Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c3a7b89f-b4b9-30c7-873a-1f9523b2a57f.roa
File:                     c3a7b89f-b4b9-30c7-873a-1f9523b2a57f.roa (raw, json)
Hash identifier:          RMxPMJBiXYgwQL7uivwsGSH+ovpqCBRLD/6OpRaavGc=
Subject key identifier:   2E:D9:60:C0:98:85:A8:0A:4F:61:EA:8D:0E:51:31:28:96:4F:DA:42
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584DB075913E024A9C16041E9180
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c3a7b89f-b4b9-30c7-873a-1f9523b2a57f.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     834
IP address blocks:        170.130.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:91:3e:02:4a:9c:16:04:1e:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=cefce2a8-b575-4b65-a93b-ef6c14aefa37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:e3:ec:35:94:81:09:62:d5:af:b5:7f:9c:
                    6a:1a:75:3e:3c:ad:2b:2e:96:85:b8:6b:2b:26:82:
                    1e:ab:b2:34:c3:95:b7:88:1b:6d:5f:a9:51:69:21:
                    98:c4:5d:87:35:51:12:6a:7e:62:6b:b1:f7:d7:2e:
                    78:0f:7d:9c:bd:81:c6:0e:ae:18:36:6b:f6:cb:8c:
                    6f:d3:85:8a:10:19:6a:a3:a9:7f:b5:a6:62:e3:f6:
                    f6:d1:36:e4:d6:42:05:7b:ad:41:01:3f:95:5d:dc:
                    31:0b:1f:7e:5a:3f:7a:c3:55:ee:d9:76:9c:e6:9d:
                    8b:52:55:37:b8:7f:ed:66:8b:c2:69:af:2d:9d:56:
                    55:a7:8c:1b:4c:09:b4:74:47:1c:d1:5e:e5:f8:67:
                    62:fe:87:b2:8e:d5:6d:ca:f0:41:ea:55:dc:74:d5:
                    cf:e0:76:af:e1:c5:a5:f0:70:fd:44:ef:2c:8b:6b:
                    47:3b:2b:0f:0e:c4:81:5c:99:72:28:48:b7:d1:01:
                    80:b6:04:bb:e3:e4:3e:ad:f6:02:a0:28:48:e5:7a:
                    0e:8d:d2:e1:c7:04:c9:d1:96:2d:32:2e:04:7a:ec:
                    ae:19:0c:4d:fc:1b:1d:27:91:b8:83:b6:6a:78:06:
                    8e:f1:ec:ff:9c:71:0c:3f:52:cd:b1:2a:34:10:35:
                    82:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D9:60:C0:98:85:A8:0A:4F:61:EA:8D:0E:51:31:28:96:4F:DA:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/c3a7b89f-b4b9-30c7-873a-1f9523b2a57f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.130.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:2a:11:9f:cc:39:38:73:86:60:21:fc:a0:70:d0:5f:93:7c:
         d3:d4:b2:25:2c:43:c9:af:0e:85:c4:e1:d2:6c:38:45:47:4b:
         d0:38:33:61:18:3b:a8:fd:9d:ab:d0:5e:5e:c7:a4:ed:e2:fd:
         9d:17:6f:47:3c:16:af:58:e3:6d:6c:4d:46:cb:49:06:10:0c:
         b1:05:a5:04:29:d3:c5:88:f1:a5:d6:9c:18:49:0c:bc:87:2e:
         ac:aa:c8:81:2b:e9:d4:73:f5:c8:fb:04:b8:71:8b:57:b7:ab:
         70:68:ce:88:43:61:90:8b:7c:4b:06:d5:ce:30:ca:25:f1:1f:
         84:9b:84:a8:18:74:d5:f8:6c:78:79:bb:8a:6d:db:d8:55:c9:
         52:d8:c8:24:10:a9:fd:2d:31:5c:43:ef:db:5b:e4:4f:5b:90:
         34:80:76:89:dd:a8:47:38:fd:db:34:99:24:8b:d8:66:d8:66:
         ac:19:ba:7f:35:18:7f:38:df:95:da:24:e6:da:60:17:2e:04:
         3a:e9:0e:86:a2:6c:70:de:e3:d1:ff:81:85:a8:69:2e:29:d0:
         60:17:03:42:aa:f3:3b:df:6f:c4:21:f0:90:17:e3:40:1b:3b:
         4e:11:94:61:a6:04:de:9c:03:ab:c9:d1:ad:64:1b:66:70:83:
         df:76:cf:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:49:11 2026 by rpki-client