Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e3867801-adb1-3f01-b7b4-25206f7298ca.roa
File:                     e3867801-adb1-3f01-b7b4-25206f7298ca.roa (raw, json)
Hash identifier:          TpTwLbG1AvF5E63hb22qvII1yLwt1BpuykEGbHd6zeM=
Subject key identifier:   47:7B:7D:26:28:34:D0:89:EC:0F:29:6C:21:22:C6:6F:F8:4D:2C:10
Certificate issuer:       /CN=e734f405-fad0-4043-a254-832503e4ef89
Certificate serial:       010D0C9F4328584D44FA6687A6562D39D01045A0
Authority key identifier: B5:06:B6:CA:F2:D7:96:B6:E0:74:F9:A1:5C:5D:1F:43:ED:45:E5:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e3867801-adb1-3f01-b7b4-25206f7298ca.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     32115
IP address blocks:        131.143.76.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e734f405-fad0-4043-a254-832503e4ef89.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e734f405-fad0-4043-a254-832503e4ef89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:66:87:a6:56:2d:39:d0:10:45:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e734f405-fad0-4043-a254-832503e4ef89
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=4f16003b-23b9-4a30-8eb4-759563d7fdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:4d:07:ba:1e:0b:a0:4b:b9:7e:a6:08:67:
                    b0:89:2c:1d:07:e4:9b:fe:a4:71:ed:0a:06:0f:5f:
                    20:92:3e:d1:7d:d1:96:4a:ee:83:15:ee:18:16:d4:
                    ea:c0:69:47:04:ea:dd:ba:68:af:cf:07:54:76:2a:
                    25:b7:6e:05:26:f9:cc:3f:c2:19:c4:b7:74:a4:5c:
                    13:2e:92:f4:b4:36:44:ff:6c:c3:03:d9:21:a5:9a:
                    56:c3:90:87:05:ad:a7:44:55:6e:dd:35:2e:f8:bc:
                    89:ac:77:bd:5d:ad:1e:67:e8:8b:ad:53:34:74:f4:
                    f9:a0:bc:39:72:00:07:b0:f4:a6:28:b3:2c:e3:aa:
                    b0:58:cf:79:59:dd:85:c4:b5:de:e1:b2:4e:55:75:
                    0c:94:c7:8f:b7:a4:1f:f5:08:75:e8:ff:8e:1d:4c:
                    7f:59:82:ec:30:80:3d:b3:91:c9:59:dd:ce:5b:fc:
                    45:0c:f5:5b:15:bd:d6:78:73:d6:e6:4e:b0:e8:9e:
                    b3:31:c6:8f:e7:9d:be:fb:d1:4d:d7:0f:de:c1:9a:
                    66:78:d5:e8:3e:ab:94:a3:c2:0e:d7:3e:fa:4c:0b:
                    ad:b6:0e:47:35:db:b4:60:90:79:ae:25:6a:14:cd:
                    c1:d1:68:93:14:34:ab:34:f2:8c:6a:6c:33:1b:0e:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7B:7D:26:28:34:D0:89:EC:0F:29:6C:21:22:C6:6F:F8:4D:2C:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e3867801-adb1-3f01-b7b4-25206f7298ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89/e734f405-fad0-4043-a254-832503e4ef89.crl

            X509v3 Authority Key Identifier:
                keyid:B5:06:B6:CA:F2:D7:96:B6:E0:74:F9:A1:5C:5D:1F:43:ED:45:E5:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/e734f405-fad0-4043-a254-832503e4ef89.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:c5:73:18:57:00:d8:dc:52:29:8a:60:67:81:83:48:ee:04:
         6f:d5:eb:3c:7b:d0:9e:fb:7c:fa:71:a5:0f:da:70:8f:0a:0f:
         c8:fa:37:18:0d:5c:06:ac:66:0f:3e:dd:fd:87:92:86:ec:1d:
         7a:fa:88:d3:be:78:f5:fb:3a:cc:92:28:52:01:c0:a2:75:b3:
         29:1e:14:a2:5b:29:bc:d6:bf:7b:83:79:99:ba:26:10:55:1c:
         97:25:1f:41:48:07:df:92:d7:15:18:64:3d:85:86:18:aa:fb:
         f7:4d:d5:55:a1:ea:f0:31:65:72:b6:4a:05:90:cf:c4:7d:ae:
         ca:51:83:05:88:ee:2a:66:82:74:48:b5:c0:4d:bb:ab:03:85:
         5b:25:84:00:78:be:e5:75:c0:75:45:cc:65:b6:eb:fc:60:0e:
         4f:e5:3d:96:a7:54:01:c1:bb:9a:a2:b5:6a:08:b1:32:46:f6:
         01:6d:af:b1:5a:e9:1d:f2:6b:36:8b:f5:03:d8:f0:29:ca:b6:
         d2:e2:2c:88:16:45:89:37:6f:57:a2:33:8d:76:be:9c:c6:98:
         f9:46:0d:93:04:81:3f:75:46:77:81:05:f2:ff:6a:63:b0:9a:
         0e:2c:98:fd:39:d3:3e:3b:e3:69:c3:2b:e5:fd:b1:7b:c6:e7:
         b0:e2:e6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:13:35 2026 by rpki-client