Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/31824140-99b3-3541-ac74-44cb6df32915.roa
File:                     31824140-99b3-3541-ac74-44cb6df32915.roa (raw, json)
Hash identifier:          CBFJui8pI22Lv+BjMOxQ5MGWS1GAjzdShxWylqtoJ4o=
Subject key identifier:   7F:F9:5C:03:C8:38:F1:56:EC:66:2B:39:70:A8:05:CB:DD:44:96:1B
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584DC995AF3988D77E856A0550C0
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/31824140-99b3-3541-ac74-44cb6df32915.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     11808
IP address blocks:        129.101.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:af:39:88:d7:7e:85:6a:05:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=d73b8e11-5c5b-4f3f-a65f-ec9e2f232944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fb:ad:79:25:0b:a2:07:65:28:2a:4d:18:b9:
                    8e:fd:08:e3:61:95:c0:da:76:2a:5d:86:1c:51:49:
                    2b:c8:ef:af:f6:6c:59:a6:f7:5a:3f:f5:61:31:26:
                    42:4c:57:a0:8e:11:ca:81:fe:5c:b0:c6:4d:b2:91:
                    0e:c6:3a:7c:23:2c:9d:64:71:a9:4e:67:9b:d2:7a:
                    ab:80:5c:ea:c4:6a:87:56:44:ee:84:3c:b2:a9:79:
                    22:b9:1d:3c:20:42:3f:36:23:d4:7d:cd:39:f2:7e:
                    ff:d7:3a:fc:2f:ef:24:d4:46:c0:c4:2a:a6:e5:0e:
                    62:a9:72:39:01:b9:e8:37:99:42:ac:28:49:ce:5b:
                    b9:de:7d:75:09:f3:71:2f:71:b6:b5:72:2e:01:35:
                    47:e1:f5:59:db:91:8c:46:c6:07:e5:ea:36:a7:bb:
                    0e:9b:0d:a8:f4:8d:d4:bb:14:21:8c:7c:93:fc:8e:
                    9f:8e:7e:b4:38:74:1d:d7:d4:2b:48:7f:f3:4d:35:
                    9f:75:c9:a3:3e:7f:be:4c:20:10:ec:2a:e6:2b:47:
                    11:62:6a:ae:52:b4:14:5d:7a:39:d3:3b:c3:a5:ca:
                    41:80:45:f3:29:95:c6:12:a2:ff:8f:6d:47:de:c0:
                    5a:9a:1b:95:bd:c0:44:03:94:d1:2c:b2:f0:8f:6e:
                    d3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F9:5C:03:C8:38:F1:56:EC:66:2B:39:70:A8:05:CB:DD:44:96:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/31824140-99b3-3541-ac74-44cb6df32915.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:2f:81:e8:0c:79:c8:10:b3:3b:fd:79:dc:3c:99:f2:6a:5a:
         69:87:86:64:c8:6e:84:36:21:09:ee:c1:2e:02:84:92:ed:a2:
         75:6a:c0:3c:63:c8:df:3c:69:21:e2:05:3d:5d:1d:07:8f:60:
         68:b0:ef:00:43:b5:30:12:e4:b4:14:a2:8d:de:a0:87:8e:c2:
         c7:26:a1:af:75:1e:e7:e4:f4:f0:16:a3:df:41:04:66:31:ac:
         1a:1f:60:0c:cf:b6:fc:c1:4f:aa:06:a9:51:34:76:2e:33:27:
         56:97:12:e9:21:3b:df:c0:2a:9f:6f:95:3b:a4:ed:f9:01:92:
         9b:cb:2b:cf:df:17:1d:9b:81:36:88:41:b3:f3:11:e4:69:8a:
         34:ad:f1:90:f9:fc:4e:9f:02:4f:01:9f:34:96:3b:1a:46:c5:
         b8:05:f8:5d:09:a0:d0:7d:82:5a:8a:4b:d1:0d:dd:19:52:44:
         78:95:bc:7a:aa:22:de:cf:a4:c9:b2:e5:19:52:4a:9d:ef:7d:
         3c:ac:65:67:ba:f1:1b:00:5d:ed:3e:6e:ed:88:8c:45:69:1c:
         a3:6c:89:16:88:cc:e5:8a:89:a0:ff:94:e1:15:d3:2f:30:d4:
         67:88:1d:8d:3f:b0:4b:dc:64:32:81:d1:2b:d2:a8:58:3b:a3:
         a5:51:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:04:03 2026 by rpki-client