Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/240db515-7057-3fe1-a718-619068b0ca2c.roa
File:                     240db515-7057-3fe1-a718-619068b0ca2c.roa (raw, json)
Hash identifier:          Mp31FkIjOrrZcg2CrgwkC40o4qirutrAaQ89J4RVPr4=
Subject key identifier:   ED:18:27:BF:B8:DD:7A:17:D1:D3:58:FB:49:3A:2E:CD:AF:7D:63:A6
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584DD005B5F677F6936FF50A0380
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/240db515-7057-3fe1-a718-619068b0ca2c.roa
Signing time:             Tue 12 May 2026 20:21:13 +0000
ROA not before:           Tue 12 May 2026 20:21:13 +0000
ROA not after:            Mon 10 Aug 2026 20:21:13 +0000
asID:                     198969
IP address blocks:        130.254.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:05:b5:f6:77:f6:93:6f:f5:0a:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: May 12 20:21:13 2026 GMT
            Not After : Aug 10 20:21:13 2026 GMT
        Subject: CN=73ef2711-9cae-4f6b-91f0-7e7347cafe2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:53:10:30:80:6e:5e:0d:dc:90:42:4b:89:79:
                    96:2b:a3:0d:8a:28:c9:3f:9c:db:dc:09:db:7a:b0:
                    23:ba:43:ad:62:fc:21:20:98:7a:4f:53:05:b5:72:
                    00:e4:92:71:e3:2d:83:cf:b6:00:26:ba:26:d6:ad:
                    67:bf:71:60:07:08:c1:67:be:c9:80:2b:2c:68:e6:
                    15:3a:49:ac:95:37:93:da:d2:70:07:63:52:8c:b4:
                    59:40:87:9c:f0:ac:df:40:38:7d:7d:30:74:08:69:
                    18:1e:05:c9:29:e7:3f:72:80:b7:48:33:57:12:aa:
                    62:17:33:5a:35:4d:6e:70:ab:90:c1:78:38:14:72:
                    3b:0c:96:1b:9a:e5:8c:4d:18:4a:54:97:fe:61:a9:
                    21:60:35:ff:c6:60:cd:f3:8c:20:77:02:02:ff:0c:
                    a5:27:bf:49:67:10:28:90:9a:02:b0:13:e7:f0:f2:
                    4b:48:e7:e3:99:f3:59:a9:00:3b:9e:27:a7:87:1b:
                    65:d1:a3:ac:8e:30:50:45:47:c3:3d:e7:a6:69:75:
                    34:33:6e:17:77:1f:97:e5:04:d2:c6:6b:f2:56:98:
                    fe:59:79:8b:22:3c:be:7f:5b:55:8c:ed:6e:6d:a4:
                    33:18:50:db:e4:95:be:af:04:83:fd:d2:25:d9:fb:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:18:27:BF:B8:DD:7A:17:D1:D3:58:FB:49:3A:2E:CD:AF:7D:63:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/240db515-7057-3fe1-a718-619068b0ca2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:46:41:4b:9d:ea:fa:07:82:f8:a8:62:d5:d9:74:b7:cc:65:
         06:db:d6:fa:db:cf:bc:0c:00:26:b0:d6:90:f7:da:5c:51:a2:
         6b:73:96:77:0e:93:f6:7a:ec:0c:ed:aa:2b:03:bd:e6:98:55:
         61:fc:e5:20:e5:c9:85:c2:7e:30:14:ab:4b:1d:59:b8:a2:c1:
         e2:37:61:f1:89:99:89:c2:f6:6d:eb:c5:c9:e0:d1:81:f0:57:
         a4:13:d5:f6:76:b7:d3:c0:55:cb:36:ac:75:43:ec:16:5c:4f:
         68:f5:72:0c:e3:38:07:29:af:a6:b7:30:64:2e:68:d8:40:54:
         0f:d8:be:df:d5:b7:61:34:53:ff:d8:3e:21:71:e7:90:7b:1f:
         79:01:ab:ad:2d:2e:d1:9e:b2:d4:2d:9f:18:8f:b9:bf:c4:18:
         e8:22:2a:4a:62:47:aa:db:4e:5e:3f:fa:5b:33:13:a1:68:e5:
         33:d4:f6:61:3c:d8:af:4b:4f:d9:03:78:40:8f:6d:cf:12:ae:
         ca:ee:9e:1f:52:2d:30:91:05:1c:14:8d:3a:7e:74:51:47:57:
         75:2a:41:e2:c0:f6:f5:87:f8:2e:ae:5c:80:07:7c:db:ea:bf:
         06:8c:6e:16:12:8b:10:5e:3c:22:e8:2f:f8:13:17:f4:15:52:
         35:62:a9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:27 2026 by rpki-client