Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/95103d67-8389-3cd3-89db-7f643e7d9cd5.roa
File:                     95103d67-8389-3cd3-89db-7f643e7d9cd5.roa (raw, json)
Hash identifier:          B+sr/Ln5xrjbxYZ/7MNP1sWv4h9NUM8rG7WylDzY3jM=
Subject key identifier:   6D:A5:F2:88:EC:3F:00:E1:E9:36:4E:D7:B7:79:4C:21:A3:95:EC:12
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F4328584D0D424B2880313A7B7B1D0260
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/95103d67-8389-3cd3-89db-7f643e7d9cd5.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     203724
IP address blocks:        131.229.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:4b:28:80:31:3a:7b:7b:1d:02:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=bc956330-d797-4e2d-892f-65464d09e943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9c:6b:bf:75:f2:6c:aa:34:34:cc:ac:ba:72:
                    4f:d1:bf:dc:af:c1:22:2d:f7:c0:78:cc:60:e3:49:
                    44:07:0a:a4:2c:00:b4:75:dc:12:a3:97:a2:64:0c:
                    4b:eb:e5:22:05:e3:d1:9d:31:c4:bf:08:e6:73:26:
                    2b:e6:d2:a8:e4:99:11:04:4d:0b:a2:3e:59:78:10:
                    4f:30:0c:56:ad:a4:7f:aa:78:62:34:c0:88:aa:cf:
                    e6:62:a4:e6:1a:52:d8:81:18:b3:96:8a:07:94:41:
                    00:2b:77:4b:8c:e4:34:4f:30:12:c9:df:4b:89:68:
                    e4:a4:88:6a:9c:01:fd:f9:51:42:3f:40:0e:88:12:
                    5e:97:6c:52:98:b7:24:84:80:db:36:6f:d3:29:5b:
                    36:2d:03:85:52:46:89:cd:85:08:26:07:d4:7f:67:
                    80:7f:64:96:18:c4:4d:69:c5:db:85:71:da:54:1c:
                    a7:d9:4e:dd:90:2f:07:c9:0b:e0:ac:4d:01:e9:9f:
                    28:28:98:dd:dc:db:e6:c6:3e:22:af:0f:be:40:22:
                    8a:50:85:a6:a1:7d:72:dd:1d:8a:15:1e:31:6c:53:
                    74:9d:ec:5a:41:55:b9:dd:27:2c:ac:c6:8b:9f:20:
                    63:30:8d:a8:1a:f6:22:fa:6e:2d:54:b1:e7:84:4a:
                    ac:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A5:F2:88:EC:3F:00:E1:E9:36:4E:D7:B7:79:4C:21:A3:95:EC:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/95103d67-8389-3cd3-89db-7f643e7d9cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:e4:52:54:02:62:26:64:76:bb:06:e4:56:a2:23:a8:2b:29:
         a6:32:11:0b:e2:be:e2:30:2c:3b:58:d7:af:30:57:40:86:44:
         57:a5:49:d9:e0:ae:9b:e5:4b:1d:42:b8:1c:7e:24:ab:b8:a0:
         6a:35:1d:31:5b:08:4b:7f:82:67:91:45:e7:c5:5d:ea:77:12:
         69:3e:3a:e6:74:6a:05:86:a9:b5:58:13:66:d9:7c:d6:c0:fa:
         7a:80:8a:9f:8a:79:fb:55:66:9a:50:28:3a:c0:c2:16:13:fd:
         96:2a:a1:2a:f3:ff:3b:6f:40:0e:63:e9:91:6a:48:5f:cc:9d:
         94:bc:f2:2a:95:8d:64:fb:7b:d0:96:c5:67:d7:d4:86:97:59:
         e0:c1:47:d6:0c:27:77:42:79:e8:73:a0:99:ad:fd:3b:a2:b0:
         20:50:50:fc:54:8e:a1:60:cb:4c:a2:9b:5b:43:f9:84:7d:da:
         89:6a:7c:61:6a:14:68:f6:2a:0a:b3:e7:5a:0c:45:31:6c:d2:
         51:bd:18:de:35:b6:85:72:9f:c2:eb:f8:f4:4d:78:84:d1:33:
         6c:60:27:17:b4:47:c5:09:9d:e5:77:9c:f0:6e:07:1b:6b:8e:
         53:30:65:1d:58:67:ec:2d:aa:b4:32:dd:fa:a3:37:86:3e:a9:
         76:34:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:21 2026 by rpki-client