:ba:df:3a:58:53:f3:90:e8:7c:a2:0f:
         a2:45:a3:bc:3b:0c:58:1f:3f:69:71:2b:56:6f:e4:e0:c9:bd:
         9e:1c:5d:6b:fd:69:f8:af:12:30:b3:81:cc:93:15:97:e4:bf:
         82:0c:4c:f7:05:9d:bf:ef:9c:f1:09:93:7d:89:bb:80:bc:0b:
         7e:7c:e4:4b:0b:45:74:e7:aa:5e:d4:9d:d3:3d:03:ff:f5:b0:
         bb:b3:2f:9c:e2:6c:e4:98:54:14:ef:06:ea:f0:25:d1:d6:3c:
         07:56:a2:41:2c:fd:a4:45:83:ed:b9:3e:36:12:0e:fb:e2:44:
         b8:6b:0a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:01:10 2026 by rpki-client