Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/2c3400f3-428d-306a-a621-4e348aaf97ff.roa
File:                     2c3400f3-428d-306a-a621-4e348aaf97ff.roa (raw, json)
Hash identifier:          688RiviUHptyquDEdweud0T2CQiB/KNA8fgOuws7CLw=
Subject key identifier:   56:74:91:98:9D:90:27:BD:77:5B:B4:89:DF:69:95:09:9F:92:1F:83
Certificate issuer:       /CN=1809326d-8c91-47b1-be9a-e8e2c68d488a
Certificate serial:       010D0C9F4328584F4974EF7B9FCEDACB0B06EE00
Authority key identifier: 42:27:CA:97:E9:B8:5A:7D:79:9F:3A:27:26:88:D7:11:D7:9B:AB:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/2c3400f3-428d-306a-a621-4e348aaf97ff.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401270
IP address blocks:        130.12.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/1809326d-8c91-47b1-be9a-e8e2c68d488a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/1809326d-8c91-47b1-be9a-e8e2c68d488a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:74:ef:7b:9f:ce:da:cb:0b:06:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1809326d-8c91-47b1-be9a-e8e2c68d488a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5b64ea69-baf7-4082-9490-e4ae95916086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:52:67:33:df:7b:bb:ae:c5:4f:74:54:90:d9:
                    94:6f:7b:c9:86:6d:18:5e:59:d7:96:60:62:a3:6f:
                    87:60:87:4d:c4:af:d6:d1:45:ec:cf:97:10:17:a7:
                    69:20:84:e4:21:02:b8:bf:06:95:17:ef:91:d1:c2:
                    98:a1:d4:47:01:1d:09:8d:fe:96:c9:3a:11:2a:db:
                    de:e5:53:5a:b1:12:f5:ce:a2:86:1f:33:cd:fa:be:
                    60:51:39:77:6a:e5:1e:9a:7d:d4:e5:8a:c3:92:ad:
                    8f:ff:7a:37:eb:3d:ac:41:86:4c:3a:ed:de:b5:cb:
                    1b:bf:de:e8:e9:43:43:cc:b0:23:61:2c:f4:67:df:
                    35:fc:98:22:fe:c1:42:88:c1:26:19:5e:19:da:83:
                    2b:1a:47:73:30:f4:73:1a:f3:37:f2:21:b7:c2:a9:
                    b3:ab:b1:80:7f:2d:96:ec:06:7e:9c:89:d1:7c:7e:
                    26:59:d2:62:b0:ec:8e:a7:96:fa:23:55:2f:d4:cb:
                    51:4c:5f:d7:b3:91:fc:7c:7a:f2:2f:9c:71:78:c9:
                    89:95:18:38:86:c1:01:c7:37:d6:2a:b7:32:b3:f7:
                    c3:3a:13:a6:cf:f1:84:5f:50:55:b6:1b:5d:4d:9e:
                    2a:ea:42:a1:66:02:ae:a5:ae:12:52:f9:f7:fb:78:
                    85:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:74:91:98:9D:90:27:BD:77:5B:B4:89:DF:69:95:09:9F:92:1F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/2c3400f3-428d-306a-a621-4e348aaf97ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a/1809326d-8c91-47b1-be9a-e8e2c68d488a.crl

            X509v3 Authority Key Identifier:
                keyid:42:27:CA:97:E9:B8:5A:7D:79:9F:3A:27:26:88:D7:11:D7:9B:AB:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1809326d-8c91-47b1-be9a-e8e2c68d488a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:41:ea:40:b9:ea:79:f9:2b:d5:b5:62:1b:f7:65:b5:13:a1:
         ca:05:39:70:c5:03:18:56:6b:d0:25:81:91:78:7b:74:bb:aa:
         84:65:c5:fe:54:9a:94:29:64:47:80:26:56:e2:74:3e:c0:ab:
         a8:c0:b4:13:ea:f1:7e:77:8c:24:72:f1:9d:0e:57:b9:18:1d:
         ca:2b:3d:bc:34:49:37:00:40:ff:ca:ad:9f:33:60:a1:60:bb:
         81:cb:f0:24:ca:3c:8c:91:b9:13:49:a5:73:a4:38:f0:93:e1:
         5d:6b:2e:4f:55:a3:95:a4:01:66:89:49:5f:87:9d:0d:1a:3f:
         d3:09:60:d2:f9:e9:ef:99:71:63:37:55:5d:ba:cd:99:cd:24:
         e3:f5:4e:4e:3e:0a:60:11:9b:44:e7:d4:50:7c:b4:54:15:bd:
         bf:fa:b9:e8:4a:52:2c:aa:cf:f4:4c:29:ae:3e:b1:24:70:56:
         73:46:ec:39:11:df:9d:fc:d2:02:54:b9:54:75:21:57:b6:a5:
         74:26:59:2e:7a:f2:3b:54:6a:bc:93:b9:0b:2d:de:da:ec:b4:
         1d:08:03:ad:5c:87:1e:4b:bf:3d:08:b5:a2:f0:a4:59:f2:5c:
         a9:f6:44:2b:81:8c:c3:b4:a4:d2:8c:cc:31:60:72:19:55:63:
         58:11:f1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:35:38 2026 by rpki-client