Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/e8deb396-18f0-30fe-ba4e-3f30bc472371.roa
File:                     e8deb396-18f0-30fe-ba4e-3f30bc472371.roa (raw, json)
Hash identifier:          hFUNrqhJcJaFdMzQ7snMnZWGmpYY40X69XLow7w9PwQ=
Subject key identifier:   98:B7:FE:B4:49:B4:74:96:B3:D2:C2:0F:DD:80:FE:6E:99:4D:05:3D
Certificate issuer:       /CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
Certificate serial:       010D0C9F4328584D91C01DDB5C0F46B85493A7C0
Authority key identifier: B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/e8deb396-18f0-30fe-ba4e-3f30bc472371.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     49544
IP address blocks:        130.254.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:1d:db:5c:0f:46:b8:54:93:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9030ea5-31a0-4bad-bebd-2fffbce27add
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=d58c6515-7d6f-45fc-a6da-962948c62c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:2a:38:bd:3c:fe:32:d3:d5:6c:ad:25:39:
                    d6:32:09:e4:aa:5b:d8:7d:81:7b:ed:25:d9:c3:ef:
                    57:13:c9:4f:bc:11:83:c9:95:04:0d:a4:5f:0c:5c:
                    06:8e:5d:d7:6f:c8:37:39:23:28:3b:d1:70:31:ce:
                    22:6f:32:89:5c:ad:ed:ee:09:45:9e:14:52:70:db:
                    a9:66:a8:70:f3:79:58:53:aa:0c:34:99:e5:33:ea:
                    00:1b:bf:d5:cc:ac:49:6c:d0:33:ae:4e:f6:71:a3:
                    fc:6e:63:37:02:71:33:a3:ca:f0:56:e8:30:2d:54:
                    fc:ea:12:08:a4:48:3b:02:9f:2e:9d:f6:50:0a:f5:
                    b1:36:04:39:2b:c9:7b:bb:cd:b0:63:7f:8b:05:0f:
                    c9:97:1c:49:f7:3f:31:ac:b1:2d:7f:8d:94:f2:d5:
                    ad:f0:e2:ad:78:fb:b3:1b:05:67:71:5a:bd:53:fb:
                    22:5b:fe:d8:73:6c:85:76:65:c4:3c:95:f7:9c:d3:
                    2f:03:c0:80:ca:7d:8c:a7:4d:56:e6:e4:3e:ec:19:
                    d5:69:1e:dc:51:db:2d:02:6c:a9:78:ed:0f:a8:87:
                    95:d5:0f:ce:94:ce:0b:66:f7:fb:96:a2:07:a4:88:
                    bd:92:27:b0:0b:40:ac:4a:c0:3a:93:db:5a:d3:28:
                    dc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B7:FE:B4:49:B4:74:96:B3:D2:C2:0F:DD:80:FE:6E:99:4D:05:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/e8deb396-18f0-30fe-ba4e-3f30bc472371.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl

            X509v3 Authority Key Identifier:
                keyid:B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.254.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:65:f3:3d:4a:01:9e:3f:b6:ce:ca:43:84:ef:28:62:61:9b:
         3c:5f:ec:36:f8:fd:a7:97:97:a3:b9:70:4e:a8:b2:fb:90:f4:
         31:63:7a:86:d8:6c:cb:4d:d0:ae:3c:52:e6:99:11:7c:89:7c:
         89:eb:a9:f2:b0:0b:cc:31:45:94:65:bd:66:d3:f1:25:7b:4d:
         f7:ad:34:bf:f0:70:0b:54:99:fc:11:38:68:91:8d:62:fa:a8:
         f4:f1:19:67:66:75:87:63:6e:47:3d:3c:c5:2c:30:26:23:fa:
         08:83:71:03:b7:4b:a8:c1:fc:b6:dc:79:7d:ec:a4:f9:57:33:
         e0:46:8d:6a:10:56:97:d9:96:c8:8c:d3:c6:75:87:a5:0b:e2:
         6d:2c:48:b0:b7:df:a0:01:31:11:29:71:42:c8:de:09:4f:8e:
         b9:3e:03:42:24:e0:4d:e5:c4:07:9b:39:57:dd:90:0b:01:47:
         7b:57:e3:43:6f:bd:e0:59:df:09:86:c3:96:2d:ec:82:72:5e:
         08:e8:db:47:cd:fa:c7:2c:a1:b3:6b:19:85:eb:7e:66:c3:7d:
         cc:62:44:38:4f:cc:b3:5f:7b:0b:9a:c1:f0:a3:c5:b4:51:94:
         da:bc:07:e7:25:74:13:79:43:31:b7:38:94:ae:99:66:0e:a3:
         16:ca:3b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:27:19 2026 by rpki-client