Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/6d121940-07bf-3da6-8428-068bc37bce7c.roa
File:                     6d121940-07bf-3da6-8428-068bc37bce7c.roa (raw, json)
Hash identifier:          SIKHmyoteRU2qHPmfZZF3TFbO5fKDgBN2E2QE1Xdc60=
Subject key identifier:   38:A8:61:21:41:16:A7:93:F7:15:A3:EE:33:2D:45:7F:E3:1E:E8:D8
Certificate issuer:       /CN=18291d4d-da48-4b25-84d6-3df88f2fed54
Certificate serial:       010D0C9F4328584D9FB55F9C7CBAA55041122EC0
Authority key identifier: 33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/6d121940-07bf-3da6-8428-068bc37bce7c.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     376
IP address blocks:        132.210.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:5f:9c:7c:ba:a5:50:41:12:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18291d4d-da48-4b25-84d6-3df88f2fed54
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=158f1e39-b925-471a-b7ee-a3715f8ce21d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d4:0c:e8:23:03:c4:39:07:08:4c:8a:4d:6e:
                    cd:fb:e2:d8:25:50:82:40:32:2f:47:0b:08:ed:6f:
                    1b:0a:41:a5:47:69:0f:d2:41:bd:e9:a1:1f:bd:6f:
                    01:e8:fa:51:b3:b2:9a:59:53:56:70:c6:e2:5a:6d:
                    7c:3e:48:8b:0d:33:77:78:b6:12:01:3e:dd:1a:43:
                    ff:4c:dc:1e:ab:02:93:40:9d:9e:43:91:54:e5:ef:
                    d0:cd:f3:43:a6:3b:9f:bd:5b:3f:de:14:9a:6b:d0:
                    1e:36:28:ed:4c:87:f6:8e:fa:39:22:cd:bf:42:21:
                    89:d5:fd:b9:04:b0:f5:6f:78:e4:64:7a:62:73:25:
                    ea:ed:60:c9:36:5b:9b:6a:cb:fd:6e:a3:27:17:a2:
                    d9:77:b5:a5:bc:0d:1d:74:68:5d:28:02:cb:62:cf:
                    e1:68:e8:a6:43:33:60:fc:50:73:7f:58:31:b5:7d:
                    86:7a:ea:16:47:fb:04:aa:fd:db:2e:e7:73:5f:82:
                    ce:23:c8:f7:a2:c4:20:23:ab:44:b6:2b:a9:10:1f:
                    92:93:e0:ed:d5:e9:ca:0f:8a:b4:ca:b7:24:12:4c:
                    70:60:22:22:68:0f:92:3a:88:88:19:d1:b8:95:86:
                    af:38:1f:99:0b:28:1a:91:dd:a1:e4:91:ad:51:61:
                    ae:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A8:61:21:41:16:A7:93:F7:15:A3:EE:33:2D:45:7F:E3:1E:E8:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/6d121940-07bf-3da6-8428-068bc37bce7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl

            X509v3 Authority Key Identifier:
                keyid:33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:fd:9d:02:dd:80:fc:fc:5d:63:c8:f2:0f:0b:6b:d0:83:15:
         d3:2c:d5:fb:ed:86:13:54:10:e2:cc:3b:1d:a5:b7:1e:83:d2:
         5c:23:5c:0f:bf:85:5a:6d:d3:b5:8b:6b:af:6a:d3:00:e8:f7:
         82:f9:21:60:89:d6:2e:70:ee:e6:32:ff:8d:a9:36:a4:c1:12:
         d2:30:eb:d0:2f:03:6d:d2:66:1e:9e:53:ee:c4:11:79:6d:89:
         e2:fd:52:b1:78:ed:6a:b8:07:59:80:13:58:fa:e6:1e:5e:a5:
         cb:52:aa:01:fb:d5:61:85:be:b5:c4:27:76:51:d2:f2:ab:c0:
         2e:93:e7:6d:a7:b0:cc:5c:af:bc:62:9f:cc:08:a9:f4:5c:39:
         4d:55:5b:a0:72:47:59:f3:ca:6f:c5:14:65:f5:77:47:94:f3:
         b7:75:94:47:8c:32:32:b4:19:3c:0d:bf:d7:63:a2:46:65:ab:
         45:75:88:3c:ad:0e:31:c7:c6:9e:ba:d2:42:f7:02:d6:5f:ca:
         7a:91:94:dd:5f:14:73:5d:81:8f:0d:90:8e:62:65:45:ff:9c:
         9e:0b:ab:8f:e0:ef:ef:45:26:23:5e:5f:c1:b1:f9:e3:ff:9d:
         77:2d:19:1c:f8:db:1c:cf:4a:2e:44:ef:75:28:5c:71:59:b6:
         d6:e1:a7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:46:27 2026 by rpki-client